Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/Pr6cQQ_MMtiwq18aGlHGAfAyJR8.roa
File:                     Pr6cQQ_MMtiwq18aGlHGAfAyJR8.roa (raw, json)
Hash identifier:          8u0w3/5daf3q0I89CvoHapvwFteHvp4mSpmPnsONf8U=
Subject key identifier:   3E:BE:9C:41:0F:CC:32:D8:B0:AB:5F:1A:1A:51:C6:01:F0:32:25:1F
Certificate issuer:       /CN=e501fe097897739c5bf9b257313a76974e242556
Certificate serial:       018622EBE1A06DD660D11FE6BA66C5D402B1
Authority key identifier: E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/Pr6cQQ_MMtiwq18aGlHGAfAyJR8.roa
Signing time:             Sun 05 Feb 2023 18:52:09 +0000
ROA not before:           Sun 05 Feb 2023 18:52:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209181
IP address blocks:        62.3.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:22:eb:e1:a0:6d:d6:60:d1:1f:e6:ba:66:c5:d4:02:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501fe097897739c5bf9b257313a76974e242556
        Validity
            Not Before: Feb  5 18:52:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3ebe9c410fcc32d8b0ab5f1a1a51c601f032251f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:85:6f:88:a6:34:e1:75:97:b7:b0:64:93:
                    dd:a8:06:64:b4:a3:e0:cf:0d:7e:a9:1b:70:da:45:
                    09:2d:15:d4:f6:b6:6e:68:74:55:ee:27:d9:3f:87:
                    41:67:e5:d4:e4:08:56:ae:17:09:a8:36:4b:fb:c4:
                    43:c6:6f:0a:a0:52:44:da:57:ea:56:d9:40:b6:62:
                    fd:e3:df:90:0a:1c:5e:6f:b9:c1:6f:ef:34:70:41:
                    dd:2c:48:5a:6f:12:09:46:40:58:f4:81:92:d2:96:
                    43:ab:6f:20:4f:03:eb:bb:8f:8b:d0:0d:9d:22:68:
                    95:15:e5:57:a1:81:72:35:3f:79:8b:4c:80:f4:16:
                    fb:d5:5d:0b:e7:0c:9d:98:0e:f5:fd:07:b5:bc:ea:
                    5a:ba:fd:d6:f5:c3:09:2e:a0:22:0a:54:d1:c2:c1:
                    2d:9c:67:83:fa:81:19:74:f0:74:f9:b6:46:e5:db:
                    86:24:49:86:11:34:86:1e:9b:5a:0b:56:a6:54:50:
                    05:e1:25:06:aa:98:9d:2f:6b:e1:39:4e:e3:16:19:
                    c6:a1:63:92:3c:04:8e:ee:2c:a3:24:5d:30:e6:4e:
                    ef:97:da:a6:a5:1d:18:51:2b:cf:14:aa:a5:c0:8d:
                    54:d2:19:ef:ad:cf:c8:15:14:a1:56:a0:14:5c:02:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BE:9C:41:0F:CC:32:D8:B0:AB:5F:1A:1A:51:C6:01:F0:32:25:1F
            X509v3 Authority Key Identifier:
                keyid:E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/Pr6cQQ_MMtiwq18aGlHGAfAyJR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:78:e7:51:19:d0:ac:ce:09:83:a1:77:4a:3c:9e:34:51:5c:
         8f:ac:a7:75:50:14:f4:2f:ce:41:05:4a:71:01:f9:4d:90:a9:
         95:6b:b5:c4:ad:e9:f9:f2:ee:25:ea:68:1e:bd:c6:a8:b5:11:
         63:57:41:b1:17:42:4d:be:40:21:10:6c:48:88:0f:dd:5b:2a:
         d7:f5:cf:fc:7d:10:da:f4:e7:ab:54:48:8d:fe:0a:2d:d8:5a:
         9b:ed:a6:5e:dd:9f:3f:61:98:36:47:56:d8:4a:40:c1:32:4a:
         6b:21:de:3b:7b:a9:ed:ca:a0:61:43:34:d5:e1:eb:0d:a5:08:
         ea:7b:74:25:e1:b0:16:9c:f4:a2:16:84:ca:bc:58:82:12:c4:
         0f:17:d8:11:9e:fd:37:93:7b:65:ea:9c:c9:e5:61:b3:e5:d6:
         e5:ae:31:f6:91:57:de:67:e6:93:90:9e:bb:8c:ff:74:2b:fb:
         95:52:94:8d:6a:5e:46:09:09:b9:c5:60:af:c8:bf:ff:f7:20:
         f8:7e:d7:3d:20:d1:54:8d:e6:8c:4a:61:ff:77:e8:03:c5:15:
         4d:fd:41:97:16:18:e7:2d:6e:e3:da:0f:2a:7c:63:db:d6:74:
         8c:6f:21:e2:42:79:50:28:af:91:2a:c9:bb:1a:cc:4c:40:5a:
         72:3b:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org