Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/36322e3132322e3138392e302f32342d3234203d3e20323039393430.roa
File:                     36322e3132322e3138392e302f32342d3234203d3e20323039393430.roa (raw, json)
Hash identifier:          iwl4IFfJw36ZBd6CyPMHvk08lLfqGxw7bqYtQwoMVNI=
Subject key identifier:   68:29:C5:66:E6:85:2E:5F:27:1F:D3:CC:91:EF:AE:46:57:88:3D:70
Certificate issuer:       /CN=d0c562313b009b2a94f2d151cafd8521265d4ecd
Certificate serial:       510B5613651BF655CCC3C43A4AF3D6BE37A9FA4C
Authority key identifier: D0:C5:62:31:3B:00:9B:2A:94:F2:D1:51:CA:FD:85:21:26:5D:4E:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MViMTsAmyqU8tFRyv2FISZdTs0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/36322e3132322e3138392e302f32342d3234203d3e20323039393430.roa
Signing time:             Tue 08 Aug 2023 15:17:47 +0000
ROA not before:           Tue 08 Aug 2023 15:12:47 +0000
ROA not after:            Tue 06 Aug 2024 15:17:47 +0000
asID:                     209940
IP address blocks:        62.122.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0b:56:13:65:1b:f6:55:cc:c3:c4:3a:4a:f3:d6:be:37:a9:fa:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0c562313b009b2a94f2d151cafd8521265d4ecd
        Validity
            Not Before: Aug  8 15:12:47 2023 GMT
            Not After : Aug  6 15:17:47 2024 GMT
        Subject: CN=6829C566E6852E5F271FD3CC91EFAE4657883D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:77:7f:ae:5d:53:86:51:da:d8:fe:05:2f:
                    5c:20:dc:66:fd:b8:16:bd:e4:b7:3a:02:ff:14:4a:
                    c8:71:16:6c:28:a1:aa:43:73:22:d8:e3:74:b0:41:
                    47:d5:f8:32:71:9d:1e:e5:99:44:64:d9:e7:0e:c6:
                    e5:62:1e:7c:86:ad:02:87:90:85:60:56:e5:cc:4f:
                    79:3f:77:f2:a3:c4:0b:3c:d1:61:1b:36:bb:36:b2:
                    2a:79:37:11:96:36:b4:95:0e:99:65:d4:24:d9:1e:
                    25:21:37:09:ab:05:b3:95:e8:1b:60:79:04:74:98:
                    46:b9:0f:3c:e1:ca:60:67:5a:8b:b8:f3:b6:1b:f5:
                    8b:17:87:49:34:5b:df:0d:19:d2:57:1a:8f:5e:f6:
                    48:63:af:e9:f8:ba:b5:46:ec:be:69:17:6d:d5:36:
                    89:a6:56:d8:c6:7c:f7:9e:2f:10:4a:0a:db:af:b3:
                    56:80:4f:88:04:f4:ec:cb:2d:e8:2d:cd:49:a8:80:
                    38:7b:73:65:81:7d:52:8d:ea:41:11:d5:c3:00:f1:
                    23:94:23:91:6f:c5:60:c8:c8:be:dc:bc:5d:ab:0d:
                    b7:95:55:c0:d5:f0:a4:76:3f:4b:c2:e9:9d:b0:37:
                    f0:67:ec:27:ce:e5:27:b7:e4:23:58:42:a6:35:a2:
                    99:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:29:C5:66:E6:85:2E:5F:27:1F:D3:CC:91:EF:AE:46:57:88:3D:70
            X509v3 Authority Key Identifier:
                keyid:D0:C5:62:31:3B:00:9B:2A:94:F2:D1:51:CA:FD:85:21:26:5D:4E:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/D0C562313B009B2A94F2D151CAFD8521265D4ECD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MViMTsAmyqU8tFRyv2FISZdTs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/36322e3132322e3138392e302f32342d3234203d3e20323039393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:75:53:77:41:15:f6:e0:ce:7a:73:72:27:74:5a:df:bd:86:
         32:f7:67:61:99:12:01:8d:73:08:cc:93:f5:bd:d7:da:ee:f6:
         f7:f9:2e:b6:04:07:98:12:4d:70:0f:6f:9d:b0:ad:e4:a3:4a:
         fc:c2:8f:2a:a3:e7:27:9c:ac:1c:7d:85:30:d9:8a:ce:fb:0a:
         6a:6b:94:f6:ea:5e:fd:f1:0c:22:42:34:6f:0a:ce:47:0f:b0:
         5f:48:e6:bb:78:16:f7:cc:41:23:32:6b:6d:33:ce:ba:e8:8a:
         31:19:2d:3c:af:23:03:de:3f:65:21:40:7a:51:cd:8a:b4:3d:
         70:c4:74:25:1c:c3:67:b0:c4:50:56:92:fd:a4:6b:63:98:87:
         06:15:71:f5:40:7b:8a:3f:68:2d:80:86:2f:d7:20:d5:ea:5d:
         41:f9:d8:7a:0f:aa:3a:71:99:03:de:f2:45:d3:3f:7f:dd:34:
         e3:48:c0:ec:c6:dd:69:b1:52:b1:57:a2:bb:f7:e2:05:a5:65:
         c6:f7:83:c4:8e:d3:28:81:46:42:e8:f9:b2:80:23:8e:1e:3c:
         57:de:bb:3f:4e:b5:37:93:95:ee:1e:25:cf:4d:02:e9:c3:13:
         b3:56:c1:ec:3c:94:c9:17:50:c4:6c:3b:55:7a:29:19:55:25:
         df:96:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:26 2025 by rpki-client