Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/YrjNRV-ZRghURyJogSrJkXbt02A.roa
File:                     YrjNRV-ZRghURyJogSrJkXbt02A.roa (raw, json)
Hash identifier:          BSTzv8C7wzBvxDCTMFe1OEsi9taFqBIcVihsQqfWZrg=
Subject key identifier:   62:B8:CD:45:5F:99:46:08:54:47:22:68:81:2A:C9:91:76:ED:D3:60
Certificate issuer:       /CN=23f87aa18dda6a5d48af80390b2827808cfef285
Certificate serial:       018CC42466330D9CA777C3095838D0A55CFF
Authority key identifier: 23:F8:7A:A1:8D:DA:6A:5D:48:AF:80:39:0B:28:27:80:8C:FE:F2:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_h6oY3aal1Ir4A5CygngIz-8oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/YrjNRV-ZRghURyJogSrJkXbt02A.roa
Signing time:             Mon 01 Jan 2024 08:29:28 +0000
ROA not before:           Mon 01 Jan 2024 08:29:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35112
IP address blocks:        31.24.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:66:33:0d:9c:a7:77:c3:09:58:38:d0:a5:5c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f87aa18dda6a5d48af80390b2827808cfef285
        Validity
            Not Before: Jan  1 08:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=62b8cd455f99460854472268812ac99176edd360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:63:85:a4:96:c5:4a:56:c6:73:95:c4:92:
                    67:0b:0b:b6:5d:2a:f6:34:d2:cf:23:62:64:61:cf:
                    99:55:c1:05:5d:0e:ad:25:b4:d9:db:68:97:e9:9a:
                    c9:58:ac:e8:fc:a9:89:e0:9b:fe:43:51:e7:e5:00:
                    c6:32:a2:7c:0b:04:27:8a:47:25:5c:2d:8d:a3:8b:
                    70:e8:82:85:9f:f0:f7:a2:c1:e9:71:89:42:20:db:
                    3e:a3:0f:5e:61:d3:ea:72:59:cb:a9:12:5e:ac:e0:
                    72:2d:c9:dc:8e:44:10:d7:c8:2a:ab:f1:66:40:5e:
                    dc:c9:56:39:ba:3f:86:79:29:87:97:a5:f4:67:04:
                    b7:38:43:1d:81:64:04:c5:6d:79:c6:03:45:25:49:
                    7e:cc:f5:c4:bb:0a:77:f3:35:27:df:44:2b:53:4e:
                    6e:9a:18:51:8f:26:a7:b5:5f:83:5b:23:e5:e7:31:
                    d7:af:3b:da:55:c5:6c:66:09:92:86:14:75:12:05:
                    2b:13:b8:d2:23:f6:8f:b7:c7:16:81:3e:9c:17:ff:
                    25:e7:e0:91:75:84:50:13:b3:db:f1:09:3c:01:ff:
                    74:f0:40:03:18:67:3f:86:66:1d:3c:fc:30:5d:57:
                    4f:0c:e8:74:4d:8a:09:2b:62:c9:c9:0b:13:d5:17:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B8:CD:45:5F:99:46:08:54:47:22:68:81:2A:C9:91:76:ED:D3:60
            X509v3 Authority Key Identifier:
                keyid:23:F8:7A:A1:8D:DA:6A:5D:48:AF:80:39:0B:28:27:80:8C:FE:F2:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_h6oY3aal1Ir4A5CygngIz-8oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/YrjNRV-ZRghURyJogSrJkXbt02A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/I_h6oY3aal1Ir4A5CygngIz-8oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:99:4b:b0:cd:1a:b6:a9:c1:97:55:16:24:6f:f8:02:35:53:
         01:0b:a7:49:af:23:04:84:1e:1c:4f:e8:21:56:23:6b:58:39:
         88:49:8e:29:5e:da:cb:48:24:00:93:46:03:a5:1b:6d:b6:16:
         b2:cd:9a:5a:90:02:b9:1e:60:15:17:a1:62:94:03:26:66:0b:
         12:11:53:5d:f5:f2:8c:53:f8:a3:40:2b:cb:52:48:ce:79:3d:
         62:7d:d5:12:7e:64:71:b9:85:dc:15:ce:66:b4:57:d4:dc:3d:
         d1:87:fe:e0:57:dd:38:72:f3:b2:06:02:d0:36:ac:83:56:bf:
         6d:6f:bb:fa:bd:3d:73:9e:05:4a:79:11:c9:98:29:5f:7a:25:
         86:3a:47:af:35:8c:df:a3:50:18:48:06:b2:66:81:8e:1f:55:
         73:bc:89:d9:d5:8a:c4:78:60:0b:8e:3b:e1:3f:e1:bd:23:3d:
         d2:0a:cd:14:cc:c8:18:7b:a7:0c:2d:3b:7a:fb:99:c8:d9:0f:
         50:5c:e3:0e:c3:46:b7:c4:92:c8:95:26:b5:67:04:09:fc:d4:
         30:e0:49:a0:6e:96:2a:60:70:39:98:ae:3e:d9:6e:18:38:ad:
         a2:90:bf:7c:f8:ec:58:72:51:53:e9:55:94:7a:90:fa:22:af:
         e3:45:4c:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJGYzDZynd8MJWDjQpVz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjg3YWExOGRkYTZhNWQ0OGFmODAzOTBiMjgyNzgwOGNm
ZWYyODUwHhcNMjQwMTAxMDgyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmI4Y2Q0NTVmOTk0NjA4NTQ0NzIyNjg4MTJhYzk5MTc2ZWRkMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnVjhaSWxUpWxnOVxJJnCwu2XSr2
NNLPI2JkYc+ZVcEFXQ6tJbTZ22iX6ZrJWKzo/KmJ4Jv+Q1Hn5QDGMqJ8CwQnikcl
XC2No4tw6IKFn/D3osHpcYlCINs+ow9eYdPqclnLqRJerOByLcncjkQQ18gqq/Fm
QF7cyVY5uj+GeSmHl6X0ZwS3OEMdgWQExW15xgNFJUl+zPXEuwp38zUn30QrU05u
mhhRjyantV+DWyPl5zHXrzvaVcVsZgmShhR1EgUrE7jSI/aPt8cWgT6cF/8l5+CR
dYRQE7Pb8Qk8Af908EADGGc/hmYdPPwwXVdPDOh0TYoJK2LJyQsT1ReaWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGK4zUVfmUYIVEciaIEqyZF27dNgMB8GA1UdIwQY
MBaAFCP4eqGN2mpdSK+AOQsoJ4CM/vKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9oNm9ZM2FhbDFJcjRBNUN5Z25nSXotOG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jMTg1ZjYtNjI3NC00OWRhLWIyZWYt
NjAwMGNiMmQ1OTkwLzEvWXJqTlJWLVpSZ2hVUnlKb2dTckprWGJ0MDJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jMTg1ZjYtNjI3NC00OWRhLWIyZWYtNjAwMGNiMmQ1OTkw
LzEvSV9oNm9ZM2FhbDFJcjRBNUN5Z25nSXotOG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxhXMA0G
CSqGSIb3DQEBCwUAA4IBAQDJmUuwzRq2qcGXVRYkb/gCNVMBC6dJryMEhB4cT+gh
ViNrWDmISY4pXtrLSCQAk0YDpRttthayzZpakAK5HmAVF6FilAMmZgsSEVNd9fKM
U/ijQCvLUkjOeT1ifdUSfmRxuYXcFc5mtFfU3D3Rh/7gV904cvOyBgLQNqyDVr9t
b7v6vT1zngVKeRHJmClfeiWGOkevNYzfo1AYSAayZoGOH1VzvInZ1YrEeGALjjvh
P+G9Iz3SCs0UzMgYe6cMLTt6+5nI2Q9QXOMOw0a3xJLIlSa1ZwQJ/NQw4EmgbpYq
YHA5mK4+2W4YOK2ikL98+OxYclFT6VWUepD6Iq/jRUyS
-----END CERTIFICATE-----
Generated at Mon May 13 15:01:46 2024 by rpki-client on console-fra.rpki-client.org