Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/7ZKEWdgDDpgldyptvH6bYUfzk8g.roa
File:                     7ZKEWdgDDpgldyptvH6bYUfzk8g.roa (raw, json)
Hash identifier:          5cqqDlyiXdMufzDU4oHoILTRLWDS7SZtS66ErUYmmwg=
Subject key identifier:   ED:92:84:59:D8:03:0E:98:25:77:2A:6D:BC:7E:9B:61:47:F3:93:C8
Certificate issuer:       /CN=243603eff76daf94542f23d560f9fca579ac97ed
Certificate serial:       C6AF84
Authority key identifier: 24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDYD7_dtr5RULyPVYPn8pXmsl-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/7ZKEWdgDDpgldyptvH6bYUfzk8g.roa
Signing time:             Sat 01 Jan 2022 06:56:46 +0000
ROA not before:           Sat 01 Jan 2022 06:56:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        62.106.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13021060 (0xc6af84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=243603eff76daf94542f23d560f9fca579ac97ed
        Validity
            Not Before: Jan  1 06:56:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed928459d8030e9825772a6dbc7e9b6147f393c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:c1:fb:c8:34:04:0e:2e:56:25:a6:7d:a2:
                    03:cb:45:19:43:5f:f2:b7:02:ba:a5:2f:a7:3a:c5:
                    0c:5a:3e:a8:ab:20:22:17:a1:78:71:6f:3d:3c:71:
                    0a:ae:31:6c:57:c9:41:24:45:77:5d:82:01:34:3e:
                    f5:e4:21:00:2b:7b:f0:07:f0:c6:d0:63:5e:22:a0:
                    90:62:b0:f6:42:80:3b:69:14:4f:73:0c:b7:18:a1:
                    a8:e7:fa:65:36:b7:8d:89:3b:32:41:d9:33:b8:e8:
                    ee:14:ec:2c:4c:50:b9:c3:9d:c0:33:9e:88:01:ff:
                    a4:bf:5f:56:1d:49:b3:37:19:d6:a6:da:d4:8a:2d:
                    6c:04:6e:82:52:3b:63:0a:94:9d:42:3e:c2:68:fc:
                    6b:8a:4f:57:30:f8:2f:a5:7c:86:f1:ce:37:3f:a9:
                    4a:c7:a0:3f:2d:51:1c:f1:41:09:f9:81:37:00:e5:
                    3f:72:ad:40:1a:8f:a7:60:f3:22:3c:ce:4c:61:81:
                    05:03:01:49:db:1d:5c:90:01:3a:d3:ab:7d:45:16:
                    f0:72:ad:52:60:10:3a:fc:d4:82:4a:c0:50:cf:95:
                    c5:c5:a7:30:de:0f:9c:22:e4:6d:03:86:2b:87:03:
                    73:9f:2d:58:33:e6:40:a9:b9:f2:11:c8:37:40:58:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:92:84:59:D8:03:0E:98:25:77:2A:6D:BC:7E:9B:61:47:F3:93:C8
            X509v3 Authority Key Identifier:
                keyid:24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDYD7_dtr5RULyPVYPn8pXmsl-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/7ZKEWdgDDpgldyptvH6bYUfzk8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/JDYD7_dtr5RULyPVYPn8pXmsl-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:12:44:cf:13:9c:89:d8:18:28:21:e3:4c:60:70:23:ed:72:
         c1:14:bd:23:51:0a:70:36:6e:87:29:b3:ab:de:eb:a2:9a:16:
         a1:e1:b7:df:87:71:46:63:5b:fd:49:40:89:ff:a5:65:87:f4:
         ea:25:c7:55:c0:c1:8d:72:fc:72:b4:10:6e:14:98:54:da:80:
         f3:7a:2e:bf:3d:7b:e0:7f:9b:76:fc:cf:3d:80:21:a9:44:66:
         9d:08:18:b4:59:f0:07:3f:b8:f5:fa:f9:00:e5:60:7a:63:54:
         07:eb:f8:43:ae:42:aa:c2:d5:0c:c8:dc:63:1d:15:cc:63:31:
         d4:b0:8c:6c:82:35:e5:9e:a5:b0:1c:b3:01:fd:e1:11:73:6f:
         b0:df:cf:df:7b:01:2e:2f:3d:56:20:67:da:05:42:cb:dc:1c:
         61:f8:5c:d5:0e:fd:f8:a9:e6:dd:e7:e4:0a:b7:b6:15:a7:cb:
         07:67:90:63:b8:e7:69:a9:a3:6c:61:eb:64:e6:c3:95:95:21:
         cf:ea:34:bb:66:d8:7f:81:33:3f:5d:c3:69:67:53:46:d7:c0:
         41:1e:32:d1:67:4a:b0:80:49:3f:93:fc:05:fb:33:52:1b:38:
         ee:2f:04:55:34:99:b1:0b:db:af:f0:cf:a7:43:72:03:81:54:
         fa:c7:f7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:22 2024 by rpki-client on console-fra.rpki-client.org