Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/1-6sk3GQatvsK1TBVpfVJlxFIxGg.roa
File:                     1-6sk3GQatvsK1TBVpfVJlxFIxGg.roa (raw, json)
Hash identifier:          GaAKPkH4/VMj9ohk5yMrILQPki9JmkeOuITb2UrO/Yc=
Subject key identifier:   FB:AB:24:DC:64:1A:B6:FB:0A:D5:30:55:A5:F5:49:97:11:48:C4:68
Certificate issuer:       /CN=08bd0e1f2bc52307b0040f1eb8173f930216b1b3
Certificate serial:       BCEAA3
Authority key identifier: 08:BD:0E:1F:2B:C5:23:07:B0:04:0F:1E:B8:17:3F:93:02:16:B1:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CL0OHyvFIwewBA8euBc_kwIWsbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/1-6sk3GQatvsK1TBVpfVJlxFIxGg.roa
Signing time:             Sat 01 Jan 2022 01:56:38 +0000
ROA not before:           Sat 01 Jan 2022 01:56:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        62.233.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12380835 (0xbceaa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08bd0e1f2bc52307b0040f1eb8173f930216b1b3
        Validity
            Not Before: Jan  1 01:56:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fbab24dc641ab6fb0ad53055a5f549971148c468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:70:8f:5b:b3:06:af:f9:88:a7:cc:ca:a6:
                    dc:37:bd:41:2a:11:1f:22:d9:3f:50:22:59:4b:1b:
                    b6:39:07:d5:7a:de:19:53:d5:fb:f4:d4:d3:4e:cb:
                    3f:f4:57:44:6b:57:1a:09:90:4f:37:d6:be:e0:73:
                    2d:75:52:3a:58:e2:8a:71:95:d7:4c:2a:34:43:bc:
                    3a:ca:e5:76:3c:b9:ba:36:b6:31:f5:a2:1b:42:37:
                    d7:c3:be:38:ab:1a:23:ad:4a:b3:2c:30:41:f1:7b:
                    e1:3f:3c:6b:b7:85:61:fb:fc:e7:c0:e6:98:0b:e5:
                    e2:ea:09:26:33:b5:62:2c:22:67:07:5b:43:f2:e2:
                    59:56:0f:0d:b2:82:73:5c:5d:9c:72:80:e5:c6:b9:
                    f4:c3:76:1e:62:ab:8b:f3:8b:71:96:5a:61:0e:c2:
                    c8:a3:c6:dc:c4:b3:43:60:c4:20:08:cc:6b:e0:48:
                    60:db:b3:58:16:f4:62:55:7d:34:72:f8:c2:aa:7b:
                    53:dc:1e:fd:6d:c1:91:c2:f4:37:59:70:07:88:18:
                    4f:d2:ce:85:2d:17:97:54:71:48:20:a2:25:86:5b:
                    0b:53:82:f7:25:55:d0:48:5c:c9:37:ba:9f:5d:5f:
                    86:4f:2a:d7:d7:01:67:39:ed:a3:69:ad:06:59:14:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AB:24:DC:64:1A:B6:FB:0A:D5:30:55:A5:F5:49:97:11:48:C4:68
            X509v3 Authority Key Identifier:
                keyid:08:BD:0E:1F:2B:C5:23:07:B0:04:0F:1E:B8:17:3F:93:02:16:B1:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL0OHyvFIwewBA8euBc_kwIWsbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/1-6sk3GQatvsK1TBVpfVJlxFIxGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/CL0OHyvFIwewBA8euBc_kwIWsbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:5f:f5:8b:ce:4a:76:98:59:d1:91:2e:c8:5b:73:00:25:0d:
         5d:84:dd:20:ef:b1:b4:67:9b:17:6f:07:8a:b1:28:b8:82:4f:
         1e:7b:f0:7e:2f:6a:87:63:2a:ec:df:51:71:a4:a3:46:9e:69:
         89:5b:41:bf:f9:71:6f:25:50:a4:50:ed:dc:f7:67:8d:1e:40:
         47:f2:eb:c9:87:2b:e7:67:c7:2c:7f:5b:b2:f7:a8:27:91:ae:
         36:e1:9e:90:ea:63:7a:c0:5a:18:d6:50:d4:3b:11:1e:65:44:
         15:8a:7c:08:21:7d:81:70:ae:01:ba:e5:33:39:eb:02:e3:09:
         63:4a:fc:ea:87:04:55:65:34:49:48:14:3f:ec:cd:49:c3:43:
         91:4b:b6:37:42:1b:9f:1b:4d:79:33:fc:d9:c8:32:10:04:4c:
         7d:f8:d8:14:78:73:b2:5f:d1:db:18:e8:0b:9e:aa:3e:fb:0f:
         01:35:f9:ed:c1:88:01:36:85:3d:cd:aa:bf:aa:82:e3:c5:21:
         be:76:fd:6b:e4:3f:54:51:0b:ed:3a:94:46:ff:3a:b0:4a:dc:
         96:31:9e:52:b1:c5:24:d2:48:b7:42:14:38:65:b6:23:ed:70:
         98:1b:66:05:0a:9d:5b:9a:0b:f6:7d:55:c5:e0:ce:54:3b:50:
         42:cb:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:18 2024 by rpki-client on console-ams.rpki-client.org