Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/tvfSZ26XN_kzXnPGqNt6E_N6qME.roa
File:                     tvfSZ26XN_kzXnPGqNt6E_N6qME.roa (raw, json)
Hash identifier:          bp4jbYo6So/UNE7ME0qa1rG3pGC2euhI54+QMNJuW9M=
Subject key identifier:   B6:F7:D2:67:6E:97:37:F9:33:5E:73:C6:A8:DB:7A:13:F3:7A:A8:C1
Certificate issuer:       /CN=af203900017653cc4e0dc1b13bea177a0653fb2d
Certificate serial:       01ABE144
Authority key identifier: AF:20:39:00:01:76:53:CC:4E:0D:C1:B1:3B:EA:17:7A:06:53:FB:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryA5AAF2U8xODcGxO-oXegZT-y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/tvfSZ26XN_kzXnPGqNt6E_N6qME.roa
Signing time:             Mon 04 Apr 2022 16:41:38 +0000
ROA not before:           Mon 04 Apr 2022 16:41:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208485
IP address blocks:        62.106.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28041540 (0x1abe144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af203900017653cc4e0dc1b13bea177a0653fb2d
        Validity
            Not Before: Apr  4 16:41:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b6f7d2676e9737f9335e73c6a8db7a13f37aa8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:9a:22:39:51:6b:d3:80:fc:a1:78:b6:fb:
                    9d:7d:32:53:d7:a0:2f:90:76:d7:01:b2:32:53:4d:
                    36:89:10:30:e8:46:a9:11:8f:68:99:b8:7a:e9:ad:
                    3f:a8:28:f8:e7:08:6b:31:49:d5:40:d6:df:d2:ef:
                    d2:25:b1:0f:81:1f:de:8d:f5:f0:ee:bf:49:2f:fa:
                    50:89:2a:a7:ae:db:3d:a5:09:79:38:22:a7:23:78:
                    82:25:6e:db:99:c0:0e:64:26:93:fc:4a:e6:a0:2e:
                    02:14:27:36:84:78:73:56:47:7c:c6:f8:95:b8:1d:
                    88:7b:82:8d:66:d4:ea:dc:16:b8:14:6c:27:d3:5c:
                    57:b4:4e:71:35:69:81:f3:6a:24:76:e6:69:44:a3:
                    7a:35:90:16:f8:02:44:79:ce:86:f4:42:96:26:17:
                    82:8a:9c:2b:80:10:b0:21:7d:ec:78:52:c0:1c:14:
                    3a:f3:82:3e:7a:02:34:6a:6d:2e:cd:47:28:55:8b:
                    26:ea:ea:f7:a0:03:b7:d9:04:e6:40:4a:f8:40:e2:
                    a7:b7:3a:86:85:4e:7a:36:ff:b3:0b:b9:ef:28:9d:
                    87:47:19:9f:61:09:00:78:ea:68:ef:c0:2a:e0:13:
                    ee:88:27:3d:cf:a6:8e:6d:40:40:af:65:e8:62:cf:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F7:D2:67:6E:97:37:F9:33:5E:73:C6:A8:DB:7A:13:F3:7A:A8:C1
            X509v3 Authority Key Identifier:
                keyid:AF:20:39:00:01:76:53:CC:4E:0D:C1:B1:3B:EA:17:7A:06:53:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryA5AAF2U8xODcGxO-oXegZT-y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/tvfSZ26XN_kzXnPGqNt6E_N6qME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/ryA5AAF2U8xODcGxO-oXegZT-y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:d4:f5:45:c6:e5:ad:bf:e3:4d:13:bd:2d:d1:4e:83:ae:
         ee:d4:38:6f:7d:fd:8d:ca:4e:6f:f1:d2:20:b9:95:84:51:d2:
         81:43:29:9c:76:ee:9c:af:5f:05:4e:aa:e4:15:67:bf:be:f5:
         b2:93:92:00:89:62:d4:10:5e:91:93:e2:e0:3b:68:c3:0e:74:
         19:db:f2:3e:8a:f3:a3:36:27:b6:d7:80:af:6f:d3:79:8a:fc:
         fc:c9:c7:05:87:17:91:29:22:6d:a8:f0:4b:77:06:b6:10:af:
         58:9e:9d:c2:63:cf:d3:55:9a:b9:62:79:0e:e8:61:70:de:41:
         e8:70:1b:8a:43:2d:3f:e3:ee:9a:36:3b:b9:0c:d1:d2:34:cf:
         c3:2d:4f:50:66:e8:ae:c2:cf:e1:13:96:03:7e:58:94:e7:4b:
         74:53:5c:f4:1d:c6:a1:5d:94:9e:7d:0a:3d:32:3d:ad:e8:b6:
         37:93:33:07:f4:cf:14:bc:ef:48:5a:8b:2f:6f:30:c3:23:f5:
         1a:17:9e:07:2f:d4:ad:43:94:0b:27:d8:a3:e6:35:12:57:db:
         de:d0:fa:68:df:ce:e6:4b:b0:dd:07:e8:14:49:22:a7:2a:b5:
         ac:5d:cf:e7:21:04:b5:55:f0:37:ba:3e:25:7f:f8:d5:7b:77:
         84:8c:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:54 2024 by rpki-client on console-fra.rpki-client.org