Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/FCQpCEaxJExBzYkRHQyU2vteTRE.roa
File:                     FCQpCEaxJExBzYkRHQyU2vteTRE.roa (raw, json)
Hash identifier:          n1hf5W9Yq1d5jtoB58Clacho9LvkV1cO19uNrPan4sU=
Subject key identifier:   14:24:29:08:46:B1:24:4C:41:CD:89:11:1D:0C:94:DA:FB:5E:4D:11
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       08D4BF4C
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/FCQpCEaxJExBzYkRHQyU2vteTRE.roa
Signing time:             Sat 01 Jan 2022 07:55:52 +0000
ROA not before:           Sat 01 Jan 2022 07:55:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25780
IP address blocks:        62.192.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148160332 (0x8d4bf4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  1 07:55:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1424290846b1244c41cd89111d0c94dafb5e4d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:79:50:c9:74:11:ca:02:0d:a5:01:4d:8e:
                    79:24:6a:ef:8c:43:19:0f:8d:1f:f5:4b:53:aa:fd:
                    61:04:6e:18:b9:34:fd:43:e8:2b:1b:95:bd:92:f7:
                    aa:9b:2b:20:92:c4:19:e0:3f:c5:14:e4:2a:2d:d2:
                    fc:86:7b:52:d3:2c:0b:20:cd:2b:e0:44:b8:0b:15:
                    af:fe:1e:55:9e:8d:b8:6d:be:b0:55:65:3b:ae:e7:
                    8b:e0:f5:8d:a4:3f:4b:b7:91:64:af:97:6b:c4:01:
                    2f:de:b7:ed:e1:30:cf:bd:37:29:d1:30:ff:02:e0:
                    1e:21:4b:4b:83:e8:26:d9:8f:a1:55:0b:66:fc:b8:
                    90:84:a6:e4:01:38:42:41:ee:1c:aa:35:6d:88:ad:
                    a0:96:3c:ee:e5:c4:4d:00:10:58:6d:d0:5f:28:cc:
                    e1:63:52:af:1e:46:13:ad:3e:45:13:93:a0:35:e8:
                    78:87:31:f5:48:a8:ef:a4:5f:d4:22:f1:56:e1:80:
                    90:f8:c9:b4:7d:c2:0e:28:92:9b:7e:fd:0e:63:fb:
                    b4:8a:de:02:a4:49:67:1b:96:6d:b7:3a:c5:9e:4b:
                    c4:58:e5:6d:05:c0:b3:81:bd:19:96:70:d7:f3:42:
                    9f:45:1d:52:b4:d1:21:86:7e:84:ec:e1:24:b9:92:
                    be:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:24:29:08:46:B1:24:4C:41:CD:89:11:1D:0C:94:DA:FB:5E:4D:11
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/FCQpCEaxJExBzYkRHQyU2vteTRE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:3b:57:b6:fe:c4:1a:6f:84:c0:9c:12:09:75:66:27:eb:a2:
         c2:cf:7a:31:40:8c:4c:7e:7e:04:ed:9b:8f:ee:8f:29:78:12:
         39:e5:5e:dd:1e:0b:65:8d:a2:ca:cd:dc:99:10:ae:83:1d:df:
         95:fc:f3:b2:7c:b8:57:3a:f7:65:67:70:c5:f2:28:1e:c3:da:
         ed:e5:1e:ea:51:44:07:34:a4:f2:ae:7e:41:04:d0:5a:5a:76:
         fb:f6:bd:91:8a:e1:0f:41:bf:de:5d:a6:a0:93:61:0f:38:b2:
         80:d8:32:02:6b:81:48:05:86:47:d1:59:a2:58:32:67:27:10:
         1f:26:fc:89:10:2d:12:e5:72:14:b6:3f:9e:33:91:43:97:29:
         79:33:4d:03:b9:6c:c7:35:33:fb:29:ff:6c:1d:78:08:f7:1a:
         29:d4:71:46:f1:d9:ef:35:8a:10:1b:9a:29:2c:16:76:54:80:
         bc:61:86:c1:86:7d:56:51:8d:a9:f1:52:ba:52:97:e6:f3:1b:
         9b:38:d5:b9:9c:9b:a0:63:ff:ca:bb:72:0d:04:06:19:7d:d8:
         2e:dd:30:9a:2e:e6:9d:d0:b7:fd:ac:52:db:ae:a6:76:42:1a:
         e6:d9:f0:57:e1:69:67:3c:97:27:ad:94:7c:fa:96:89:99:f1:
         03:c9:c0:a1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECNS/TDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MmZhNzY1YTM5MzM2OWM5NmQ4ZDgzNmYyM2Y3NmU2NzQ4OWM3ZGRlMB4XDTIyMDEw
MTA3NTU1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQyNDI5MDg0NmIx
MjQ0YzQxY2Q4OTExMWQwYzk0ZGFmYjVlNGQxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+QeVDJdBHKAg2lAU2OeSRq74xDGQ+NH/VLU6r9YQRuGLk0
/UPoKxuVvZL3qpsrIJLEGeA/xRTkKi3S/IZ7UtMsCyDNK+BEuAsVr/4eVZ6NuG2+
sFVlO67ni+D1jaQ/S7eRZK+Xa8QBL9637eEwz703KdEw/wLgHiFLS4PoJtmPoVUL
Zvy4kISm5AE4QkHuHKo1bYitoJY87uXETQAQWG3QXyjM4WNSrx5GE60+RROToDXo
eIcx9Uio76Rf1CLxVuGAkPjJtH3CDiiSm379DmP7tIreAqRJZxuWbbc6xZ5LxFjl
bQXAs4G9GZZw1/NCn0UdUrTRIYZ+hOzhJLmSvjkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQUJCkIRrEkTEHNiREdDJTa+15NETAfBgNVHSMEGDAWgBRi+nZaOTNpyW2N
g28j925nSJx93jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1l2cDJXamt6YWNsdGpZTnZJX2R1WjBpY2ZkNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvYWRmZjgwLWIyMDctNGZiZC1iZjVlLTA3ZGQxYjRjNTVkOS8x
L0ZDUXBDRWF4SkV4QnpZa1JIUXlVMnZ0ZVRSRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
YWRmZjgwLWIyMDctNGZiZC1iZjVlLTA3ZGQxYjRjNTVkOS8xL1l2cDJXamt6YWNs
dGpZTnZJX2R1WjBpY2ZkNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAj7ArDANBgkqhkiG9w0BAQsFAAOC
AQEAGDtXtv7EGm+EwJwSCXVmJ+uiws96MUCMTH5+BO2bj+6PKXgSOeVe3R4LZY2i
ys3cmRCugx3flfzzsny4Vzr3ZWdwxfIoHsPa7eUe6lFEBzSk8q5+QQTQWlp2+/a9
kYrhD0G/3l2moJNhDziygNgyAmuBSAWGR9FZolgyZycQHyb8iRAtEuVyFLY/njOR
Q5cpeTNNA7lsxzUz+yn/bB14CPcaKdRxRvHZ7zWKEBuaKSwWdlSAvGGGwYZ9VlGN
qfFSulKX5vMbmzjVuZyboGP/yrtyDQQGGX3YLt0wmi7mndC3/axS266mdkIa5tnw
V+FpZzyXJ62UfPqWiZnxA8nAoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org