Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/_SF-0Yv815wBEebXw6t6UJeNsqI.roa
File:                     _SF-0Yv815wBEebXw6t6UJeNsqI.roa (raw, json)
Hash identifier:          dQ6kR7EYLQkoIiwxys1xJT9Zs0rMD2ILMjOltV7EI2I=
Subject key identifier:   FD:21:7E:D1:8B:FC:D7:9C:01:11:E6:D7:C3:AB:7A:50:97:8D:B2:A2
Certificate issuer:       /CN=e501fe097897739c5bf9b257313a76974e242556
Certificate serial:       018A9A396FFC63DF69A009BDE66FDD459B57
Authority key identifier: E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/_SF-0Yv815wBEebXw6t6UJeNsqI.roa
Signing time:             Fri 15 Sep 2023 19:02:50 +0000
ROA not before:           Fri 15 Sep 2023 19:02:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206505
IP address blocks:        62.3.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9a:39:6f:fc:63:df:69:a0:09:bd:e6:6f:dd:45:9b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501fe097897739c5bf9b257313a76974e242556
        Validity
            Not Before: Sep 15 19:02:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd217ed18bfcd79c0111e6d7c3ab7a50978db2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:80:3f:4c:58:92:94:52:be:3b:21:31:b2:
                    4b:87:04:86:26:c5:a7:2a:07:41:87:e7:3c:62:86:
                    d9:6c:92:88:63:ab:d0:14:71:56:8c:6e:a6:08:3b:
                    3a:3b:89:7c:dd:36:a1:77:a0:0e:2f:e4:28:c5:0a:
                    7d:90:a9:69:73:f9:8e:de:6d:ea:34:f7:5a:39:70:
                    06:0d:a6:c2:95:5e:60:70:22:b6:e3:b3:45:6d:14:
                    7d:7e:d5:ea:75:52:40:fc:e8:fa:7b:fa:71:89:5c:
                    95:8e:f6:bc:f2:31:c9:ae:8d:3f:5f:3a:85:b4:a6:
                    a5:15:f5:3d:8f:9f:b3:21:57:06:b8:fd:e4:07:19:
                    9a:0a:e7:aa:7b:ed:f1:12:d3:04:e8:a5:48:26:f7:
                    ad:ec:ef:03:ce:b0:92:9e:be:7b:3c:07:f9:22:86:
                    59:ca:10:71:af:d1:b0:60:b3:e1:58:a7:4f:f2:e7:
                    66:ba:41:be:b8:aa:7b:6b:d7:c9:14:e4:6f:14:1a:
                    d0:58:19:87:37:db:f8:bf:7a:11:ff:42:8a:63:a0:
                    75:d3:ea:04:4d:cb:4d:cd:aa:ad:d6:27:9a:6b:87:
                    be:a1:e0:1b:1a:ac:10:ff:96:3a:ab:95:c6:52:5b:
                    25:c3:16:09:db:63:cf:52:c4:84:ec:69:6c:d5:ae:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:21:7E:D1:8B:FC:D7:9C:01:11:E6:D7:C3:AB:7A:50:97:8D:B2:A2
            X509v3 Authority Key Identifier:
                keyid:E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/_SF-0Yv815wBEebXw6t6UJeNsqI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:28:00:43:1a:0f:43:1e:ef:85:a0:18:93:9f:aa:8e:a0:
         fb:05:6a:4d:41:0f:12:4d:54:42:af:b6:b6:07:72:3b:74:7a:
         c8:95:f3:4b:44:ea:d9:82:58:a9:22:f0:0f:f9:70:ef:6a:06:
         9f:9b:9e:8e:c1:57:00:0b:20:17:17:23:88:4b:fb:a7:eb:c1:
         f5:a6:cd:1e:e9:f5:33:45:a7:dd:39:10:89:ae:08:be:f0:64:
         99:e4:26:96:da:e6:ce:f9:ce:35:14:9a:86:9e:38:ab:2b:27:
         44:66:ab:7c:5f:5b:fe:fc:b7:24:ea:24:9d:b6:9e:8e:44:1f:
         fa:3c:5b:17:98:56:56:58:1b:87:fd:29:bc:68:a7:43:6f:01:
         ac:26:6e:20:83:95:bc:58:98:a4:18:4f:27:e8:2c:50:4a:3d:
         0d:59:ca:d1:19:0e:e5:f4:b4:6b:5f:9d:94:20:21:7c:00:15:
         50:d5:26:44:18:89:48:70:4d:4e:d4:d4:f5:bd:cc:2e:2c:c2:
         7c:d2:d6:f4:c6:59:ba:32:b1:63:aa:bb:f4:a0:f1:91:15:0e:
         83:ca:25:d1:eb:df:31:df:fd:80:10:4c:4f:0b:2d:72:9f:9e:
         4c:b4:69:09:1a:2c:ab:8f:dc:35:f3:30:74:93:ab:24:a1:db:
         24:9e:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:35 2024 by rpki-client on console-fra.rpki-client.org