Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/_5Zqip3feO7pU4z4vtsZMvbFS1Y.roa
File:                     _5Zqip3feO7pU4z4vtsZMvbFS1Y.roa (raw, json)
Hash identifier:          lshLZN/Gja31IekLnKk3n9k+Fk8DRfuoDzIi4RfjrCU=
Subject key identifier:   FF:96:6A:8A:9D:DF:78:EE:E9:53:8C:F8:BE:DB:19:32:F6:C5:4B:56
Certificate issuer:       /CN=45577ff2afd15ed1484314510c464641dea0e37c
Certificate serial:       C1728B
Authority key identifier: 45:57:7F:F2:AF:D1:5E:D1:48:43:14:51:0C:46:46:41:DE:A0:E3:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RVd_8q_RXtFIQxRRDEZGQd6g43w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/_5Zqip3feO7pU4z4vtsZMvbFS1Y.roa
Signing time:             Sat 01 Jan 2022 03:54:17 +0000
ROA not before:           Sat 01 Jan 2022 03:54:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209235
IP address blocks:        62.106.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12677771 (0xc1728b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45577ff2afd15ed1484314510c464641dea0e37c
        Validity
            Not Before: Jan  1 03:54:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff966a8a9ddf78eee9538cf8bedb1932f6c54b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:49:13:87:6d:e4:83:0e:52:76:bb:e9:b1:
                    ab:c0:07:de:81:21:39:25:37:54:30:a5:da:bf:e5:
                    26:99:92:52:31:77:d6:a8:d6:59:39:30:e7:e5:71:
                    09:e8:8c:8a:e5:27:d8:2d:53:3f:83:4a:d7:45:3e:
                    92:68:71:1a:58:58:1c:a3:59:30:da:5f:15:32:2c:
                    bf:85:04:5e:61:c9:de:03:17:bb:f8:ef:15:96:d0:
                    85:fb:15:c5:87:96:f7:73:ec:3c:ea:25:46:36:60:
                    c3:8a:7e:ef:35:69:c9:f0:94:74:60:28:f9:d2:7e:
                    41:e8:d0:53:4c:16:b4:1f:30:bf:9f:1b:9f:82:85:
                    91:38:b9:dd:f7:50:47:af:b3:89:38:cd:c4:ff:93:
                    43:fb:65:28:58:de:4f:c8:77:e1:12:e2:0a:38:47:
                    d2:3d:6c:cb:d6:fa:c7:2e:5e:53:4f:42:0f:67:0e:
                    b6:7a:69:d0:a7:c1:e2:9c:57:cd:ed:8f:9b:0f:e7:
                    53:97:2d:93:66:ab:82:dc:6c:78:c0:bd:eb:1f:82:
                    1e:a8:f6:1f:46:f3:01:4a:d3:9a:5e:59:ed:b0:02:
                    c1:a2:b6:25:38:17:35:8b:47:08:46:51:e7:1b:b5:
                    fd:4e:25:7f:cb:fa:43:a1:a5:19:db:bb:ea:15:fd:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:96:6A:8A:9D:DF:78:EE:E9:53:8C:F8:BE:DB:19:32:F6:C5:4B:56
            X509v3 Authority Key Identifier:
                keyid:45:57:7F:F2:AF:D1:5E:D1:48:43:14:51:0C:46:46:41:DE:A0:E3:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVd_8q_RXtFIQxRRDEZGQd6g43w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/_5Zqip3feO7pU4z4vtsZMvbFS1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/RVd_8q_RXtFIQxRRDEZGQd6g43w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:fa:71:c1:67:05:a2:32:c8:d7:a7:b3:97:7a:f5:81:06:eb:
         45:d0:28:b3:56:1c:90:58:ad:9e:42:a7:07:22:09:ff:7b:10:
         fd:9e:4f:9b:ac:61:25:6f:ab:27:7d:85:7f:6b:f5:d9:ba:ac:
         1a:85:59:15:81:eb:3d:e9:59:ab:fc:ce:4f:24:5f:80:bc:1a:
         da:51:18:be:0e:aa:4f:73:96:75:9c:3f:12:a3:23:02:a2:bf:
         7f:7b:b5:f8:00:c8:79:1b:ba:34:86:da:77:a3:bd:a4:ce:a7:
         82:bd:38:05:aa:1e:a3:8d:a0:bf:f5:53:f0:a0:0e:44:86:bc:
         75:0f:01:ba:0c:6d:20:5b:51:ad:33:e3:20:d5:c6:3a:b3:7a:
         d0:b4:d9:6c:f3:01:15:be:da:95:69:3d:ef:aa:ea:90:96:76:
         3c:7d:2c:ce:47:ac:91:25:cd:48:f9:0e:99:e7:9d:43:2d:be:
         a6:e0:8c:8f:a0:71:ca:99:e5:ff:eb:66:f1:66:d4:c3:c8:0a:
         34:d1:9c:03:5c:55:88:21:9b:49:f6:36:cc:54:de:40:02:83:
         b3:dd:e0:ba:7d:f9:3b:50:13:d1:eb:b5:62:4b:96:e2:d8:5f:
         8a:5e:ae:80:1d:85:4c:0a:4c:1c:65:d8:b5:70:0d:4d:ed:e8:
         f9:41:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:53 2024 by rpki-client on console-ams.rpki-client.org