Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/72cda5-d05e-4881-9e2b-a6b6a2ce45f1/1/6tLzmvWElsoT1DBs8o7MHgdiaNU.roa
File:                     6tLzmvWElsoT1DBs8o7MHgdiaNU.roa (raw, json)
Hash identifier:          H+9o4AANeqCIhdwSq48HpKR6qxTBT/662WvBIYtuo1w=
Subject key identifier:   EA:D2:F3:9A:F5:84:96:CA:13:D4:30:6C:F2:8E:CC:1E:07:62:68:D5
Certificate issuer:       /CN=40bb60c1de6aa5054bee2b733f1c16741d83fc45
Certificate serial:       01856EF8E19FFEAE1E8EED7573A382956D51
Authority key identifier: 40:BB:60:C1:DE:6A:A5:05:4B:EE:2B:73:3F:1C:16:74:1D:83:FC:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QLtgwd5qpQVL7itzPxwWdB2D_EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/72cda5-d05e-4881-9e2b-a6b6a2ce45f1/1/6tLzmvWElsoT1DBs8o7MHgdiaNU.roa
Signing time:             Sun 01 Jan 2023 20:14:42 +0000
ROA not before:           Sun 01 Jan 2023 20:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        62.122.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:f8:e1:9f:fe:ae:1e:8e:ed:75:73:a3:82:95:6d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40bb60c1de6aa5054bee2b733f1c16741d83fc45
        Validity
            Not Before: Jan  1 20:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ead2f39af58496ca13d4306cf28ecc1e076268d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:f6:73:aa:09:8e:62:d6:83:9b:c4:e6:58:
                    5e:cc:f5:5d:57:9f:be:6e:66:09:ee:53:f7:d3:5f:
                    21:3f:29:76:c2:ee:07:00:c3:83:2f:16:86:9f:7d:
                    cc:75:cf:5d:f4:ba:29:4d:31:1d:86:ca:6f:20:fa:
                    2b:6c:8c:4b:f4:53:f2:8d:cd:d1:4c:a6:d7:1e:82:
                    3b:55:3c:91:98:64:f6:66:95:95:9c:c6:2f:c2:cb:
                    da:64:80:13:50:f8:68:a4:b6:8b:19:a4:a6:05:43:
                    12:39:cf:13:3b:4e:6f:62:eb:30:35:e4:55:0e:61:
                    ee:8d:c4:36:cb:02:16:84:1c:82:21:59:04:2c:d9:
                    e9:4a:85:03:fa:ba:2d:93:54:a5:4f:ff:9b:c3:ca:
                    24:6d:c2:a0:e9:5e:e5:1e:cc:fe:f7:55:48:1c:12:
                    08:f0:73:16:98:39:f7:b8:5c:46:bf:4b:88:17:55:
                    38:55:6c:2f:9c:32:78:50:dd:22:33:53:d1:fa:6b:
                    69:e4:4c:42:b1:a0:3c:23:60:a5:ce:a8:4d:d1:bb:
                    fa:fb:33:58:d6:49:a0:ff:84:39:c9:04:dd:c1:24:
                    58:0c:db:5f:f2:f7:56:0a:30:7d:ba:2c:5c:a8:2e:
                    b3:d3:db:15:a2:d5:eb:69:a5:fd:6e:b3:0c:d6:65:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D2:F3:9A:F5:84:96:CA:13:D4:30:6C:F2:8E:CC:1E:07:62:68:D5
            X509v3 Authority Key Identifier:
                keyid:40:BB:60:C1:DE:6A:A5:05:4B:EE:2B:73:3F:1C:16:74:1D:83:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLtgwd5qpQVL7itzPxwWdB2D_EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/72cda5-d05e-4881-9e2b-a6b6a2ce45f1/1/6tLzmvWElsoT1DBs8o7MHgdiaNU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/72cda5-d05e-4881-9e2b-a6b6a2ce45f1/1/QLtgwd5qpQVL7itzPxwWdB2D_EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:56:8d:ae:6d:4e:4b:c8:78:b1:1d:76:b0:1c:3e:e9:c3:19:
         65:24:cf:5a:58:ac:b0:7d:35:f1:7e:57:66:f7:62:e3:64:1e:
         92:ff:25:53:85:0f:8f:43:d3:08:ee:f0:9d:ba:ec:5c:49:ea:
         8b:04:bf:14:b2:b3:5c:8c:3f:a5:72:45:1c:14:57:c1:0c:b4:
         e7:e6:fa:ee:50:5e:f9:d3:37:5c:09:50:7d:66:9b:c4:29:06:
         52:b6:54:29:d3:4c:e3:ba:86:54:2d:25:be:06:8c:0f:d9:42:
         bb:64:e3:bc:d9:f6:3c:10:e2:24:a6:bc:79:c9:1c:4e:cc:2d:
         84:ef:3c:52:25:e9:1e:00:16:ed:1d:ec:53:4b:30:b4:5a:08:
         09:70:50:e7:f0:89:48:04:91:88:3c:29:fe:1b:e8:19:b6:cb:
         1e:d0:1a:55:93:33:df:e6:9f:1e:d1:80:93:7e:e1:7b:c2:d1:
         b6:f6:37:e6:f2:64:51:80:b2:30:15:19:18:06:38:72:62:a5:
         91:27:77:53:77:82:d0:a8:e5:70:40:5f:1d:8f:d3:29:7f:ac:
         f7:1b:8a:70:ef:db:f0:e6:a1:77:c1:a3:40:49:e6:61:d6:1e:
         c5:df:74:aa:ef:fa:e2:9c:9a:a3:62:70:47:69:c3:1c:77:5b:
         3d:a2:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:25 2024 by rpki-client on console-fra.rpki-client.org