Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/nAwqklwmWxlRueDT3tbXfbBTJTk.roa
File:                     nAwqklwmWxlRueDT3tbXfbBTJTk.roa (raw, json)
Hash identifier:          6qwVFzGsKaC0KKQVd4VDPS43Z4BbQrP/ct9DkpC+Sb8=
Subject key identifier:   9C:0C:2A:92:5C:26:5B:19:51:B9:E0:D3:DE:D6:D7:7D:B0:53:25:39
Certificate issuer:       /CN=5265f9bfdd3a7855a617dc957227b9eedda433a9
Certificate serial:       04A7C5
Authority key identifier: 52:65:F9:BF:DD:3A:78:55:A6:17:DC:95:72:27:B9:EE:DD:A4:33:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmX5v906eFWmF9yVcie57t2kM6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/nAwqklwmWxlRueDT3tbXfbBTJTk.roa
Signing time:             Thu 27 Jan 2022 09:26:27 +0000
ROA not before:           Thu 27 Jan 2022 09:26:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15626
IP address blocks:        62.68.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305093 (0x4a7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5265f9bfdd3a7855a617dc957227b9eedda433a9
        Validity
            Not Before: Jan 27 09:26:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c0c2a925c265b1951b9e0d3ded6d77db0532539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:ea:2d:07:b6:f0:51:55:43:ef:62:fa:72:
                    13:8f:0a:b5:85:53:e5:a9:75:bb:04:e3:a0:4b:98:
                    c4:3c:8d:92:62:a7:61:6b:aa:b8:65:96:54:27:3a:
                    b8:70:4d:08:6e:b3:27:f7:de:97:f6:31:2f:2f:ef:
                    84:10:ef:6d:40:dd:7f:4a:c3:a5:4d:6e:f3:1c:52:
                    9b:e7:da:ac:d9:c1:90:b5:68:a0:81:1b:51:a6:a3:
                    04:d7:ac:0b:70:b4:f2:4e:d0:a0:01:05:28:05:74:
                    e5:b4:09:e7:16:56:06:96:a4:ee:9b:b3:b3:92:78:
                    da:b4:3e:03:af:7d:9a:c1:47:b7:97:f4:89:e0:67:
                    4c:d3:9f:bf:04:41:32:67:a4:2e:b6:33:25:86:8e:
                    63:20:7a:7a:fb:81:d6:80:77:ee:8f:27:c7:81:b3:
                    c9:d7:16:7c:7c:77:b7:83:2e:9f:3c:b2:fa:93:73:
                    92:14:90:e5:c3:e1:08:a5:ea:1a:f2:97:d8:a3:3d:
                    49:04:12:47:86:4c:55:6a:2b:b2:74:31:ca:df:3c:
                    7a:00:96:5d:71:4b:dd:9d:38:30:a5:50:82:b2:28:
                    67:97:75:72:27:c2:21:d9:11:25:4d:01:31:bb:94:
                    1c:29:66:bc:c9:e7:5a:e4:69:b2:bd:68:d0:ab:d0:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0C:2A:92:5C:26:5B:19:51:B9:E0:D3:DE:D6:D7:7D:B0:53:25:39
            X509v3 Authority Key Identifier:
                keyid:52:65:F9:BF:DD:3A:78:55:A6:17:DC:95:72:27:B9:EE:DD:A4:33:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmX5v906eFWmF9yVcie57t2kM6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/nAwqklwmWxlRueDT3tbXfbBTJTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/UmX5v906eFWmF9yVcie57t2kM6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:4c:ba:3d:99:d4:0b:f7:5b:a9:7b:5c:09:77:cb:a0:ac:9a:
         79:4d:46:62:8a:91:b1:d1:29:30:50:c1:ec:05:8a:1f:6a:04:
         dd:86:b8:24:3f:91:39:b4:34:b1:94:f9:ab:ae:45:6a:8f:12:
         d3:1e:e4:97:96:03:aa:f8:65:c0:cb:6f:68:d7:61:f6:e9:22:
         e7:3d:82:df:c0:f4:37:0e:13:9c:39:21:c6:36:cd:6b:70:59:
         01:58:c8:52:33:4b:b8:c4:87:0b:ae:84:7a:53:f1:61:56:69:
         13:4e:da:6e:5c:c6:d6:73:e9:0e:8a:41:6d:6b:3e:f9:68:1b:
         05:9c:bf:d8:c0:95:3b:69:f6:9b:61:b1:7f:17:3b:de:26:b3:
         e4:6f:52:ad:76:19:b8:28:57:46:4d:b9:ea:51:f5:ee:d5:73:
         6c:50:d6:84:71:f0:3e:63:c4:ee:e8:3c:87:f7:80:9b:8c:c2:
         7d:56:a6:6c:3f:49:ba:14:26:10:f4:e8:0b:fd:cb:cf:b9:6d:
         df:74:51:48:e8:e9:24:75:58:1a:75:e6:3e:0f:c5:98:bd:af:
         1c:e5:cb:1c:97:d0:4b:88:58:9e:57:97:9e:35:2b:9a:e3:b6:
         f3:35:39:6e:4e:4e:be:9f:4a:8c:ea:d3:e1:da:39:89:c8:fe:
         35:f9:db:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:33 2024 by rpki-client on console-fra.rpki-client.org