Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/SEJxn4LxZY4PbG9E9vZLqVbBg00.roa
File:                     SEJxn4LxZY4PbG9E9vZLqVbBg00.roa (raw, json)
Hash identifier:          jcmdTHdabr1t2QLc+UTXu3drdWYgaNMr/5dbfwNjPSk=
Subject key identifier:   48:42:71:9F:82:F1:65:8E:0F:6C:6F:44:F6:F6:4B:A9:56:C1:83:4D
Certificate issuer:       /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial:       01847AE563E73C832758A5F76E635BA20CC4
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/SEJxn4LxZY4PbG9E9vZLqVbBg00.roa
Signing time:             Tue 15 Nov 2022 10:46:04 +0000
ROA not before:           Tue 15 Nov 2022 10:46:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203511
IP address blocks:        62.106.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:7a:e5:63:e7:3c:83:27:58:a5:f7:6e:63:5b:a2:0c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
        Validity
            Not Before: Nov 15 10:46:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4842719f82f1658e0f6c6f44f6f64ba956c1834d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:1c:70:94:f9:67:d9:b0:4b:4b:8f:18:44:
                    36:db:29:1c:1e:56:6a:d5:62:57:2d:91:06:0c:10:
                    8b:98:39:f5:3d:b2:9e:67:84:1c:2c:7e:5d:d8:8f:
                    f0:b5:0f:fb:0e:e3:68:73:f3:1c:1b:a5:ff:6f:52:
                    c4:72:d3:66:0a:1a:2a:7a:cf:56:9e:6b:6f:4c:f0:
                    65:1a:12:c1:69:0c:4c:2d:62:80:02:3c:b5:2a:22:
                    ab:67:c0:1c:02:7c:fe:6c:00:4a:b8:a9:99:87:ea:
                    cf:ef:a5:f5:f3:87:3f:e0:74:f8:09:db:21:14:07:
                    b3:33:29:a5:f9:b6:ff:9c:50:28:af:db:75:8d:5b:
                    d6:a2:55:97:82:09:5a:eb:91:b7:fc:28:85:d3:bc:
                    fb:9d:20:6f:3f:24:ce:ee:c1:12:a9:d8:46:2f:92:
                    4c:2c:61:0b:b9:dd:df:19:d6:65:60:26:32:e9:2b:
                    0c:bf:e8:26:81:2d:c8:a9:bc:ad:33:9d:d0:f6:df:
                    9d:a4:dd:77:3a:2e:02:39:c1:7d:a1:67:f7:96:0e:
                    72:e2:28:0c:85:35:f0:26:cc:2e:1c:ae:c2:0a:59:
                    1a:59:ab:a6:44:ba:60:0e:5c:7a:65:57:25:70:e6:
                    40:68:8d:50:2e:66:b5:52:ee:32:61:9f:80:3c:dd:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:42:71:9F:82:F1:65:8E:0F:6C:6F:44:F6:F6:4B:A9:56:C1:83:4D
            X509v3 Authority Key Identifier:
                keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/SEJxn4LxZY4PbG9E9vZLqVbBg00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:b5:74:f5:c6:aa:a6:c9:a3:4c:5b:6b:9e:d9:3c:4c:06:
         d2:b8:90:bd:cb:b8:e1:21:53:36:18:b8:6c:32:10:ed:13:d6:
         f5:a1:de:bb:22:b2:9a:15:65:57:b8:fd:21:2e:9d:91:89:f6:
         a2:0d:94:f2:f2:b9:d2:d0:69:04:1d:7a:ad:d7:71:c2:71:86:
         ee:d5:4e:ee:1b:a4:0e:e5:85:6d:75:1e:6e:76:32:21:18:c5:
         25:15:b7:5f:06:cb:b4:7c:62:ac:da:9e:c8:2a:61:53:df:8e:
         8f:28:8b:15:3f:3b:36:2b:74:17:4c:05:63:c3:72:4b:d6:e4:
         94:66:9c:ca:00:cc:61:0b:1b:f7:04:e4:3f:0b:b2:ff:58:a0:
         17:14:95:36:49:a0:b7:57:2a:1d:d3:ec:0d:d9:d2:e5:cf:d1:
         01:89:e7:da:8b:d6:d0:f9:2e:d9:db:bb:e9:15:54:06:cf:37:
         3d:df:8b:64:a0:5d:c1:2d:49:e8:87:9a:d6:3b:f3:38:9d:b2:
         1a:b4:28:39:39:14:ce:b3:8a:c5:41:d9:26:19:ee:04:97:75:
         ef:df:e5:b2:da:d5:52:d3:cc:02:8a:89:48:a3:e9:b3:51:75:
         8b:58:e7:07:7f:d0:10:fa:6b:c6:88:67:ca:0d:8c:e5:a6:23:
         f1:f3:5b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:50 2024 by rpki-client on console-fra.rpki-client.org