Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/7ldySGPBV_5FUXQu15VzNJ5dxNY.roa
File:                     7ldySGPBV_5FUXQu15VzNJ5dxNY.roa (raw, json)
Hash identifier:          tr9eO7GMtl05PyVupI8AXRzhIM9zSdvnaQF2cUDgo6k=
Subject key identifier:   EE:57:72:48:63:C1:57:FE:45:51:74:2E:D7:95:73:34:9E:5D:C4:D6
Certificate issuer:       /CN=1c50a2289e1bf87121ae73ca7116d53f5fd5c4d5
Certificate serial:       0185710C1C67048DD14D8E5EF065A47B6CBC
Authority key identifier: 1C:50:A2:28:9E:1B:F8:71:21:AE:73:CA:71:16:D5:3F:5F:D5:C4:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/7ldySGPBV_5FUXQu15VzNJ5dxNY.roa
Signing time:             Mon 02 Jan 2023 05:54:57 +0000
ROA not before:           Mon 02 Jan 2023 05:54:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39855
IP address blocks:        62.68.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:0c:1c:67:04:8d:d1:4d:8e:5e:f0:65:a4:7b:6c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c50a2289e1bf87121ae73ca7116d53f5fd5c4d5
        Validity
            Not Before: Jan  2 05:54:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee57724863c157fe4551742ed79573349e5dc4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:35:02:a6:13:ca:4c:d0:ef:bd:0a:3e:85:
                    f5:e7:7e:1e:df:11:9c:66:b6:32:95:c3:7a:76:15:
                    e2:12:b4:83:33:4c:50:0c:0a:45:21:e0:0b:0f:29:
                    da:b9:0a:9d:f7:22:6d:0b:ed:a9:68:b8:81:38:25:
                    cf:33:17:f8:7a:03:ba:3d:b9:a2:b7:a2:40:68:d0:
                    25:8e:41:bf:15:e9:42:84:b8:76:0b:69:58:6d:60:
                    69:c6:d1:48:99:a3:2f:1e:bb:30:9a:60:eb:99:e6:
                    1d:a9:ad:4a:2a:9c:83:08:92:ae:c0:b3:c7:98:b8:
                    cf:c9:ca:3b:6b:06:92:64:44:10:27:83:a4:09:bd:
                    33:e2:6d:9e:43:4c:0a:1b:38:16:6e:8b:9b:8f:37:
                    26:24:91:60:6a:13:56:02:a1:09:e6:67:d8:fa:c0:
                    77:1a:1e:31:42:7d:58:96:fb:13:2f:29:c1:14:11:
                    6f:d1:81:c3:69:61:95:85:65:28:8d:92:8e:44:53:
                    4a:c6:d4:9f:af:b3:8c:7d:f0:aa:6a:9a:ef:61:30:
                    b6:1b:fb:15:ad:45:8d:a5:f4:e5:92:48:54:be:18:
                    55:ce:93:b8:99:17:3e:0e:36:82:eb:7c:54:5f:70:
                    9f:cb:a7:44:93:21:6c:85:47:e1:40:9a:3b:6d:1d:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:57:72:48:63:C1:57:FE:45:51:74:2E:D7:95:73:34:9E:5D:C4:D6
            X509v3 Authority Key Identifier:
                keyid:1C:50:A2:28:9E:1B:F8:71:21:AE:73:CA:71:16:D5:3F:5F:D5:C4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/7ldySGPBV_5FUXQu15VzNJ5dxNY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:2d:55:a1:10:7e:39:ae:95:f8:87:c1:9f:79:73:d7:65:38:
         94:b8:4b:d8:40:fa:cb:12:73:3c:86:78:d5:2a:37:b7:94:25:
         87:75:15:64:35:05:35:01:ac:07:20:1a:53:8c:38:34:b5:e7:
         d8:6f:8b:53:94:a2:e6:b4:ab:b0:37:9c:5b:eb:f0:8b:d3:45:
         bb:9d:45:53:f6:92:59:66:3f:54:f2:dd:87:7f:03:58:f0:86:
         03:14:4a:31:15:8a:63:7d:eb:f4:a2:24:31:27:82:2e:fe:63:
         0c:8f:91:88:24:e2:2a:62:7e:20:42:8a:f6:9c:2a:0f:84:70:
         33:eb:78:82:d5:a1:32:b7:4f:9c:7a:82:7a:b5:fc:18:72:47:
         52:a8:04:e4:c1:3f:62:60:a7:ba:0d:8a:03:88:13:c0:0b:73:
         ca:3a:ec:6d:d8:f2:7c:f4:6f:08:ea:9d:51:16:7a:12:92:d6:
         10:fb:de:83:c8:93:03:b6:0a:d4:73:a9:06:13:3b:6b:3b:07:
         a7:ea:33:11:fe:d6:eb:67:b0:ad:de:86:58:ea:4e:a0:1a:84:
         0a:bc:3e:97:4b:27:f9:c7:0a:52:c9:52:7e:87:00:f3:01:0d:
         e7:37:c1:fe:85:ca:26:cf:7f:25:ba:6b:6e:76:3d:23:a1:44:
         72:75:43:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDBxnBI3RTY5e8GWke2y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNTBhMjI4OWUxYmY4NzEyMWFlNzNjYTcxMTZkNTNmNWZk
NWM0ZDUwHhcNMjMwMTAyMDU1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTU3NzI0ODYzYzE1N2ZlNDU1MTc0MmVkNzk1NzMzNDllNWRjNGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroQ1AqYTykzQ770KPoX1534e3xGc
ZrYylcN6dhXiErSDM0xQDApFIeALDynauQqd9yJtC+2paLiBOCXPMxf4egO6Pbmi
t6JAaNAljkG/FelChLh2C2lYbWBpxtFImaMvHrswmmDrmeYdqa1KKpyDCJKuwLPH
mLjPyco7awaSZEQQJ4OkCb0z4m2eQ0wKGzgWboubjzcmJJFgahNWAqEJ5mfY+sB3
Gh4xQn1YlvsTLynBFBFv0YHDaWGVhWUojZKORFNKxtSfr7OMffCqaprvYTC2G/sV
rUWNpfTlkkhUvhhVzpO4mRc+DjaC63xUX3Cfy6dEkyFshUfhQJo7bR1fSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5XckhjwVf+RVF0LteVczSeXcTWMB8GA1UdIwQY
MBaAFBxQoiieG/hxIa5zynEW1T9f1cTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZDaUtKNGItSEVocm5QS2NSYlZQMV9WeE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NDk2MGEtMTgyMS00ZGIzLThmNDgt
ZDE1ZmM5ODQyNGYwLzEvN2xkeVNHUEJWXzVGVVhRdTE1VnpOSjVkeE5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85NDk2MGEtMTgyMS00ZGIzLThmNDgtZDE1ZmM5ODQyNGYw
LzEvSEZDaUtKNGItSEVocm5QS2NSYlZQMV9WeE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRcMA0G
CSqGSIb3DQEBCwUAA4IBAQCILVWhEH45rpX4h8GfeXPXZTiUuEvYQPrLEnM8hnjV
Kje3lCWHdRVkNQU1AawHIBpTjDg0tefYb4tTlKLmtKuwN5xb6/CL00W7nUVT9pJZ
Zj9U8t2HfwNY8IYDFEoxFYpjfev0oiQxJ4Iu/mMMj5GIJOIqYn4gQor2nCoPhHAz
63iC1aEyt0+ceoJ6tfwYckdSqATkwT9iYKe6DYoDiBPAC3PKOuxt2PJ89G8I6p1R
FnoSktYQ+96DyJMDtgrUc6kGEztrOwen6jMR/tbrZ7Ct3oZY6k6gGoQKvD6XSyf5
xwpSyVJ+hwDzAQ3nN8H+hcomz38lumtudj0joURydUNh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:35 2024 by rpki-client on console-ams.rpki-client.org