Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/Z7h42EsS82P3uHOOrVEzI-smHHg.roa
File:                     Z7h42EsS82P3uHOOrVEzI-smHHg.roa (raw, json)
Hash identifier:          2InEZGQijEE5Rp3VLs+zUfziH2NwSOeERYxQSPoTFos=
Subject key identifier:   67:B8:78:D8:4B:12:F3:63:F7:B8:73:8E:AD:51:33:23:EB:26:1C:78
Certificate issuer:       /CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
Certificate serial:       01882086783A069214DC14B008BC60361E30
Authority key identifier: 68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/Z7h42EsS82P3uHOOrVEzI-smHHg.roa
Signing time:             Mon 15 May 2023 17:47:43 +0000
ROA not before:           Mon 15 May 2023 17:47:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        62.106.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:78:3a:06:92:14:dc:14:b0:08:bc:60:36:1e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
        Validity
            Not Before: May 15 17:47:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=67b878d84b12f363f7b8738ead513323eb261c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:58:7a:16:e1:21:0e:36:75:be:93:59:87:
                    fa:cc:a7:e0:dd:7f:fc:bb:2c:fd:d4:c4:69:dc:8d:
                    b0:bd:73:53:55:49:d1:20:f0:2b:61:9c:a4:99:75:
                    1a:f6:fb:9a:52:c6:31:a2:85:8b:e2:8b:11:73:88:
                    9f:ac:a7:f2:c9:36:75:97:11:a3:dd:fc:c9:e5:68:
                    6c:df:2e:73:a3:df:33:8d:b7:5b:2a:c1:ed:c1:6c:
                    4f:35:55:dd:6b:1f:a4:3d:a1:6d:e3:ec:7a:2e:75:
                    9f:b9:14:9c:68:f3:78:26:cf:97:bd:48:34:99:aa:
                    62:af:ac:89:4e:91:26:95:44:0a:bc:da:c1:2f:b4:
                    b3:dc:c1:b0:b5:a0:37:d1:06:1f:50:4e:46:81:50:
                    b2:8f:b4:57:c9:cc:04:87:3c:cb:00:2f:0a:2d:d2:
                    18:15:58:71:e7:27:d6:c8:3c:e7:73:f1:ea:22:5d:
                    3c:d0:88:65:7a:33:a9:41:19:32:1f:60:03:6c:6e:
                    2f:63:55:02:83:4b:3a:a1:09:40:a0:5f:62:db:a3:
                    fe:17:87:4b:47:ba:4a:dd:25:e7:9b:c9:40:c4:69:
                    c5:41:dc:e7:6b:a3:99:b9:ea:a1:24:ac:e9:a9:c2:
                    dd:e6:83:34:02:6a:00:d6:8c:10:9d:27:7b:46:5f:
                    2d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B8:78:D8:4B:12:F3:63:F7:B8:73:8E:AD:51:33:23:EB:26:1C:78
            X509v3 Authority Key Identifier:
                keyid:68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/Z7h42EsS82P3uHOOrVEzI-smHHg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:0b:e5:a2:b2:f4:89:f6:2b:41:f7:60:90:a8:7b:59:39:78:
         03:2e:4a:a9:8f:c9:2f:49:82:5d:51:7a:c5:4e:35:c3:73:dd:
         50:c2:6a:f9:7d:f8:b5:d2:25:39:b3:ba:f6:2f:a5:ef:8d:45:
         5a:0d:d4:29:a4:fd:2a:4f:8b:6c:88:5a:14:6a:2b:21:10:43:
         8f:62:ea:3f:bd:5f:af:de:10:ed:7c:19:94:8c:4d:42:86:cc:
         81:47:40:fe:89:5a:f9:18:ee:a1:db:f4:05:eb:fb:ff:31:8f:
         de:69:d2:f2:aa:1c:bc:69:a1:2f:23:61:bd:16:b2:4b:3a:31:
         31:e6:58:6d:51:ef:e1:a0:c3:d8:1f:90:ad:4b:67:15:ce:20:
         1f:52:c9:14:22:d1:65:42:29:40:4a:af:11:2b:12:bc:f4:85:
         c7:ad:1d:d2:6c:07:2b:d8:87:39:e6:2f:b2:a2:5c:c4:4a:a8:
         cf:ac:f2:22:f8:0a:dc:67:59:6d:88:cf:2a:d2:8c:25:ee:ee:
         d4:12:96:ee:24:bd:c7:59:2e:3c:7b:3b:dd:1a:81:1b:81:9e:
         d6:11:ed:e5:9b:e0:42:60:e1:ff:4d:51:5f:d0:87:ef:2f:f9:
         15:5e:08:3f:75:d8:09:15:fa:f3:ab:6c:51:4f:b7:52:b5:fc:
         82:e0:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org