Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/gczEUJTtU8GyFVNLA8nyCAWsLWE.roa
File:                     gczEUJTtU8GyFVNLA8nyCAWsLWE.roa (raw, json)
Hash identifier:          SGqig773PnzpI4o40q3IYBnBlY6xcK3Y5Mb03gsDBEQ=
Subject key identifier:   81:CC:C4:50:94:ED:53:C1:B2:15:53:4B:03:C9:F2:08:05:AC:2D:61
Certificate issuer:       /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial:       0189E2D0BCEDE1E897540EFB5232F24673B1
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/gczEUJTtU8GyFVNLA8nyCAWsLWE.roa
Signing time:             Fri 11 Aug 2023 04:17:57 +0000
ROA not before:           Fri 11 Aug 2023 04:17:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60446
IP address blocks:        62.106.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:e2:d0:bc:ed:e1:e8:97:54:0e:fb:52:32:f2:46:73:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
        Validity
            Not Before: Aug 11 04:17:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=81ccc45094ed53c1b215534b03c9f20805ac2d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6a:51:f8:1c:cc:02:cc:a3:b3:5b:5e:ed:84:
                    1f:13:26:e0:28:c6:26:cb:ae:d9:88:cb:27:d8:62:
                    00:c0:94:2c:92:67:ec:34:0d:34:2f:de:d9:a5:30:
                    b8:75:9f:9f:cf:44:76:44:59:e5:14:73:80:d4:9d:
                    d4:46:31:2a:2f:88:1c:56:c6:34:f9:e4:cd:4c:c5:
                    4b:67:39:a8:2d:46:cd:cc:50:da:8a:88:a4:3a:b8:
                    58:b2:ec:72:52:e3:da:31:21:bc:2d:91:dd:ee:14:
                    a7:04:7a:a0:ae:58:a6:9b:11:45:1c:86:8a:f3:b8:
                    73:61:77:c6:82:55:69:8c:bc:1d:b0:f6:90:36:9d:
                    6c:84:aa:a4:36:65:43:1a:35:ca:e8:bd:cb:aa:94:
                    43:2e:0b:9b:0a:cb:ea:32:8c:71:f5:b1:23:ad:e6:
                    19:6d:ff:25:00:b2:63:7e:74:cb:19:2c:0a:59:10:
                    5e:c1:54:02:b5:ab:81:14:62:51:04:fc:d1:93:1a:
                    02:55:83:32:c8:9a:bc:74:2e:35:c8:f2:4b:63:7f:
                    71:e6:a7:fa:54:d9:b3:84:42:95:d2:6a:0c:7a:de:
                    24:80:23:5e:3d:11:0e:fc:4f:c2:a7:00:dd:49:15:
                    d9:04:77:da:94:66:65:ed:ef:b0:96:8d:34:a2:e8:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CC:C4:50:94:ED:53:C1:B2:15:53:4B:03:C9:F2:08:05:AC:2D:61
            X509v3 Authority Key Identifier:
                keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/gczEUJTtU8GyFVNLA8nyCAWsLWE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:cd:8a:14:4e:c7:9c:13:a3:df:12:fe:90:9b:b0:6b:04:3a:
         4e:9b:ac:a8:24:7b:c7:54:c9:65:94:08:85:80:19:ca:f6:47:
         ec:03:74:fc:99:15:64:02:e5:90:e9:a9:e9:98:16:d2:05:7d:
         fc:15:9f:79:0a:23:15:a0:39:ef:ff:cf:0b:ba:b0:35:39:89:
         4a:db:4c:83:48:61:4b:ea:36:3c:4c:78:e9:c3:56:57:d2:a7:
         ea:6b:82:ef:a5:67:0e:87:f4:5a:fb:2e:50:ec:ef:03:ae:7c:
         6b:d0:e1:a0:df:6b:12:ce:15:3d:fb:bc:ea:a4:77:ef:ce:9f:
         c7:02:16:e1:98:27:12:1a:06:62:80:d4:27:73:70:97:d9:61:
         71:9e:da:ea:81:98:da:fe:6b:6b:2a:76:8a:66:83:17:79:65:
         6d:8f:30:c3:64:9e:67:a7:d6:69:3f:e1:7b:e7:18:db:23:b3:
         e8:f7:08:d3:87:91:7a:28:55:bb:d5:42:17:6a:ec:b4:24:0a:
         e3:ff:e1:30:2d:5f:64:8f:18:f8:9c:0c:a0:d5:ef:07:de:87:
         53:67:e9:5b:95:50:8c:7d:d8:2b:05:5d:94:09:71:74:ab:2a:
         ee:99:59:f9:4d:77:53:5c:da:b5:64:88:f8:8c:8d:cc:75:33:
         4e:3e:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:06 2024 by rpki-client on console-ams.rpki-client.org