Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/0QcpUc7xmqQc_BfB1XpDGhgGXCw.roa
File:                     0QcpUc7xmqQc_BfB1XpDGhgGXCw.roa (raw, json)
Hash identifier:          X0uAVf9Cpv7HNVX1Bt7g+9y1Pgb8woBPBbSvMP+cOGM=
Subject key identifier:   D1:07:29:51:CE:F1:9A:A4:1C:FC:17:C1:D5:7A:43:1A:18:06:5C:2C
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       0A06C5B8
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/0QcpUc7xmqQc_BfB1XpDGhgGXCw.roa
Signing time:             Mon 04 Jul 2022 19:59:19 +0000
ROA not before:           Mon 04 Jul 2022 19:59:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        212.69.135.0/24 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168215992 (0xa06c5b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Jul  4 19:59:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1072951cef19aa41cfc17c1d57a431a18065c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:37:71:5b:11:09:16:6d:47:d2:02:f0:af:99:
                    d9:8b:58:7d:de:29:e7:d5:68:c4:01:3e:bc:71:16:
                    aa:43:f3:9c:cd:a1:2b:6d:5f:52:fe:a5:98:09:8b:
                    b6:3b:88:03:03:17:c2:a2:e4:f1:9c:e9:f3:65:1b:
                    8a:e9:84:3a:dd:50:8a:3d:45:ee:f6:31:33:41:c0:
                    88:31:aa:93:43:01:95:ed:9a:e7:67:b9:a3:40:7b:
                    18:d3:41:8c:dc:2f:b9:98:5e:a6:54:5d:e5:96:2e:
                    66:b7:81:d3:d3:46:70:81:09:29:07:6d:ba:d5:cc:
                    ab:8c:4f:02:30:00:97:7a:cc:fc:ad:ac:d9:6e:ab:
                    f4:12:ca:6b:aa:ba:e2:f8:af:c4:3e:3f:52:db:4f:
                    ab:91:3b:7e:4a:14:44:c4:b0:3e:98:af:8f:36:46:
                    4e:cc:f4:6c:94:85:27:f8:27:38:21:8c:51:0a:df:
                    b4:6c:c4:c8:bc:96:21:fe:44:18:44:6e:c5:1d:49:
                    f2:07:8d:f4:c1:7a:79:3a:b5:52:ad:d9:73:72:f0:
                    59:a1:c1:7c:60:58:8c:04:fe:42:0a:ee:d7:da:b9:
                    31:6d:83:d6:bd:b0:2e:52:3b:2f:55:d1:93:49:39:
                    5d:c4:ac:54:7d:05:7c:76:3e:9d:46:a0:03:41:3d:
                    b8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:07:29:51:CE:F1:9A:A4:1C:FC:17:C1:D5:7A:43:1A:18:06:5C:2C
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/0QcpUc7xmqQc_BfB1XpDGhgGXCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.69.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:01:8b:ee:3c:75:46:bd:1f:c3:20:57:6d:d3:f6:e9:5b:
         af:92:22:aa:04:b1:98:da:85:5f:84:08:0d:9b:1f:14:9d:98:
         0d:d0:85:80:63:46:e8:ad:90:a1:4b:b1:d2:20:b5:b3:ee:95:
         4f:ec:af:f6:71:ca:06:e2:45:d4:81:43:4f:fa:4b:9d:7a:55:
         aa:81:d2:7f:9c:7a:28:ca:7e:f0:da:ac:bf:06:88:b8:4c:96:
         93:db:00:17:1d:57:3d:5b:e4:1e:a0:ae:0e:f8:41:42:0c:f0:
         7b:8d:3a:bd:03:aa:eb:0e:6b:1e:15:39:0b:3b:12:dc:81:32:
         31:43:4b:20:e2:48:1f:18:91:3f:ec:cc:e8:03:0a:ba:90:78:
         f5:42:1f:bd:3d:53:92:1b:03:e7:21:37:cf:a0:5a:42:a2:19:
         24:18:53:07:ee:9f:ca:78:e3:4a:63:f4:b6:32:6b:07:4d:6b:
         a3:e6:5a:f8:be:30:05:2e:45:c1:09:50:b4:57:87:00:44:e2:
         d5:83:95:92:31:a8:1c:71:a9:8c:0c:4c:86:6e:3c:be:e0:d5:
         35:d8:e5:4a:61:05:18:0c:9e:0f:8a:75:4c:8c:65:b0:de:e7:
         a1:67:62:2e:ce:d2:ca:29:39:65:ae:96:67:70:2a:be:27:8e:
         44:9d:3a:a7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECgbFuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjdkMmM5YWQzNmQ5Zjg4MWZhODFmZDQ3NTM4N2ZiODcwYjViNGZiMB4XDTIyMDcw
NDE5NTkxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDEwNzI5NTFjZWYx
OWFhNDFjZmMxN2MxZDU3YTQzMWExODA2NWMyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMs3cVsRCRZtR9IC8K+Z2YtYfd4p59VoxAE+vHEWqkPznM2h
K21fUv6lmAmLtjuIAwMXwqLk8Zzp82UbiumEOt1Qij1F7vYxM0HAiDGqk0MBle2a
52e5o0B7GNNBjNwvuZheplRd5ZYuZreB09NGcIEJKQdtutXMq4xPAjAAl3rM/K2s
2W6r9BLKa6q64vivxD4/UttPq5E7fkoURMSwPpivjzZGTsz0bJSFJ/gnOCGMUQrf
tGzEyLyWIf5EGERuxR1J8geN9MF6eTq1Uq3Zc3LwWaHBfGBYjAT+Qgru19q5MW2D
1r2wLlI7L1XRk0k5XcSsVH0FfHY+nUagA0E9uBsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTRBylRzvGapBz8F8HVekMaGAZcLDAfBgNVHSMEGDAWgBRLfSya022fiB+o
H9R1OH+4cLW0+zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1MzMHNtdE50bjRnZnFCX1VkVGhfdUhDMXRQcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2QvOTMwODgyLTQ0YjQtNDJlMy05MjRmLWY3MWM0M2RhYTU5Yi8x
LzBRY3BVYzd4bXFRY19CZkIxWHBER2hnR1hDdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Qv
OTMwODgyLTQ0YjQtNDJlMy05MjRmLWY3MWM0M2RhYTU5Yi8xL1MzMHNtdE50bjRn
ZnFCX1VkVGhfdUhDMXRQcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRFhzANBgkqhkiG9w0BAQsFAAOC
AQEAE5sBi+48dUa9H8MgV23T9ulbr5IiqgSxmNqFX4QIDZsfFJ2YDdCFgGNG6K2Q
oUux0iC1s+6VT+yv9nHKBuJF1IFDT/pLnXpVqoHSf5x6KMp+8NqsvwaIuEyWk9sA
Fx1XPVvkHqCuDvhBQgzwe406vQOq6w5rHhU5CzsS3IEyMUNLIOJIHxiRP+zM6AMK
upB49UIfvT1TkhsD5yE3z6BaQqIZJBhTB+6fynjjSmP0tjJrB01ro+Za+L4wBS5F
wQlQtFeHAETi1YOVkjGoHHGpjAxMhm48vuDVNdjlSmEFGAyeD4p1TIxlsN7noWdi
Ls7Syik5Za6WZ3AqvieORJ06pw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org