Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/feae62-5113-468d-b771-e6af44cd671c/1/5WMExEt35KoSd1YZepmxQ0cUXRM.roa
File:                     5WMExEt35KoSd1YZepmxQ0cUXRM.roa (raw, json)
Hash identifier:          VctIqyCw3nthScJ9PiVmJJ1J5zNxeYBMZsWEiKLsMT8=
Subject key identifier:   E5:63:04:C4:4B:77:E4:AA:12:77:56:19:7A:99:B1:43:47:14:5D:13
Certificate issuer:       /CN=c96dd16fb94f436ca7621f0490801469fa9b9910
Certificate serial:       0183EC3CD03AF1349C15B84DECAF5A95C303
Authority key identifier: C9:6D:D1:6F:B9:4F:43:6C:A7:62:1F:04:90:80:14:69:FA:9B:99:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yW3Rb7lPQ2ynYh8EkIAUafqbmRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/feae62-5113-468d-b771-e6af44cd671c/1/5WMExEt35KoSd1YZepmxQ0cUXRM.roa
Signing time:             Tue 18 Oct 2022 17:55:51 +0000
ROA not before:           Tue 18 Oct 2022 17:55:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41957
IP address blocks:        62.3.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ec:3c:d0:3a:f1:34:9c:15:b8:4d:ec:af:5a:95:c3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c96dd16fb94f436ca7621f0490801469fa9b9910
        Validity
            Not Before: Oct 18 17:55:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e56304c44b77e4aa127756197a99b14347145d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9f:f0:24:ef:47:87:60:91:7c:e4:ab:60:33:
                    86:b1:98:6b:8d:5d:3e:c8:56:86:94:aa:10:7b:b6:
                    0c:7a:dd:74:3b:3e:4a:76:86:b4:15:b9:89:e9:7b:
                    4c:73:e7:7a:dd:03:69:c4:64:dc:2f:b5:26:bc:d7:
                    d1:3c:fc:26:7a:60:f2:4e:11:85:60:1d:df:97:fc:
                    3f:f2:6f:f9:e4:6f:70:e8:8c:88:6e:94:56:a7:23:
                    33:38:a4:f9:1e:5b:b6:65:3e:40:d7:3f:37:ab:13:
                    d1:66:94:07:2c:ea:50:78:02:45:22:af:4a:23:cd:
                    31:f4:be:55:06:40:bc:76:4a:5a:63:f0:d3:d5:b7:
                    a9:29:37:d4:87:e3:02:3d:81:e2:03:79:7d:57:83:
                    4e:54:d9:df:c9:f7:4b:9b:6b:f5:b0:f6:5c:36:c0:
                    35:fa:02:4c:33:f5:0c:18:20:f2:de:cf:be:94:0d:
                    ad:6d:9c:58:e1:e9:72:3e:a9:59:dc:1c:e1:fc:16:
                    ea:92:de:ad:28:e7:b4:8d:f5:0d:95:dd:d4:34:43:
                    df:42:89:d7:74:7b:a4:9c:5d:56:12:fe:40:53:6f:
                    25:ba:58:fa:4a:8b:ee:2a:4d:27:79:44:1d:02:5c:
                    a3:b5:cc:1d:d2:ad:02:22:28:af:1b:90:88:74:46:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:63:04:C4:4B:77:E4:AA:12:77:56:19:7A:99:B1:43:47:14:5D:13
            X509v3 Authority Key Identifier:
                keyid:C9:6D:D1:6F:B9:4F:43:6C:A7:62:1F:04:90:80:14:69:FA:9B:99:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yW3Rb7lPQ2ynYh8EkIAUafqbmRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/feae62-5113-468d-b771-e6af44cd671c/1/5WMExEt35KoSd1YZepmxQ0cUXRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/feae62-5113-468d-b771-e6af44cd671c/1/yW3Rb7lPQ2ynYh8EkIAUafqbmRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:13:65:66:01:cf:82:ce:10:ed:fd:61:ff:1e:d2:e3:5a:c5:
         f0:cd:9b:e0:aa:a8:f4:40:7e:86:d5:60:5d:9d:30:91:f0:ff:
         79:e3:46:53:65:36:f8:6d:96:54:fc:b0:f3:ca:31:e4:61:b8:
         b5:b0:94:21:cc:b6:8c:22:86:eb:57:f2:5a:b2:2b:b8:c3:1a:
         8d:9a:91:c3:9e:92:60:86:50:89:82:df:85:a9:62:b6:b9:79:
         c8:15:e1:10:45:5a:96:54:52:e7:5f:ff:0d:ef:95:61:ce:81:
         0f:95:52:f5:27:cf:40:95:1b:42:ea:5c:25:0a:94:26:e8:36:
         3f:fc:0d:43:34:a8:eb:dd:fc:ff:0b:82:42:ed:04:4e:b9:29:
         07:52:33:96:17:3b:49:e5:55:44:fa:ed:98:83:b3:b1:79:73:
         62:67:31:a4:27:41:81:4b:e1:d2:2d:99:da:e2:d3:91:81:04:
         dc:73:85:52:08:0d:d9:b7:7c:de:06:5c:b3:cc:fb:a5:23:d8:
         ab:34:3c:a9:a6:79:1c:e6:2d:d9:05:b4:46:68:d7:83:13:c0:
         57:32:1f:1a:3d:e0:f1:56:7d:b9:b9:39:2b:b0:ac:01:4e:88:
         93:63:f2:3f:f6:1c:bf:69:88:33:f4:88:68:3e:88:a7:75:9f:
         95:fa:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:44 2024 by rpki-client on console-ams.rpki-client.org