Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/Lgv3aobWJcmgju7yx4hXGGpx2Rk.roa
File:                     Lgv3aobWJcmgju7yx4hXGGpx2Rk.roa (raw, json)
Hash identifier:          vP2Mdo8YB8aYS9qgCz62mz5b0QTzRag7oBOJS7Qbklg=
Subject key identifier:   2E:0B:F7:6A:86:D6:25:C9:A0:8E:EE:F2:C7:88:57:18:6A:71:D9:19
Certificate issuer:       /CN=51b365732103ca64a5885e5b90f8edada08e2884
Certificate serial:       019672F2
Authority key identifier: 51:B3:65:73:21:03:CA:64:A5:88:5E:5B:90:F8:ED:AD:A0:8E:28:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbNlcyEDymSliF5bkPjtraCOKIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/Lgv3aobWJcmgju7yx4hXGGpx2Rk.roa
Signing time:             Wed 02 Feb 2022 00:54:06 +0000
ROA not before:           Wed 02 Feb 2022 00:54:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        62.122.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26637042 (0x19672f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b365732103ca64a5885e5b90f8edada08e2884
        Validity
            Not Before: Feb  2 00:54:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2e0bf76a86d625c9a08eeef2c78857186a71d919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e8:37:b1:8c:a8:72:85:f4:1e:ad:90:6d:24:
                    33:14:b5:eb:07:d9:a2:dc:f9:71:c6:48:ce:92:ae:
                    32:c3:3e:f4:ca:69:06:98:ee:44:bd:2e:6b:1a:c8:
                    19:fc:15:8b:2a:d7:5d:03:f0:ea:bb:61:fc:30:e2:
                    8f:86:79:20:c8:2d:ce:27:0b:d4:7f:92:65:97:dd:
                    f2:25:ea:12:c3:01:e5:81:df:e4:d9:c0:8c:38:2b:
                    8e:45:4d:f4:bc:b3:47:1a:d8:b3:58:24:eb:78:1d:
                    93:ab:0e:85:d2:99:65:75:03:c5:d4:47:27:ce:44:
                    12:6d:18:f1:df:fb:70:d4:cf:6b:8c:49:ef:16:f9:
                    11:c8:8c:dc:9f:76:2c:bb:5b:f7:7c:0b:be:b8:a2:
                    ff:21:bb:c0:16:f8:47:0f:d1:ba:de:ac:20:be:d5:
                    0c:70:ed:03:df:3b:4a:62:4c:a0:f1:55:f2:e1:52:
                    1c:b8:35:c0:b0:0c:ae:15:21:72:07:b7:63:47:80:
                    e9:52:bc:6e:5c:c3:79:43:83:3e:24:c7:16:e2:32:
                    08:e1:39:70:75:16:2d:b6:94:32:49:ba:72:62:7c:
                    e1:f0:1d:78:da:c2:53:3c:8f:1c:c1:cc:c8:02:7e:
                    7a:77:d9:0a:66:ca:c5:67:dc:6a:0d:ab:f9:ac:08:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0B:F7:6A:86:D6:25:C9:A0:8E:EE:F2:C7:88:57:18:6A:71:D9:19
            X509v3 Authority Key Identifier:
                keyid:51:B3:65:73:21:03:CA:64:A5:88:5E:5B:90:F8:ED:AD:A0:8E:28:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNlcyEDymSliF5bkPjtraCOKIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/Lgv3aobWJcmgju7yx4hXGGpx2Rk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/UbNlcyEDymSliF5bkPjtraCOKIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c2:90:0c:b1:68:68:f6:67:b3:68:1a:77:8a:ec:c3:13:a1:
         22:36:78:88:de:7c:4a:73:a2:90:53:c4:a4:b6:30:1a:22:61:
         51:36:0a:e3:1d:9e:c9:98:1f:fd:fb:21:df:7c:14:0e:0f:dc:
         3a:ce:0e:2e:90:cf:90:2d:32:f1:87:ac:42:83:0f:37:08:fe:
         a3:84:72:c8:23:bb:aa:88:68:32:4d:70:96:51:10:55:eb:c7:
         29:24:cd:58:21:1c:d3:2c:aa:49:45:cd:55:04:bb:51:33:f6:
         7e:01:c1:67:dc:d1:b1:02:ff:aa:0f:05:7c:8c:f0:40:c7:0c:
         e4:86:b2:af:7b:68:2a:44:e7:65:24:12:d8:58:c7:f8:d9:f5:
         4c:db:5b:dc:fc:f5:1a:65:16:f2:f0:f3:57:99:6c:ac:1b:71:
         a2:d9:78:4a:8b:aa:93:f1:b7:65:a6:14:e8:76:8e:c5:e8:91:
         ed:41:8a:04:97:c1:e7:9d:4e:72:c9:ca:ac:91:db:d1:c4:30:
         87:a8:14:77:a9:b8:28:43:8b:73:d3:c3:8f:b8:78:f7:c1:26:
         ba:1b:7e:5d:3c:a6:0d:88:3d:f2:75:ef:31:3a:6a:12:01:c4:
         74:75:c9:de:7e:14:60:3e:14:4a:af:4d:2c:ae:85:03:04:b1:
         7a:f2:26:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:34 2024 by rpki-client on console-ams.rpki-client.org