Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/dyWTHQ1Tr4hUO7pIXPaSF0PKo6I.roa
File:                     dyWTHQ1Tr4hUO7pIXPaSF0PKo6I.roa (raw, json)
Hash identifier:          zxwdJhgc/IroaiYpg5JdmTmBJhkmEqrTPfvLBccoRqM=
Subject key identifier:   77:25:93:1D:0D:53:AF:88:54:3B:BA:48:5C:F6:92:17:43:CA:A3:A2
Certificate issuer:       /CN=e501fe097897739c5bf9b257313a76974e242556
Certificate serial:       0188203CB606140177B6183268416CE4B505
Authority key identifier: E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/dyWTHQ1Tr4hUO7pIXPaSF0PKo6I.roa
Signing time:             Mon 15 May 2023 16:27:09 +0000
ROA not before:           Mon 15 May 2023 16:27:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        62.3.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:3c:b6:06:14:01:77:b6:18:32:68:41:6c:e4:b5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501fe097897739c5bf9b257313a76974e242556
        Validity
            Not Before: May 15 16:27:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7725931d0d53af88543bba485cf6921743caa3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:7f:71:d6:0b:62:4c:f0:02:b5:f1:1c:9f:
                    dd:1c:8f:41:e1:6c:4c:27:f7:f4:e4:ce:bc:5c:5b:
                    aa:19:a6:eb:47:74:50:24:e9:bc:ea:18:6d:f9:22:
                    7b:7e:cd:71:cd:f0:1e:fc:72:28:e5:7b:18:a7:64:
                    ab:c5:69:a5:d2:7e:d5:34:a1:de:3f:9e:a2:97:ca:
                    96:b8:a4:e7:b6:09:48:e6:bb:78:f5:86:17:f4:bc:
                    72:f2:a5:b2:28:45:3a:3f:24:a8:d7:f2:8c:be:2e:
                    3d:ae:10:ae:ad:f6:40:6a:6d:d7:44:8b:e2:90:d2:
                    8d:d2:c5:c5:f7:30:49:25:ee:f2:00:41:1f:9d:a7:
                    29:d2:71:9e:92:38:45:0a:ff:06:34:30:fe:da:7f:
                    55:db:c0:5a:55:e5:db:b9:ab:55:88:88:91:4c:49:
                    2e:c6:90:89:d6:08:3b:20:49:20:a3:62:ee:6b:bf:
                    fe:f6:f6:d9:d3:18:32:e9:f4:96:9e:33:21:cb:ff:
                    50:e3:b7:fa:d1:df:a1:28:1a:16:f5:35:b2:fa:21:
                    d7:40:aa:e1:e4:c5:aa:9b:fe:bb:b7:98:2b:9d:bb:
                    7b:59:dc:4a:19:94:7b:2a:05:dc:ce:4a:c8:e4:5d:
                    a0:83:cb:f2:7e:bb:b1:c9:26:5b:36:28:3e:54:89:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:93:1D:0D:53:AF:88:54:3B:BA:48:5C:F6:92:17:43:CA:A3:A2
            X509v3 Authority Key Identifier:
                keyid:E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/dyWTHQ1Tr4hUO7pIXPaSF0PKo6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:10:44:2f:4d:08:6c:84:ed:2e:cf:c1:e2:9a:a9:52:03:35:
         76:ab:6c:bd:4b:d1:33:75:58:6c:b5:1d:a8:43:30:54:8e:c3:
         54:9e:dc:b5:01:1b:a9:94:d6:48:57:a4:20:d0:94:2f:5b:a6:
         dd:71:eb:10:f3:fe:9b:fc:89:25:9c:32:02:e9:e8:06:30:5e:
         ca:5c:72:fa:f9:c1:18:5f:b7:c1:b6:bd:f4:70:be:e2:d4:5e:
         91:3c:91:3b:1f:af:1e:14:38:ca:76:64:f4:0a:c7:95:e5:d4:
         af:d7:bb:01:6e:be:e4:4c:51:00:ea:89:69:ce:96:80:7b:c4:
         59:fc:2e:1b:0a:96:64:cc:f6:28:b8:89:22:37:e3:0b:eb:4a:
         f3:e9:3b:ab:d4:42:6f:fc:6b:f1:c9:ef:9a:a3:46:3a:23:fc:
         e1:b8:53:60:9f:3c:05:71:88:e6:2d:c7:da:a9:97:3d:74:51:
         42:5b:9c:b7:7b:2b:f4:1a:96:87:53:9c:f0:63:d5:b6:b8:12:
         24:c9:18:76:ae:10:83:93:5f:0c:b6:5b:4e:bc:3f:4d:65:0a:
         54:98:10:92:ae:7c:97:f4:fd:ab:e8:14:a6:ed:d8:f3:c8:6c:
         19:2f:18:6b:9a:4a:f0:5a:8f:ed:bb:78:fe:57:78:cd:66:85:
         e6:58:8d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:35 2024 by rpki-client on console-fra.rpki-client.org