Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/ak8_kG28F58r_4GL2ifBtQkfhlI.roa
File:                     ak8_kG28F58r_4GL2ifBtQkfhlI.roa (raw, json)
Hash identifier:          oQHC3SD1MjmfU/jXPw6stpe5tdQ2n1HugN2bndOvKlo=
Subject key identifier:   6A:4F:3F:90:6D:BC:17:9F:2B:FF:81:8B:DA:27:C1:B5:09:1F:86:52
Certificate issuer:       /CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Certificate serial:       01863B528135AED7FA093BCF68EE3FC3ECF8
Authority key identifier: 51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/ak8_kG28F58r_4GL2ifBtQkfhlI.roa
Signing time:             Fri 10 Feb 2023 12:35:08 +0000
ROA not before:           Fri 10 Feb 2023 12:35:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29119
IP address blocks:        62.122.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3b:52:81:35:ae:d7:fa:09:3b:cf:68:ee:3f:c3:ec:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ba5d3ea192aed2d30666c79499069daf6dc374
        Validity
            Not Before: Feb 10 12:35:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a4f3f906dbc179f2bff818bda27c1b5091f8652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:86:0f:ad:b4:a1:16:1a:b2:24:dd:14:b8:15:
                    f9:b7:12:a9:ea:53:67:20:78:af:d2:17:ab:f5:22:
                    29:b4:1a:48:31:65:d7:74:ea:c6:2c:96:46:81:f1:
                    9a:bb:7d:57:3a:de:dd:6f:a2:c3:1f:96:5b:9b:85:
                    2d:2d:b3:7e:a1:49:d9:9a:46:0a:7f:f5:89:df:2b:
                    3a:ba:d8:70:04:ee:0b:52:1f:a8:f3:e0:6a:49:10:
                    2e:5b:f6:4a:af:cc:bc:c2:9d:dc:49:e3:a1:e1:f6:
                    cd:6c:a3:84:95:6e:5a:f0:46:91:ac:b1:e1:73:9e:
                    ce:d6:86:dd:ad:8e:72:b2:d8:d5:48:2f:ba:ac:cd:
                    00:dc:a8:be:02:f6:27:24:d3:cc:b0:44:73:51:5c:
                    0a:48:42:78:76:1f:04:99:e1:af:a4:cc:f2:05:13:
                    08:a2:28:50:ab:b0:7f:35:3f:c8:b5:b7:c7:f2:c6:
                    6e:e2:31:4a:ad:29:0c:5b:0a:f9:eb:9a:8a:86:ea:
                    63:1e:ea:d0:59:c8:6f:7d:d0:09:43:61:33:01:82:
                    cd:7f:ad:d5:9e:70:13:2b:30:f1:8e:94:fe:55:b8:
                    ea:4d:3e:5b:a6:9e:d7:22:4d:86:78:b6:aa:03:53:
                    28:b5:78:da:a7:42:39:82:f7:7b:52:1a:ab:97:97:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4F:3F:90:6D:BC:17:9F:2B:FF:81:8B:DA:27:C1:B5:09:1F:86:52
            X509v3 Authority Key Identifier:
                keyid:51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/ak8_kG28F58r_4GL2ifBtQkfhlI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:9b:93:45:e8:a8:51:9d:e0:bf:e8:80:83:28:5c:8d:a1:0a:
         a8:19:7e:9b:7d:4b:cb:94:08:75:91:6c:76:9c:f1:85:7f:bc:
         08:02:cc:92:0a:eb:4c:4e:31:27:f2:c4:e0:56:90:62:24:75:
         bc:83:6a:a4:e5:c9:b0:8a:ac:ba:59:5d:1f:ba:13:98:3e:60:
         7b:9a:9a:a1:66:28:ed:4c:d5:97:96:4b:db:d4:5c:03:4f:b0:
         78:7a:42:6a:a8:bf:9b:1d:3c:ed:13:88:69:83:b6:70:88:dd:
         8f:0e:97:31:21:12:52:20:dc:d5:b1:ab:02:83:97:1e:f7:23:
         e5:d0:ef:38:38:52:6e:f4:63:8e:47:a0:89:32:5c:02:00:3a:
         13:4e:26:5a:22:74:29:ad:a0:30:4b:90:28:da:a6:27:a5:9d:
         f9:ae:b8:cd:aa:fe:ef:5d:ef:c9:19:41:5b:cd:f3:f6:6b:58:
         0e:15:b5:a2:ca:98:2b:b5:41:7c:1e:7d:e6:c2:ad:74:3b:de:
         e5:95:ff:80:26:d6:0a:cc:18:13:9c:cb:50:4d:4f:c0:0c:bb:
         42:f7:86:34:cf:96:4b:01:2c:23:99:fb:f7:39:e8:3e:35:b3:
         44:91:b4:2d:53:44:56:a9:8a:b4:4b:3f:00:ad:7e:2f:8e:bd:
         e7:f3:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:28 2024 by rpki-client on console-fra.rpki-client.org