Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/XGwwGGoGFCU2wXMjam1_OuB0SBM.roa
File:                     XGwwGGoGFCU2wXMjam1_OuB0SBM.roa (raw, json)
Hash identifier:          qEpB/GXw3D0ok7lAkYiy3s7YgkzKhhOaFXAgECADCto=
Subject key identifier:   5C:6C:30:18:6A:06:14:25:36:C1:73:23:6A:6D:7F:3A:E0:74:48:13
Certificate issuer:       /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial:       0188BD5F0EABA570C8CAB1CD61472A7231A8
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/XGwwGGoGFCU2wXMjam1_OuB0SBM.roa
Signing time:             Thu 15 Jun 2023 04:45:03 +0000
ROA not before:           Thu 15 Jun 2023 04:45:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57152
IP address blocks:        62.106.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:bd:5f:0e:ab:a5:70:c8:ca:b1:cd:61:47:2a:72:31:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
        Validity
            Not Before: Jun 15 04:45:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5c6c30186a06142536c173236a6d7f3ae0744813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:56:15:e2:84:f5:ad:4f:37:c4:07:8e:bf:
                    56:a4:1a:6e:d1:25:aa:49:b7:8e:35:80:4e:35:e4:
                    93:af:22:88:7b:7f:fc:94:e5:2e:0d:eb:95:3a:d5:
                    d9:d7:bc:27:da:a9:e1:72:e8:4e:5b:49:0c:8c:19:
                    74:72:67:d6:66:af:67:d3:0f:ff:f9:a8:9a:9f:54:
                    ed:bc:84:20:7d:ac:59:cb:c5:89:04:ee:b7:c5:55:
                    a0:6a:a3:be:7c:0e:dd:c9:0e:95:6b:82:3a:b7:5c:
                    74:81:91:42:88:34:9c:0e:a6:f9:a3:89:fe:c4:74:
                    43:ec:e7:09:99:d4:08:74:63:d3:fe:5e:63:e2:2b:
                    16:7a:e7:08:1e:ce:de:e7:d1:be:33:ef:95:41:e8:
                    15:ba:eb:25:08:2e:ec:5b:cf:ba:4c:1a:c8:4e:b5:
                    a3:f5:b5:18:d4:7f:6f:dc:a5:a6:1a:97:c1:2f:36:
                    e6:a3:16:d3:c2:f7:bb:85:20:83:18:ab:7e:8d:e3:
                    7f:a6:bf:71:f5:15:ea:a0:dc:3e:5d:e8:75:b4:3c:
                    b1:5c:58:3d:bf:a0:87:96:0b:87:01:f4:a5:56:5d:
                    3f:2f:fd:da:65:ad:c8:ed:5c:2b:80:67:6a:85:1c:
                    ca:31:62:3f:47:89:4b:b8:da:69:bd:00:0f:e8:6f:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6C:30:18:6A:06:14:25:36:C1:73:23:6A:6D:7F:3A:E0:74:48:13
            X509v3 Authority Key Identifier:
                keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/XGwwGGoGFCU2wXMjam1_OuB0SBM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:de:6e:89:ac:8f:8b:3a:02:8f:9d:90:8b:66:e2:12:c7:d7:
         7f:78:22:43:13:76:19:d5:f6:71:14:fe:b7:ca:7d:26:66:e3:
         f0:bf:da:1b:55:86:fe:1c:62:23:8b:75:06:91:00:65:aa:ac:
         16:7c:8b:65:19:9f:bf:1b:28:9d:12:c6:a4:9b:24:f9:64:1e:
         32:7f:4f:71:46:f0:4e:c3:5b:75:a2:95:38:6e:38:81:aa:66:
         5f:0d:3e:21:3b:1b:d0:09:c4:d9:4e:fd:90:57:a7:c1:4f:a9:
         58:97:de:d5:1c:ce:42:cd:03:d2:87:a8:72:01:9a:44:0e:9f:
         d6:b2:c5:05:1f:d4:68:12:1d:de:98:a5:13:08:c4:2f:00:d4:
         c0:85:3f:b0:00:a6:d0:e3:47:93:ad:85:bb:49:40:61:b0:95:
         18:f7:07:3d:f4:47:cb:9d:40:15:d7:95:f4:dc:70:cc:06:a6:
         41:7c:4a:7c:96:4a:a8:b1:f5:71:9a:5f:46:4d:ce:60:06:96:
         09:fc:56:2a:b0:43:22:aa:44:61:0d:cf:aa:78:a9:04:38:52:
         2f:a7:b3:c6:7e:b3:f8:52:c8:0f:7d:33:7f:8f:96:c4:71:87:
         df:01:fd:d3:0b:5d:70:e4:d9:e3:28:af:09:e2:fc:a6:94:a2:
         97:6b:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:50 2024 by rpki-client on console-fra.rpki-client.org