Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/4Y5hHMPCuyRI8fdUj2CRySHNa-k.roa
File:                     4Y5hHMPCuyRI8fdUj2CRySHNa-k.roa (raw, json)
Hash identifier:          /cl5x0GtZpStuQk6aPP5/Ict8CmaIufH2Qw2Uynxv1o=
Subject key identifier:   E1:8E:61:1C:C3:C2:BB:24:48:F1:F7:54:8F:60:91:C9:21:CD:6B:E9
Certificate issuer:       /CN=57c113ecbb9ab3c6256b67b08530f589f1d7aa74
Certificate serial:       352C
Authority key identifier: 57:C1:13:EC:BB:9A:B3:C6:25:6B:67:B0:85:30:F5:89:F1:D7:AA:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8ET7Luas8Yla2ewhTD1ifHXqnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/4Y5hHMPCuyRI8fdUj2CRySHNa-k.roa
Signing time:             Wed 04 May 2022 11:54:39 +0000
ROA not before:           Wed 04 May 2022 11:54:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197518
IP address blocks:        62.233.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13612 (0x352c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c113ecbb9ab3c6256b67b08530f589f1d7aa74
        Validity
            Not Before: May  4 11:54:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e18e611cc3c2bb2448f1f7548f6091c921cd6be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:5f:3c:e5:31:4b:46:c6:01:f9:1d:6b:c1:
                    a8:d1:cd:d3:b8:14:f7:d8:3a:d6:6c:df:44:53:fe:
                    77:5b:40:d9:29:b1:b5:94:a0:40:2c:0e:60:59:82:
                    76:18:09:fa:c6:8f:9a:c3:66:22:a2:65:27:63:bf:
                    df:5d:eb:25:f6:43:cc:27:1d:fa:94:e9:41:ec:0c:
                    ac:42:03:c8:9c:0f:57:af:eb:78:fd:5f:e3:73:6b:
                    c3:66:19:e8:d8:a2:93:bc:09:fd:b4:34:c3:2f:63:
                    0d:5c:aa:b2:5e:6a:ed:8f:40:67:69:fa:6e:ab:43:
                    a3:af:38:ca:5a:c8:94:44:96:37:f3:50:e1:d2:ea:
                    82:34:3e:60:69:a2:e5:1b:5c:fd:c7:33:eb:42:a3:
                    b0:75:45:31:07:33:f3:eb:64:8c:6a:4e:aa:98:5b:
                    bc:4d:d6:7f:7d:ac:6d:5e:d4:fc:1f:d0:e2:cd:01:
                    32:5b:33:7c:c5:95:71:90:0f:ec:3a:0f:63:6c:1d:
                    ad:bb:58:8b:64:0a:69:59:77:99:61:9f:65:05:bd:
                    04:9a:2c:ba:25:0c:4b:69:e8:74:bc:2f:45:ee:e3:
                    11:46:82:ca:24:01:cf:b7:1d:4b:34:7d:ab:93:92:
                    91:89:82:0c:b7:00:d9:a0:24:92:c4:1a:3f:f1:52:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8E:61:1C:C3:C2:BB:24:48:F1:F7:54:8F:60:91:C9:21:CD:6B:E9
            X509v3 Authority Key Identifier:
                keyid:57:C1:13:EC:BB:9A:B3:C6:25:6B:67:B0:85:30:F5:89:F1:D7:AA:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ET7Luas8Yla2ewhTD1ifHXqnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/4Y5hHMPCuyRI8fdUj2CRySHNa-k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/V8ET7Luas8Yla2ewhTD1ifHXqnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:25:3f:ce:92:83:3a:bc:b2:02:8a:b8:87:1b:97:4a:58:f3:
         e8:f1:ae:b1:ec:b0:85:fb:36:53:ae:b6:95:70:11:a3:02:72:
         4d:05:45:a3:66:35:d5:c5:28:21:9a:38:77:f8:53:85:bc:eb:
         e5:71:3f:29:30:33:92:19:4c:cd:0a:e2:b6:b9:05:5a:c0:b5:
         f8:a2:fa:59:95:98:a0:39:0e:da:6d:65:a0:dc:d3:c3:19:fc:
         a2:3a:a4:ca:e2:0d:35:bf:8d:5f:79:28:26:c6:d5:f5:5c:e3:
         1e:c6:bf:29:72:88:3b:42:7e:9b:fb:b8:0e:44:b5:7e:5a:c1:
         73:86:fa:5c:99:d4:be:07:c4:11:df:6b:85:05:81:8a:43:e7:
         17:b4:ea:28:19:8c:13:3f:29:20:77:db:2a:a7:f9:c9:94:59:
         50:65:bb:79:df:cb:72:10:77:fe:8f:01:4d:4d:ab:f1:25:5d:
         89:5d:b4:5e:66:02:a7:85:5b:23:bb:ff:2d:09:73:33:19:3f:
         82:4c:e0:a2:5d:78:07:45:29:ba:5b:a9:85:ba:4e:76:f7:f8:
         5a:c9:60:dc:22:01:90:d2:23:e0:7a:a1:68:18:11:35:46:b7:
         7b:fa:b1:7d:6c:7b:d6:2b:49:41:a7:7f:f4:57:ad:55:1c:3b:
         cf:98:6b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:33 2024 by rpki-client on console-ams.rpki-client.org