Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/jdt8YcHHgpq2ZidXdz9G6h-pOHc.roa
File:                     jdt8YcHHgpq2ZidXdz9G6h-pOHc.roa (raw, json)
Hash identifier:          baDaJEYNSQbSc9330R0XNsC4fI4Tj1LMD69P3pPq4Zk=
Subject key identifier:   8D:DB:7C:61:C1:C7:82:9A:B6:66:27:57:77:3F:46:EA:1F:A9:38:77
Certificate issuer:       /CN=b424721e133a182a1fd0d09656e3ce74d85acf60
Certificate serial:       01882086793A9E8049C2F6C03FF3A92EF929
Authority key identifier: B4:24:72:1E:13:3A:18:2A:1F:D0:D0:96:56:E3:CE:74:D8:5A:CF:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCRyHhM6GCof0NCWVuPOdNhaz2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/jdt8YcHHgpq2ZidXdz9G6h-pOHc.roa
Signing time:             Mon 15 May 2023 17:47:43 +0000
ROA not before:           Mon 15 May 2023 17:47:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        62.106.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:79:3a:9e:80:49:c2:f6:c0:3f:f3:a9:2e:f9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b424721e133a182a1fd0d09656e3ce74d85acf60
        Validity
            Not Before: May 15 17:47:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ddb7c61c1c7829ab6662757773f46ea1fa93877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:36:e7:f1:ed:df:cd:8a:7d:29:9d:63:9a:b9:
                    c8:db:b9:10:c6:09:fd:5f:8c:37:d1:83:6c:d1:d9:
                    3a:0d:16:55:30:86:ef:4a:85:a9:18:89:e6:91:5a:
                    be:3c:68:82:8d:a2:04:7b:90:00:8f:73:6d:43:03:
                    fa:46:6f:1b:09:91:20:54:36:c0:01:b0:0e:3c:a2:
                    74:3b:80:a6:36:83:4a:6f:fd:fe:54:3c:86:ed:e9:
                    33:63:63:27:71:a0:0f:28:43:56:41:f7:ca:49:92:
                    86:a2:8a:20:61:c5:9e:ef:6b:d4:9c:c3:d3:b0:9e:
                    19:24:f1:f5:ab:09:31:ed:8f:b7:26:1b:2c:bf:45:
                    15:49:2d:f3:29:7d:d6:26:c8:6e:c1:f4:47:96:4d:
                    62:70:13:f8:f7:2f:a8:a7:36:b5:06:43:72:17:a6:
                    bf:bf:8f:40:e8:93:a6:5f:26:34:ff:a1:0d:2d:f9:
                    f3:f0:41:9c:4b:78:ce:a0:cc:a5:86:96:cd:8c:72:
                    e3:ac:3f:50:01:da:d6:32:95:20:ba:b4:d4:d7:68:
                    6c:36:10:46:00:cb:39:bc:9c:31:b9:21:96:b0:9b:
                    8e:ce:74:69:d5:bf:e5:4b:bc:61:b3:05:41:62:60:
                    68:f0:bb:92:f1:70:99:4f:d2:62:1e:8c:c4:5f:eb:
                    16:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DB:7C:61:C1:C7:82:9A:B6:66:27:57:77:3F:46:EA:1F:A9:38:77
            X509v3 Authority Key Identifier:
                keyid:B4:24:72:1E:13:3A:18:2A:1F:D0:D0:96:56:E3:CE:74:D8:5A:CF:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCRyHhM6GCof0NCWVuPOdNhaz2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/jdt8YcHHgpq2ZidXdz9G6h-pOHc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/tCRyHhM6GCof0NCWVuPOdNhaz2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:55:0b:c5:8e:ac:ff:07:63:39:21:20:7f:41:5a:66:6d:
         b8:35:ac:04:05:22:ef:90:e9:94:f3:ff:4d:61:06:42:02:95:
         59:e0:18:23:17:6c:4b:ee:20:1d:be:bb:e1:84:d1:3e:e4:2e:
         86:a6:ee:d7:21:85:21:89:53:a5:97:e8:7f:d4:8f:17:48:88:
         4d:77:25:86:3f:3a:28:90:cf:63:ca:d6:f6:8a:bf:16:4a:ab:
         80:52:1f:e8:a4:fd:70:f0:c1:76:1b:63:50:7a:44:b1:23:af:
         24:60:e2:56:a5:a5:70:ba:97:c7:df:1d:24:e5:57:5b:db:4f:
         9a:67:ab:d4:61:c5:56:63:45:78:3e:b4:d9:b3:b2:3b:38:f4:
         0f:d7:4e:cd:0a:25:69:c2:b4:ab:c3:29:07:b6:38:c2:7f:12:
         49:1f:b1:a8:3e:cd:74:71:fd:8a:4f:b4:e4:60:2b:ff:8e:63:
         4b:a9:08:86:70:bb:dc:6b:db:38:d6:36:33:e1:d0:53:58:b2:
         93:a1:de:b3:16:bd:e0:7b:75:56:f6:f4:34:ec:b6:14:6b:34:
         67:df:62:4b:0a:2b:bb:30:eb:53:39:9b:3f:a2:b5:27:7b:e0:
         bb:01:75:72:ef:76:31:03:03:42:b3:e0:8e:d7:b1:0f:67:26:
         74:af:5c:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghnk6noBJwvbAP/OpLvkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjQ3MjFlMTMzYTE4MmExZmQwZDA5NjU2ZTNjZTc0ZDg1
YWNmNjAwHhcNMjMwNTE1MTc0NzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGRiN2M2MWMxYzc4MjlhYjY2NjI3NTc3NzNmNDZlYTFmYTkzODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizbn8e3fzYp9KZ1jmrnI27kQxgn9
X4w30YNs0dk6DRZVMIbvSoWpGInmkVq+PGiCjaIEe5AAj3NtQwP6Rm8bCZEgVDbA
AbAOPKJ0O4CmNoNKb/3+VDyG7ekzY2MncaAPKENWQffKSZKGooogYcWe72vUnMPT
sJ4ZJPH1qwkx7Y+3Jhssv0UVSS3zKX3WJshuwfRHlk1icBP49y+opza1BkNyF6a/
v49A6JOmXyY0/6ENLfnz8EGcS3jOoMylhpbNjHLjrD9QAdrWMpUgurTU12hsNhBG
AMs5vJwxuSGWsJuOznRp1b/lS7xhswVBYmBo8LuS8XCZT9JiHozEX+sWuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI3bfGHBx4KatmYnV3c/RuofqTh3MB8GA1UdIwQY
MBaAFLQkch4TOhgqH9DQllbjznTYWs9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENSeUhoTTZHQ29mME5DV1Z1UE9kTmhhejJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMjk0NGItYjgxMC00NGI5LTk3Yzkt
NjIwOGVmN2ZmZDkxLzEvamR0OFljSEhncHEyWmlkWGR6OUc2aC1wT0hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMjk0NGItYjgxMC00NGI5LTk3YzktNjIwOGVmN2ZmZDkx
LzEvdENSeUhoTTZHQ29mME5DV1Z1UE9kTmhhejJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpKMA0G
CSqGSIb3DQEBCwUAA4IBAQAZD1ULxY6s/wdjOSEgf0FaZm24NawEBSLvkOmU8/9N
YQZCApVZ4BgjF2xL7iAdvrvhhNE+5C6Gpu7XIYUhiVOll+h/1I8XSIhNdyWGPzoo
kM9jytb2ir8WSquAUh/opP1w8MF2G2NQekSxI68kYOJWpaVwupfH3x0k5Vdb20+a
Z6vUYcVWY0V4PrTZs7I7OPQP107NCiVpwrSrwykHtjjCfxJJH7GoPs10cf2KT7Tk
YCv/jmNLqQiGcLvca9s41jYz4dBTWLKTod6zFr3ge3VW9vQ07LYUazRn32JLCiu7
MOtTOZs/orUne+C7AXVy73YxAwNCs+CO17EPZyZ0r1zB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:42 2024 by rpki-client on console-fra.rpki-client.org