Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/G49OYr7TtfsFGyKeP7MOPNS4ou0.roa
File:                     G49OYr7TtfsFGyKeP7MOPNS4ou0.roa (raw, json)
Hash identifier:          t+bxCodkSglPpuaOyTOEs0xNT0dz16109Op9gjBGLRU=
Subject key identifier:   1B:8F:4E:62:BE:D3:B5:FB:05:1B:22:9E:3F:B3:0E:3C:D4:B8:A2:ED
Certificate issuer:       /CN=b146b28951a21163dc9651b54c23936fccacf47b
Certificate serial:       44BE1040
Authority key identifier: B1:46:B2:89:51:A2:11:63:DC:96:51:B5:4C:23:93:6F:CC:AC:F4:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUayiVGiEWPcllG1TCOTb8ys9Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/G49OYr7TtfsFGyKeP7MOPNS4ou0.roa
Signing time:             Sat 01 Jan 2022 14:57:21 +0000
ROA not before:           Sat 01 Jan 2022 14:57:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44869
IP address blocks:        62.116.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153306688 (0x44be1040)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b146b28951a21163dc9651b54c23936fccacf47b
        Validity
            Not Before: Jan  1 14:57:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b8f4e62bed3b5fb051b229e3fb30e3cd4b8a2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:33:30:81:9e:1e:2e:a5:53:5b:f5:9f:b2:f8:
                    b3:cf:3a:cb:ec:0b:f7:c6:fe:71:cf:02:77:a7:45:
                    f8:5d:2f:e8:8b:d9:1c:06:a5:27:6a:0c:25:ed:62:
                    6c:2b:f6:55:1c:a3:09:33:60:d4:e1:f3:01:04:a4:
                    56:c7:b3:42:4e:48:ef:28:1a:6d:d6:ab:cc:45:cd:
                    3f:9f:68:f8:43:d5:04:b0:02:e7:61:6a:c5:f1:89:
                    97:43:12:c4:d2:94:f7:ab:64:87:2f:c8:19:1f:08:
                    36:3c:62:74:2e:21:80:f8:ef:22:66:3c:b0:0c:6e:
                    22:76:c2:90:49:8f:d6:d0:1f:19:cb:42:24:68:37:
                    a1:b4:97:cb:36:12:8a:e9:84:3e:20:ca:be:20:16:
                    62:46:9d:ef:8d:2c:9c:f7:26:6d:2a:43:ca:78:11:
                    22:8d:52:f6:8d:b8:f9:e6:92:e1:fc:28:3c:c9:d6:
                    f4:b3:16:4d:cd:43:7d:c7:06:fc:94:57:ed:cf:8c:
                    04:7f:4a:15:46:0e:ea:a6:30:ed:0d:d4:14:ec:1d:
                    a5:43:9e:4b:85:99:dd:de:8e:59:02:e6:3c:56:b5:
                    c0:34:05:d0:c2:5f:75:48:a7:d3:2c:e5:07:81:7b:
                    14:74:17:39:2e:ad:62:2c:b0:05:f8:14:bc:8f:02:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8F:4E:62:BE:D3:B5:FB:05:1B:22:9E:3F:B3:0E:3C:D4:B8:A2:ED
            X509v3 Authority Key Identifier:
                keyid:B1:46:B2:89:51:A2:11:63:DC:96:51:B5:4C:23:93:6F:CC:AC:F4:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUayiVGiEWPcllG1TCOTb8ys9Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/G49OYr7TtfsFGyKeP7MOPNS4ou0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/sUayiVGiEWPcllG1TCOTb8ys9Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.116.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:44:09:ec:42:fe:e6:bb:e6:11:dc:3d:42:c7:5b:de:a4:82:
         6f:d1:31:46:3d:ef:30:b0:a1:1a:a2:6c:3f:c2:ad:f2:f6:17:
         5b:e6:b9:6b:f6:5d:d2:4a:35:6a:45:c9:65:e3:b8:16:26:d1:
         b0:fd:5e:cf:1a:75:d9:de:8c:87:63:3a:44:52:37:26:00:f9:
         53:a7:f6:68:af:59:d8:3e:8a:43:c8:1f:fd:df:87:60:a6:f3:
         97:35:b4:58:cf:1b:89:b7:be:6c:52:12:07:ba:fe:e3:e4:5b:
         70:49:99:6c:bc:40:61:05:99:c9:72:e3:4b:ff:1a:a2:e3:45:
         0b:96:b4:12:ae:0c:8f:0e:c0:86:a9:74:89:f5:28:30:c7:ff:
         35:53:35:47:35:56:57:a3:5b:ff:f5:12:78:13:6f:d6:f9:4a:
         d7:9f:ea:50:2f:c1:a5:eb:f1:6e:9a:66:af:f3:56:d7:22:c5:
         36:69:5d:ed:f6:53:9d:19:49:68:46:55:dc:29:c5:45:b9:3e:
         7b:0b:66:49:33:9b:82:5d:79:15:f8:ea:94:f0:a6:ff:8c:56:
         1d:46:76:54:7d:d0:70:28:f2:6f:2f:2d:16:d2:39:9a:11:cb:
         9a:f6:db:5b:42:d2:f6:3e:27:62:9b:e7:5f:80:12:ac:6d:86:
         0b:33:4f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:57 2024 by rpki-client on console-fra.rpki-client.org