Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/reupm2AhjxDlr29vQo_1lvFK5r8.roa
File:                     reupm2AhjxDlr29vQo_1lvFK5r8.roa (raw, json)
Hash identifier:          7PkkC8uvQv7TZxnBPuem1SWfBcdjjPaOk1d2Pk6WLBI=
Subject key identifier:   AD:EB:A9:9B:60:21:8F:10:E5:AF:6F:6F:42:8F:F5:96:F1:4A:E6:BF
Certificate issuer:       /CN=4f51f8c5d5086854b6cbffac01a2647068421e81
Certificate serial:       0136A44C
Authority key identifier: 4F:51:F8:C5:D5:08:68:54:B6:CB:FF:AC:01:A2:64:70:68:42:1E:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1H4xdUIaFS2y_-sAaJkcGhCHoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/reupm2AhjxDlr29vQo_1lvFK5r8.roa
Signing time:             Sat 01 Jan 2022 12:57:01 +0000
ROA not before:           Sat 01 Jan 2022 12:57:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43754
IP address blocks:        31.216.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20358220 (0x136a44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f51f8c5d5086854b6cbffac01a2647068421e81
        Validity
            Not Before: Jan  1 12:57:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=adeba99b60218f10e5af6f6f428ff596f14ae6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bd:0c:8b:7a:25:7b:96:3f:03:e1:76:36:5b:
                    f1:e2:0e:1f:d6:1a:c5:a9:4a:fe:12:d9:a8:1d:1a:
                    0f:05:d9:47:ff:08:52:4e:67:21:dd:d6:2a:3e:86:
                    8e:4f:dc:17:69:3c:79:90:fe:96:22:74:c1:a1:5a:
                    ab:dc:22:b2:e4:91:19:9f:4d:80:ec:14:e7:f4:e6:
                    36:5a:35:ac:72:bd:be:5c:ac:ad:39:b0:98:e4:b9:
                    a0:cb:ff:72:36:b3:de:26:05:33:1d:bd:a5:41:12:
                    78:6c:b8:52:cb:3b:4e:34:c3:38:70:d2:1e:39:e4:
                    eb:6a:94:c5:52:0f:14:a9:6a:6e:5a:32:cc:f6:3b:
                    b3:c6:f1:fe:2e:71:78:0d:38:8e:4d:5e:2c:c4:34:
                    0a:23:ac:50:08:7c:10:75:de:96:56:22:43:ce:1d:
                    4f:01:0c:ca:47:40:76:d1:9e:51:bd:f4:64:cd:34:
                    ea:08:dd:d6:09:e2:35:1c:73:bb:e4:a9:94:f5:af:
                    c4:3f:64:83:34:e6:3c:00:1d:9b:dc:55:61:f7:f2:
                    2f:92:0f:2c:8e:df:db:8e:0a:27:76:e7:89:5f:81:
                    d6:fa:64:04:58:42:a2:80:1f:77:1b:57:05:32:84:
                    66:b3:d4:10:c1:1a:71:81:de:ad:37:ef:40:f8:0d:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EB:A9:9B:60:21:8F:10:E5:AF:6F:6F:42:8F:F5:96:F1:4A:E6:BF
            X509v3 Authority Key Identifier:
                keyid:4F:51:F8:C5:D5:08:68:54:B6:CB:FF:AC:01:A2:64:70:68:42:1E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1H4xdUIaFS2y_-sAaJkcGhCHoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/reupm2AhjxDlr29vQo_1lvFK5r8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/T1H4xdUIaFS2y_-sAaJkcGhCHoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.216.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:11:99:f7:e3:b4:68:9c:bb:62:0c:c0:28:d5:36:6e:d2:89:
         84:bb:f6:31:b2:52:28:c0:d8:5f:39:10:26:73:26:2d:d4:59:
         1a:26:be:7f:8d:5c:fe:70:1b:3a:08:e2:a5:a8:0b:17:07:5c:
         6b:a1:68:56:ed:8d:c3:20:84:d9:b0:82:d9:0c:ec:dd:f2:f8:
         75:01:c1:92:13:b8:4f:a4:17:b0:c5:9b:16:4e:a0:d3:92:24:
         44:8f:13:28:88:f9:9f:84:fc:b6:b3:a0:1f:c1:58:5b:22:b5:
         f2:9d:3d:9d:a0:3a:aa:e2:cf:a5:83:e8:8f:5c:59:4b:4b:23:
         9f:60:46:76:ba:0d:04:86:48:d9:57:fa:70:dc:da:b4:af:be:
         01:2e:9d:5b:89:a4:e3:19:1d:14:bf:4b:22:84:b4:c9:6c:fc:
         87:d8:d8:66:9d:e2:5e:76:6a:3b:54:b0:05:a5:41:82:2c:32:
         ca:0b:b7:2a:22:c7:32:e8:d5:70:c9:c0:aa:da:d1:cb:63:00:
         49:ee:3f:f4:e9:62:b0:ee:6e:ac:4a:0f:22:29:23:ea:9d:d1:
         0d:af:df:eb:0e:0d:9a:5a:ad:9f:87:7d:5a:68:6a:ff:21:7d:
         95:ba:2e:62:b8:5e:a9:09:d9:02:e6:6e:d1:2f:23:14:30:dd:
         de:ef:6d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:50 2024 by rpki-client on console-fra.rpki-client.org