Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/fVqHIuzuTeDtgQPQi2G7TSi5UK8.roa
File:                     fVqHIuzuTeDtgQPQi2G7TSi5UK8.roa (raw, json)
Hash identifier:          fQ9P5CZVFVZgCAggwZ2AiRHDtMs55vyf0f562uxu8V4=
Subject key identifier:   7D:5A:87:22:EC:EE:4D:E0:ED:81:03:D0:8B:61:BB:4D:28:B9:50:AF
Certificate issuer:       /CN=e501fe097897739c5bf9b257313a76974e242556
Certificate serial:       0132BA9C
Authority key identifier: E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/fVqHIuzuTeDtgQPQi2G7TSi5UK8.roa
Signing time:             Fri 08 Apr 2022 10:45:02 +0000
ROA not before:           Fri 08 Apr 2022 10:45:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18345
IP address blocks:        62.3.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20101788 (0x132ba9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501fe097897739c5bf9b257313a76974e242556
        Validity
            Not Before: Apr  8 10:45:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d5a8722ecee4de0ed8103d08b61bb4d28b950af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:14:51:13:fc:91:fe:68:f5:d5:65:bc:83:
                    b6:fc:0b:20:02:7e:2a:95:9a:fe:48:3a:7c:bc:ed:
                    4e:7a:f1:68:fa:0f:86:de:8f:50:1b:ed:35:20:6d:
                    68:f2:47:38:68:6f:c6:3a:fd:c2:9f:61:47:30:35:
                    22:ae:97:07:a2:74:45:ef:93:6a:16:10:a5:b8:b2:
                    ee:e2:af:5d:db:2b:8e:3e:ce:9c:65:b6:57:80:14:
                    85:0d:78:21:75:6a:ba:cc:c7:16:1b:13:13:be:f8:
                    fe:34:f5:f0:c3:45:63:14:8c:14:5b:ba:93:f9:ba:
                    38:31:6d:e7:14:e7:68:88:6c:33:8b:0a:36:4e:93:
                    9e:73:e3:2b:03:fd:d9:50:03:14:21:15:5e:a2:64:
                    62:9f:e0:62:02:6a:53:cd:10:00:6f:61:9b:24:ea:
                    1a:f9:ec:36:d8:41:c4:2c:cb:3c:08:59:72:c7:cb:
                    69:fc:cf:92:1e:7a:90:1c:6b:d4:4b:86:70:08:05:
                    56:62:ab:87:89:47:d6:e6:f2:0b:86:74:f8:bd:68:
                    84:76:36:4e:bd:14:2d:11:bc:64:30:54:36:e8:e4:
                    a0:c9:53:e2:95:c4:ec:42:de:3b:ef:f6:f3:f7:ef:
                    f0:c3:58:c4:06:27:ca:eb:0d:12:1a:8c:23:5e:68:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:87:22:EC:EE:4D:E0:ED:81:03:D0:8B:61:BB:4D:28:B9:50:AF
            X509v3 Authority Key Identifier:
                keyid:E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/fVqHIuzuTeDtgQPQi2G7TSi5UK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:5b:48:ab:83:58:89:11:de:da:81:0d:c4:66:6e:68:41:84:
         a2:56:e2:80:8a:c5:f7:f6:1c:ba:bb:66:fb:97:53:a8:0c:9d:
         6b:39:ce:45:aa:1f:ba:d4:75:32:43:ea:f7:73:ea:6f:e2:35:
         ec:31:4a:a9:07:a2:aa:62:f9:6b:48:ee:bc:32:54:16:22:e8:
         58:94:6d:fd:e3:2f:06:76:6d:0d:98:31:ed:b8:9a:92:50:ba:
         85:05:2d:53:e0:4c:d5:4e:d0:01:65:43:da:d7:f4:54:7c:7b:
         3f:18:d3:e7:53:ea:f0:2e:cd:10:f7:49:48:cf:8d:f1:bc:9d:
         fc:8c:82:b9:67:c0:08:96:68:7f:fa:87:00:6e:df:2d:b5:92:
         97:42:14:5b:3c:d0:06:29:92:3d:ae:04:cd:74:35:00:11:a9:
         0a:bd:ba:4e:2a:9d:a9:aa:2f:00:cf:7f:ba:1b:7d:36:14:c1:
         b2:74:7e:82:b3:49:55:cf:48:4c:b9:65:a3:0d:a7:f8:f8:52:
         ef:3e:71:c2:e4:d4:1a:19:6c:b0:5e:9f:cd:c4:dc:43:be:74:
         76:75:6c:a7:53:60:09:0a:d3:6e:50:0e:24:49:8e:10:65:e9:
         68:52:7b:82:3c:d1:52:c5:7f:bd:8d:03:db:64:f6:dd:df:83:
         27:09:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:35 2024 by rpki-client on console-fra.rpki-client.org