Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/SkkX8AVvZ2lhvM_YoJEZZmFZ93w.roa
File:                     SkkX8AVvZ2lhvM_YoJEZZmFZ93w.roa (raw, json)
Hash identifier:          csgXxmvoi9MUP3WZUEv146EDggbLd2+mO715B9y16Go=
Subject key identifier:   4A:49:17:F0:05:6F:67:69:61:BC:CF:D8:A0:91:19:66:61:59:F7:7C
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0184CD12035B755ACCD9EC416DA8A5A22C60
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/SkkX8AVvZ2lhvM_YoJEZZmFZ93w.roa
Signing time:             Thu 01 Dec 2022 09:43:40 +0000
ROA not before:           Thu 01 Dec 2022 09:43:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205397
IP address blocks:        2.58.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:cd:12:03:5b:75:5a:cc:d9:ec:41:6d:a8:a5:a2:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Dec  1 09:43:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a4917f0056f676961bccfd8a09119666159f77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:9f:ec:e9:47:9f:46:bf:e0:22:98:10:89:
                    b2:92:2e:ff:b8:d7:b8:43:f1:3f:d1:8a:c7:31:d3:
                    fb:82:33:49:8a:b8:51:73:ff:f3:58:86:ca:b6:0e:
                    16:cb:6b:eb:fc:ab:4f:cf:27:95:e5:52:c5:20:c3:
                    c1:18:93:70:96:95:18:05:83:21:d2:f0:02:44:e0:
                    eb:40:36:59:a2:40:9b:dd:cf:6a:c0:06:db:a7:ed:
                    ba:35:55:62:8c:e2:3e:64:aa:29:72:26:db:15:cb:
                    96:2f:27:60:ff:a2:07:6b:83:0c:55:b5:a4:73:67:
                    9c:6f:e5:83:9e:24:bc:47:2b:a9:dd:dd:a6:23:d5:
                    17:0e:58:68:db:d4:8b:ea:28:fa:0d:a7:1a:5f:55:
                    9d:b0:c7:12:ed:fe:76:05:4a:ba:87:ca:3f:9d:d4:
                    bb:ec:f8:9d:32:15:63:ff:2a:3a:38:76:21:aa:b2:
                    c3:aa:16:80:83:1b:bf:97:77:00:78:da:6b:b3:c6:
                    ad:31:14:eb:63:cc:f5:e6:a9:e6:b4:03:41:70:49:
                    c3:88:57:fc:a0:83:94:d7:14:bf:8a:8c:00:f0:9e:
                    a3:51:a1:18:1c:c8:ac:e3:32:a6:71:ab:5e:48:32:
                    05:59:66:f2:94:54:0e:52:3a:ec:5b:0c:e4:5e:62:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:49:17:F0:05:6F:67:69:61:BC:CF:D8:A0:91:19:66:61:59:F7:7C
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/SkkX8AVvZ2lhvM_YoJEZZmFZ93w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:15:ea:72:2c:18:9b:c4:04:2e:d1:68:aa:f5:b6:d1:5b:f9:
         68:5b:7b:ad:c9:33:9f:a6:92:cf:02:47:25:1c:a1:37:46:10:
         43:ed:e7:60:b9:8a:1b:fe:3f:a2:9e:dc:09:12:19:f1:b5:09:
         45:f5:8c:d8:95:b1:c1:bb:a4:74:50:5f:1e:21:3f:20:11:73:
         ea:6c:d4:5a:fc:30:e2:65:6e:47:bf:35:bb:40:0a:58:05:a4:
         24:e1:a8:1e:c9:87:da:18:ae:71:58:6e:b1:a7:c7:f7:7e:f6:
         93:96:af:06:f5:db:c2:b8:76:bd:10:ef:38:6d:0a:87:69:cc:
         55:b1:ac:d5:60:f9:ed:4b:0f:29:a4:9e:ab:2c:de:7f:6a:36:
         79:b6:f8:b1:85:eb:2e:fb:08:df:8a:2f:d7:b2:66:b9:27:b7:
         5b:9d:8b:76:d7:69:96:5c:e1:4b:00:1e:d2:ea:43:26:85:ca:
         6d:76:40:6c:0a:0d:bc:e5:4b:5c:cb:ea:30:a9:0b:65:73:df:
         b0:e5:62:52:5d:12:15:f9:d6:77:76:95:46:c8:f5:0b:0a:34:
         be:bd:1b:8b:0e:d3:09:cd:f8:fe:33:4b:33:5a:f0:90:ab:64:
         bd:6b:9d:34:d9:e9:b2:ac:81:99:e2:c0:86:ae:ec:6c:30:99:
         e2:a3:6e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org