Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/4RJpCKtXoO4nxhfluZWP-xdhJIU.roa
File:                     4RJpCKtXoO4nxhfluZWP-xdhJIU.roa (raw, json)
Hash identifier:          COhMhHxUhJxZDLu6W6ilLI00bqIbNnjiMZRfr9kzyek=
Subject key identifier:   E1:12:69:08:AB:57:A0:EE:27:C6:17:E5:B9:95:8F:FB:17:61:24:85
Certificate issuer:       /CN=308e4f050668d45e3918384500b175a87680199c
Certificate serial:       0184F9A1C9002DFEF8EBC98D5897A507AC4E
Authority key identifier: 30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/4RJpCKtXoO4nxhfluZWP-xdhJIU.roa
Signing time:             Sat 10 Dec 2022 01:24:00 +0000
ROA not before:           Sat 10 Dec 2022 01:24:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        62.204.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f9:a1:c9:00:2d:fe:f8:eb:c9:8d:58:97:a5:07:ac:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=308e4f050668d45e3918384500b175a87680199c
        Validity
            Not Before: Dec 10 01:24:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e1126908ab57a0ee27c617e5b9958ffb17612485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0b:f7:75:dd:98:e7:3d:1d:35:52:51:58:bc:
                    34:29:17:8f:e2:79:07:90:ff:cc:da:88:f7:98:e1:
                    1d:4c:f0:d1:8c:21:44:50:e0:d1:71:87:72:b9:9d:
                    41:47:fa:04:dc:41:db:49:4f:5c:b1:5a:51:8f:e1:
                    8e:09:6c:26:fd:c7:f4:f9:08:83:8b:2a:95:5b:b6:
                    36:f5:c4:4e:40:88:ba:a8:d5:18:c7:ea:87:fd:df:
                    33:40:74:c0:fb:90:3e:a7:7d:f8:8e:a7:32:31:95:
                    b6:87:c4:1e:19:27:9b:a8:eb:39:d0:3b:8b:d8:a3:
                    1a:1b:ca:40:e4:d3:dc:6b:e1:39:0b:24:82:c9:a9:
                    df:6e:09:50:64:a7:f2:10:56:81:3f:d3:ec:3c:b9:
                    62:89:d0:b7:c5:1c:99:de:0a:07:85:7b:37:85:47:
                    ff:b1:d1:ca:6f:89:56:06:c6:e5:cd:ff:8c:be:aa:
                    fe:d0:8a:9a:39:77:82:5e:17:b9:d9:2e:af:d2:db:
                    50:33:8a:28:59:20:2d:f1:54:17:3c:70:73:1c:a3:
                    df:74:3a:b8:38:87:4e:bd:4a:fb:2d:02:2f:2f:bd:
                    58:9e:42:55:94:54:57:6f:4d:e3:f9:5f:e5:ed:3f:
                    56:29:cc:76:79:1b:19:dd:1a:36:b2:00:f2:4a:a9:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:12:69:08:AB:57:A0:EE:27:C6:17:E5:B9:95:8F:FB:17:61:24:85
            X509v3 Authority Key Identifier:
                keyid:30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/4RJpCKtXoO4nxhfluZWP-xdhJIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/MI5PBQZo1F45GDhFALF1qHaAGZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ca:d5:a6:0e:ff:33:b8:69:8e:49:c0:1a:b2:88:bc:1b:cf:
         ef:b2:78:1f:36:d8:fe:bb:36:e0:aa:e1:63:b0:ba:17:9c:1a:
         bf:57:59:e1:97:4a:32:2c:1f:13:27:01:ae:0f:fa:1a:55:ac:
         76:e9:ba:61:3d:80:15:93:2e:b5:16:c9:2d:a0:8e:e4:ac:42:
         e8:8c:b4:f6:c8:d3:e6:12:39:e6:94:e3:e7:af:88:6c:40:b2:
         ac:0c:65:90:53:9a:32:5b:ac:b1:f2:61:47:68:eb:da:98:5a:
         56:24:4b:92:48:50:08:84:4b:89:78:75:27:fb:5e:07:4c:8f:
         20:1a:dd:37:57:bf:87:42:cc:45:df:63:5b:51:c4:90:7c:cc:
         6c:3a:4e:26:2b:bb:fd:04:3d:ba:9e:fa:d5:72:58:70:c8:68:
         85:5b:38:c3:0c:ef:4b:14:c4:0c:7a:89:b2:c0:12:8d:12:3b:
         92:13:c0:01:87:f4:fc:fa:ac:71:63:aa:ee:63:dc:c0:ea:c9:
         20:18:52:ea:56:6e:00:05:82:bd:6c:b7:a1:a7:ef:38:c2:d8:
         8e:26:54:10:22:29:1e:52:0b:32:89:83:b2:71:47:dc:ee:da:
         24:1b:b7:0c:e6:40:33:3f:31:02:f2:e7:33:1f:5e:28:85:8d:
         4f:48:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org