Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/OQ1nid4jXrEeMalIsUvPg8ZZF8o.roa
File:                     OQ1nid4jXrEeMalIsUvPg8ZZF8o.roa (raw, json)
Hash identifier:          K2f8m8vnFtz1Pckrjy55aUWozdcZwKT8jkiY54//kpk=
Subject key identifier:   39:0D:67:89:DE:23:5E:B1:1E:31:A9:48:B1:4B:CF:83:C6:59:17:CA
Certificate issuer:       /CN=6c9b33fd0bf5f364f4894a7c32c36217aa5b4ab2
Certificate serial:       B8AA5E
Authority key identifier: 6C:9B:33:FD:0B:F5:F3:64:F4:89:4A:7C:32:C3:62:17:AA:5B:4A:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJsz_Qv182T0iUp8MsNiF6pbSrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/OQ1nid4jXrEeMalIsUvPg8ZZF8o.roa
Signing time:             Sat 01 Jan 2022 06:57:52 +0000
ROA not before:           Sat 01 Jan 2022 06:57:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        62.233.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12102238 (0xb8aa5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c9b33fd0bf5f364f4894a7c32c36217aa5b4ab2
        Validity
            Not Before: Jan  1 06:57:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=390d6789de235eb11e31a948b14bcf83c65917ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:68:38:54:c7:6f:ea:90:ae:7c:35:ef:86:
                    b1:a5:75:1a:f8:07:e0:1f:aa:a9:c6:fe:0f:33:ee:
                    f2:99:40:ee:07:41:5b:00:ba:84:6f:a7:87:41:d6:
                    cc:c5:6f:7a:56:ed:3c:33:f7:a4:f3:12:9e:62:99:
                    3a:97:7c:67:91:4b:d3:99:01:d3:44:90:07:88:39:
                    02:a6:8b:2b:e7:8c:ab:8a:08:74:94:1c:b6:96:33:
                    40:eb:76:c1:db:33:fc:68:5c:60:0a:ac:ee:e7:c5:
                    df:0f:2d:1d:90:0e:a2:14:7c:0a:d6:3d:50:e1:96:
                    bf:7b:f0:6c:19:7f:e6:bd:8e:a2:6a:34:8b:f5:2c:
                    d1:8f:b5:00:38:e2:1f:cb:a0:f5:6d:01:c5:86:53:
                    f3:bb:e9:4c:ec:e8:e5:cb:e4:4f:47:cb:ca:89:f6:
                    af:ee:91:bb:8d:b2:05:53:27:01:77:bf:fe:e8:ba:
                    49:43:8d:75:48:88:51:70:a7:11:94:6f:b5:a3:b4:
                    93:9c:59:65:61:67:7f:40:7a:8f:99:6a:29:86:a4:
                    1d:45:8c:a0:ad:cf:ee:8d:0b:16:94:cc:9d:a7:90:
                    c3:20:77:ab:0a:9f:2b:46:f0:25:16:c5:94:48:1e:
                    93:f2:1f:8e:d5:27:57:4f:6d:36:18:22:51:4a:c7:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0D:67:89:DE:23:5E:B1:1E:31:A9:48:B1:4B:CF:83:C6:59:17:CA
            X509v3 Authority Key Identifier:
                keyid:6C:9B:33:FD:0B:F5:F3:64:F4:89:4A:7C:32:C3:62:17:AA:5B:4A:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJsz_Qv182T0iUp8MsNiF6pbSrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/OQ1nid4jXrEeMalIsUvPg8ZZF8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/bJsz_Qv182T0iUp8MsNiF6pbSrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e8:da:a5:9a:11:95:8b:e4:55:c3:58:74:41:33:86:e6:4f:
         ce:83:98:2e:71:e1:ef:42:f6:a3:0e:a9:ab:b0:e7:b5:dd:dd:
         81:67:b1:9f:92:27:e3:5c:42:27:23:ce:44:27:b1:19:48:8d:
         db:cc:dc:53:8d:46:16:64:6e:90:a4:1b:e1:fd:61:81:47:58:
         9f:20:1f:7e:0f:5d:d7:42:38:40:03:4a:d5:57:b2:6f:99:7e:
         5d:54:4a:a9:c2:74:1d:76:bf:5b:11:fc:45:67:01:a0:00:fa:
         1e:ee:33:53:3a:68:c0:0e:eb:19:c8:d5:e8:47:b9:2a:e0:ab:
         ef:e1:fd:f9:e0:82:e8:fb:0f:88:e4:ce:2f:a0:27:13:16:85:
         d6:b8:21:48:fe:df:62:fc:53:35:ad:84:fe:a8:de:cd:53:2e:
         98:42:fc:70:81:ac:22:47:3d:33:ac:53:3a:14:27:37:b2:1f:
         90:a4:56:4b:9a:ca:a2:a4:e0:9b:cb:83:5b:cd:67:01:3a:0d:
         c6:a5:5a:10:5e:a7:46:59:91:23:09:91:86:af:60:1a:fb:1a:
         0a:e3:a7:fe:d2:02:81:1f:15:7e:6a:f8:ce:35:6c:8a:14:63:
         22:61:75:40:89:d0:80:65:16:8d:b1:59:02:77:9b:03:68:82:
         6b:ee:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org