Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/iN480DeyEp1T3FGv3f6SSfPsY0g.roa
File:                     iN480DeyEp1T3FGv3f6SSfPsY0g.roa (raw, json)
Hash identifier:          Osu1N4ry8S/9hv0+8hyP3Bb2mR4jhJ0D1+qG+5GQD+I=
Subject key identifier:   88:DE:3C:D0:37:B2:12:9D:53:DC:51:AF:DD:FE:92:49:F3:EC:63:48
Certificate issuer:       /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial:       04B405D1
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/iN480DeyEp1T3FGv3f6SSfPsY0g.roa
Signing time:             Thu 09 Jun 2022 09:05:05 +0000
ROA not before:           Thu 09 Jun 2022 09:05:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        194.62.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78906833 (0x4b405d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
        Validity
            Not Before: Jun  9 09:05:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=88de3cd037b2129d53dc51afddfe9249f3ec6348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:71:46:3b:a8:96:63:42:31:e6:fc:ef:99:
                    05:57:23:a9:1e:31:c3:3c:85:fa:a8:6b:d2:bc:d4:
                    be:00:77:87:db:b1:3b:b6:02:b4:df:ba:4a:cb:04:
                    83:b6:f5:ba:ee:94:03:b4:d8:6e:7e:cc:84:3d:aa:
                    ca:91:12:de:d0:af:87:4b:86:c9:8e:3a:83:35:25:
                    a1:fd:8a:e8:f8:22:0a:44:7a:33:c5:ac:b1:ee:d6:
                    f1:db:fa:da:1c:35:b1:9b:fb:da:ac:cb:ca:a3:aa:
                    c8:d2:9a:a9:ab:63:91:46:50:72:89:b8:b8:c7:f7:
                    55:f2:d5:49:6f:e9:28:e9:be:04:d4:94:1e:74:09:
                    d4:ec:f0:c4:5a:a0:f3:44:aa:b2:ff:4b:66:f7:86:
                    8d:a5:66:09:1a:82:f8:42:b7:60:97:5a:53:b2:5f:
                    ef:2b:3e:0f:d5:db:f3:9a:d9:a7:c3:20:dc:04:d5:
                    52:83:49:69:47:76:fe:a6:3a:50:e6:7b:8c:8e:28:
                    69:7d:0e:86:3c:17:8a:44:53:aa:ae:15:20:01:23:
                    89:a4:9d:dd:ca:59:fa:67:6a:21:02:45:f3:94:eb:
                    e5:6c:7b:f7:56:34:1d:46:c1:f6:4e:ea:c5:8c:8a:
                    a1:de:d3:d6:74:78:f3:50:e3:c7:44:11:e8:f2:6d:
                    ba:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DE:3C:D0:37:B2:12:9D:53:DC:51:AF:DD:FE:92:49:F3:EC:63:48
            X509v3 Authority Key Identifier:
                keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/iN480DeyEp1T3FGv3f6SSfPsY0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:82:7a:58:da:ca:4d:a4:4f:76:a2:c6:4a:14:0a:40:58:bb:
         67:80:d0:a1:6e:8f:fe:34:11:00:ce:36:c9:8d:d2:33:4a:a3:
         68:f5:d2:b0:cf:17:3c:84:95:ff:6f:93:d7:2a:c6:f4:0e:58:
         df:df:11:6c:fe:d6:15:4f:15:51:9d:e5:83:85:e3:db:3b:d9:
         d2:16:e7:e5:34:74:56:81:6c:8e:53:d4:c2:9a:b0:c3:46:37:
         82:f5:54:65:f5:b1:cc:98:9d:10:c6:83:2c:23:26:d9:05:28:
         e7:b0:94:53:a6:ec:58:16:c0:52:af:89:7c:f7:0d:c0:29:15:
         7a:62:aa:c9:65:51:f2:ce:7f:f7:5a:d3:3b:70:d3:37:ac:fb:
         ea:66:5f:d3:62:ca:12:d1:8d:72:e2:04:54:1f:99:85:cd:a2:
         e2:19:a6:b4:f7:b6:c9:a1:21:c6:38:89:6e:75:f2:c2:d3:b5:
         b3:5b:b0:80:62:b6:34:3f:43:5a:97:5f:fd:0f:53:09:e4:bb:
         1b:05:60:2b:6f:0c:f5:c0:38:d4:4b:ca:0c:da:68:ce:c8:88:
         c1:17:c2:18:b7:79:3d:75:46:2f:d0:93:02:e2:e7:94:3f:14:
         e4:e7:00:37:22:de:2a:a9:ee:b2:f7:75:83:b9:16:5c:21:27:
         3a:e7:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:37 2024 by rpki-client on console-ams.rpki-client.org