Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/8e775rRVjU8Z-d77s4hNCAiyKlo.roa
File:                     8e775rRVjU8Z-d77s4hNCAiyKlo.roa (raw, json)
Hash identifier:          OnrppyTxOzBrxRSw5YZkPgHiizI7/ZuaP0hKYPpP7NM=
Subject key identifier:   F1:EE:FB:E6:B4:55:8D:4F:19:F9:DE:FB:B3:88:4D:08:08:B2:2A:5A
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142F49145E1329A20003C5D6CD64DA9
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/8e775rRVjU8Z-d77s4hNCAiyKlo.roa
Signing time:             Mon 02 Jan 2023 06:54:51 +0000
ROA not before:           Mon 02 Jan 2023 06:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202408
IP address blocks:        212.102.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:f4:91:45:e1:32:9a:20:00:3c:5d:6c:d6:4d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1eefbe6b4558d4f19f9defbb3884d0808b22a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:0f:74:7a:f5:17:df:dc:e0:d8:06:6b:01:
                    61:2f:90:e3:8b:87:fb:93:55:71:04:08:0a:ee:bb:
                    0c:d6:52:96:22:70:9e:05:94:08:83:e2:bf:05:81:
                    94:d4:93:2f:30:9b:6c:be:c5:88:04:1a:55:60:60:
                    3f:a5:29:18:2f:33:d0:84:72:36:f5:d9:82:7d:15:
                    d5:da:6b:50:b8:48:5e:03:22:89:1a:30:bf:52:24:
                    12:ae:d8:0b:d8:4a:a4:27:be:b1:83:91:71:1d:2d:
                    65:c4:fc:73:66:6e:6b:64:b1:48:ed:0c:e6:b0:2b:
                    ac:fa:9b:6e:55:af:b7:a3:2e:f6:b3:b2:a1:fc:27:
                    89:eb:8a:a3:68:2b:5a:55:18:e9:1f:88:33:30:0e:
                    0c:ff:21:02:a7:9b:54:01:12:78:ca:34:7c:a8:3b:
                    47:52:ba:09:ee:5f:1a:88:fe:59:5f:af:a4:81:c0:
                    88:df:77:22:cc:fd:e9:6c:ec:ec:bd:26:ea:59:1c:
                    cb:3d:02:ea:94:c8:a1:b0:c9:d5:a8:97:6e:19:e8:
                    52:91:7d:ec:23:13:7b:d6:e9:8f:27:7a:08:bd:b5:
                    f5:51:5f:fa:47:5c:a0:30:55:ac:e3:f5:ae:b8:89:
                    84:75:e9:58:33:16:da:11:90:3f:57:9f:46:a5:76:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EE:FB:E6:B4:55:8D:4F:19:F9:DE:FB:B3:88:4D:08:08:B2:2A:5A
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/8e775rRVjU8Z-d77s4hNCAiyKlo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.102.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:15:5b:db:9a:8a:46:07:60:21:23:a5:63:72:6b:2c:d8:c0:
         9c:d8:57:82:b5:b4:c2:3e:86:8d:c1:43:f5:8e:1e:56:90:72:
         a8:c9:1b:01:b5:99:90:73:1e:63:b4:f4:4c:3c:67:c7:83:7b:
         c3:56:42:65:41:05:e8:38:53:26:c7:b6:87:69:82:b9:6e:e3:
         98:ae:a4:c0:79:38:b3:f0:5a:78:51:d9:9a:15:09:d1:31:43:
         17:7d:e2:85:a8:8d:a8:ce:11:70:15:03:6a:14:d5:de:96:db:
         b4:eb:ce:a1:ab:2c:fe:da:a5:d1:11:ff:09:c7:1d:6e:5b:0b:
         e5:5b:81:c5:c3:e2:33:23:3e:39:c9:98:c7:28:c5:24:08:b9:
         38:01:4a:67:9d:5d:7e:e1:01:1e:86:89:55:24:04:42:c7:d1:
         22:fe:4b:a1:3a:bd:ab:10:86:16:b5:a7:56:a3:1f:df:82:c7:
         a0:61:dd:67:0d:54:48:9d:97:eb:c3:4d:f0:7d:42:fc:14:3c:
         69:92:92:15:e4:2a:a7:de:0a:97:db:5c:34:e1:cc:80:80:28:
         e4:b1:5d:8d:6e:a7:6e:f1:e6:20:bf:c6:de:0e:d4:77:bf:b7:
         69:7d:de:e7:98:ec:39:92:de:3d:e0:d4:22:fd:0a:20:88:ca:
         42:58:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org