Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/NIvSTttZmmMFITaDuhwpJvhNiPs.roa
File:                     NIvSTttZmmMFITaDuhwpJvhNiPs.roa (raw, json)
Hash identifier:          qkHM1RfQeFmt7t+e4R157oppT/PNKX1FwSNlf4ChV4s=
Subject key identifier:   34:8B:D2:4E:DB:59:9A:63:05:21:36:83:BA:1C:29:26:F8:4D:88:FB
Certificate issuer:       /CN=e501fe097897739c5bf9b257313a76974e242556
Certificate serial:       E905A7
Authority key identifier: E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/NIvSTttZmmMFITaDuhwpJvhNiPs.roa
Signing time:             Wed 09 Mar 2022 01:42:29 +0000
ROA not before:           Wed 09 Mar 2022 01:42:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        62.3.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15271335 (0xe905a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501fe097897739c5bf9b257313a76974e242556
        Validity
            Not Before: Mar  9 01:42:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=348bd24edb599a6305213683ba1c2926f84d88fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4c:13:7b:5e:80:b7:de:ec:c0:81:57:59:a2:
                    ec:23:fe:5a:ff:10:cf:e8:bc:a5:99:86:34:2c:a7:
                    a2:c6:c9:0a:b7:b2:26:d5:00:c9:b7:3e:8d:5b:40:
                    44:27:b5:eb:ea:2b:49:4e:c7:3c:2d:2a:e3:45:4e:
                    18:e1:f0:f6:28:84:e7:c4:bd:e3:10:17:2b:92:de:
                    1d:20:50:89:2b:a7:2d:d2:db:a1:88:75:8e:0e:8b:
                    1a:96:f8:f5:6f:48:52:fe:09:b5:f9:a0:fc:60:3d:
                    ad:37:cf:5a:8b:c6:44:94:55:00:55:92:a5:c8:47:
                    cf:69:b9:a7:0f:09:7f:b7:96:fd:5e:ec:4b:d7:51:
                    5f:61:b9:55:8e:74:a9:cc:4f:18:13:fa:36:40:90:
                    5f:73:bb:97:a1:58:29:93:79:8a:fa:d8:46:25:ba:
                    59:2a:af:77:fd:58:80:c4:20:b2:d4:c5:5a:21:db:
                    46:a5:f3:c3:c3:b2:63:4a:9f:8e:c8:04:7c:19:b2:
                    61:9a:9a:fe:e3:64:80:fe:fc:67:e7:88:83:5d:c5:
                    e4:1a:17:80:b5:6d:0b:45:03:e0:8b:4f:4b:ba:20:
                    e9:30:35:0f:c9:6d:28:0f:e8:d9:f4:8b:cf:2f:b9:
                    3d:eb:c3:f5:2d:e9:76:01:78:3d:c5:e9:28:d8:6a:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8B:D2:4E:DB:59:9A:63:05:21:36:83:BA:1C:29:26:F8:4D:88:FB
            X509v3 Authority Key Identifier:
                keyid:E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/NIvSTttZmmMFITaDuhwpJvhNiPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:b1:fe:37:cd:18:d4:da:ac:77:ce:c8:a6:06:37:6c:99:47:
         de:ec:55:fe:1a:5c:e2:01:29:11:63:ec:69:ef:8a:69:9f:e5:
         54:61:e0:23:a7:57:db:94:b0:55:81:28:25:68:3f:5b:00:81:
         bd:11:90:3d:f0:d9:85:ab:1b:27:6d:d0:3b:db:c3:da:cd:2c:
         02:ec:55:5f:c9:34:97:c3:4b:ff:e7:4d:53:0e:ec:e3:93:f4:
         62:1c:9d:f9:fd:0a:18:7d:ad:04:c2:2d:7e:e6:a2:0b:03:ab:
         8e:a8:38:6b:44:30:26:77:7a:78:61:af:2a:8d:2b:b9:b3:0e:
         77:44:47:bd:9c:98:e5:92:b2:81:b5:c4:6a:18:b5:71:d3:a3:
         23:07:82:e1:93:28:62:b2:52:fe:b4:f4:77:1f:c1:d7:1a:ff:
         f0:0b:8f:d6:2e:42:ba:b0:2f:6b:7d:94:db:72:06:fe:5e:03:
         40:8f:72:53:77:68:40:22:bf:e7:1c:60:cd:3d:2f:1a:a2:f9:
         fa:c5:0b:0c:54:9f:74:ab:87:ad:1c:7d:4f:da:b0:dd:ab:5c:
         1b:b5:b6:12:64:97:88:0b:b5:5a:7b:da:6a:52:51:55:75:cc:
         d4:d8:4b:15:5f:36:c3:15:59:b9:56:5e:00:42:0d:a1:ba:b1:
         5d:90:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:35 2024 by rpki-client on console-fra.rpki-client.org