Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/9bawCMbfxJ1oAEr4eUsjPmN7LHI.roa
File:                     9bawCMbfxJ1oAEr4eUsjPmN7LHI.roa (raw, json)
Hash identifier:          ELt9vQq9Ycxanle38U7dMS2hHma5E0/Ph+xIOI1YG00=
Subject key identifier:   F5:B6:B0:08:C6:DF:C4:9D:68:00:4A:F8:79:4B:23:3E:63:7B:2C:72
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       0185709501BE6B2B7F9962FD02DC2EC191ED
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/9bawCMbfxJ1oAEr4eUsjPmN7LHI.roa
Signing time:             Mon 02 Jan 2023 03:44:51 +0000
ROA not before:           Mon 02 Jan 2023 03:44:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        193.160.72.0/24 maxlen: 24
                          193.228.51.0/24 maxlen: 24
                          193.228.50.0/24 maxlen: 24
                          193.228.49.0/24 maxlen: 24
                          193.228.48.0/24 maxlen: 24
                          88.218.239.0/24 maxlen: 24
                          194.28.157.0/24 maxlen: 25
                          212.69.135.0/24 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:01:be:6b:2b:7f:99:62:fd:02:dc:2e:c1:91:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Jan  2 03:44:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5b6b008c6dfc49d68004af8794b233e637b2c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:d1:61:20:42:79:df:b6:69:5e:bc:85:ba:
                    ba:38:a9:ca:60:99:cd:d2:d0:d1:6c:78:49:19:1c:
                    98:8c:a7:e1:e8:5f:49:0c:01:3b:5c:93:99:89:2a:
                    21:ad:72:68:85:13:ec:52:de:46:55:f5:53:9a:44:
                    d3:01:0a:1e:9b:6f:48:43:7a:74:f0:f0:0d:85:d2:
                    bb:99:7b:7f:37:a3:ed:cb:c4:09:c2:bf:dd:d8:2b:
                    99:76:34:00:f2:53:59:4f:7a:6e:60:8b:52:a6:b7:
                    d5:e3:d7:2e:ad:9c:5a:54:f0:16:ec:fd:2b:cb:11:
                    cf:45:6a:9d:1d:29:67:12:53:b0:c8:17:64:54:a7:
                    a8:28:a5:66:08:48:34:db:5d:00:5f:97:ef:3d:e8:
                    49:f6:6b:2b:7b:e5:9b:6d:24:51:2b:74:27:8b:c9:
                    eb:89:4f:e3:b3:40:75:34:98:4f:af:c3:f1:1d:4c:
                    ab:c7:ed:80:e0:6f:c7:cf:ec:b2:17:d7:48:93:d0:
                    fd:4b:93:5b:2e:d9:09:04:ab:7c:14:dd:49:fd:97:
                    db:8d:e3:e2:35:47:b5:6e:be:39:f3:20:44:13:a9:
                    68:da:da:b0:e9:d5:cf:27:71:e4:c9:81:74:59:87:
                    bd:25:c6:90:41:86:08:e5:6b:3b:e6:c9:9a:16:ee:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B6:B0:08:C6:DF:C4:9D:68:00:4A:F8:79:4B:23:3E:63:7B:2C:72
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/9bawCMbfxJ1oAEr4eUsjPmN7LHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.239.0/24
                  193.160.72.0/24
                  193.228.48.0/22
                  194.28.157.0/24
                  212.69.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:dd:f4:f1:17:50:c4:7e:e9:44:7c:12:26:a7:cf:49:3e:7c:
         38:12:44:68:07:c1:c8:24:32:bc:a0:39:56:ff:de:eb:be:03:
         7a:f8:6f:cb:92:14:1b:29:66:6a:cb:81:c3:fb:d1:d9:7f:ee:
         81:84:1c:8a:2a:e5:84:86:5c:7b:d3:37:58:5e:21:1a:c8:6c:
         a7:51:ad:5a:40:2c:30:36:35:bb:e9:da:a7:de:77:53:73:18:
         f0:f2:8b:f1:f6:d2:6c:2d:1f:55:a9:83:ac:83:30:39:ad:73:
         0d:59:ad:82:c3:c1:5b:e0:92:ca:b5:b6:50:75:3c:e7:1d:a2:
         a1:c2:fb:02:2c:17:1f:79:1c:1f:9e:ef:5d:c8:dc:5b:0f:98:
         37:11:fc:67:6d:e8:fc:06:ec:17:f3:ad:e7:42:d8:79:38:d2:
         ad:67:67:df:07:e7:82:b1:2a:00:85:fb:2d:99:ee:ce:47:bf:
         02:74:9d:af:f0:7a:a1:e6:22:80:89:53:17:b5:c5:30:a6:dc:
         c2:b9:73:45:7d:1e:bf:8a:58:3b:02:c7:01:40:d5:ca:30:54:
         9b:b4:86:91:e3:d2:b7:a8:32:63:88:d7:75:f1:cd:f6:12:ae:
         80:f8:dc:0e:b2:d1:37:14:3e:d6:a4:94:73:1a:c7:8d:77:20:
         6c:1f:cf:f9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVwlQG+ayt/mWL9AtwuwZHtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2QyYzlhZDM2ZDlmODgxZmE4MWZkNDc1Mzg3ZmI4NzBi
NWI0ZmIwHhcNMjMwMTAyMDM0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWI2YjAwOGM2ZGZjNDlkNjgwMDRhZjg3OTRiMjMzZTYzN2IyYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2LRYSBCed+2aV68hbq6OKnKYJnN
0tDRbHhJGRyYjKfh6F9JDAE7XJOZiSohrXJohRPsUt5GVfVTmkTTAQoem29IQ3p0
8PANhdK7mXt/N6Pty8QJwr/d2CuZdjQA8lNZT3puYItSprfV49curZxaVPAW7P0r
yxHPRWqdHSlnElOwyBdkVKeoKKVmCEg0210AX5fvPehJ9msre+WbbSRRK3Qni8nr
iU/js0B1NJhPr8PxHUyrx+2A4G/Hz+yyF9dIk9D9S5NbLtkJBKt8FN1J/ZfbjePi
NUe1br458yBEE6lo2tqw6dXPJ3HkyYF0WYe9JcaQQYYI5Ws75smaFu6VtQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPW2sAjG38SdaABK+HlLIz5jeyxyMB8GA1UdIwQY
MBaAFEt9LJrTbZ+IH6gf1HU4f7hwtbT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzMwc210TnRuNGdmcUJfVWRUaF91SEMxdFBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MzA4ODItNDRiNC00MmUzLTkyNGYt
ZjcxYzQzZGFhNTliLzEvOWJhd0NNYmZ4SjFvQUVyNGVVc2pQbU43TEhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85MzA4ODItNDRiNC00MmUzLTkyNGYtZjcxYzQzZGFhNTli
LzEvUzMwc210TnRuNGdmcUJfVWRUaF91SEMxdFBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWNrvAwQA
waBIAwQCweQwAwQAwhydAwQA1EWHMA0GCSqGSIb3DQEBCwUAA4IBAQBV3fTxF1DE
fulEfBImp89JPnw4EkRoB8HIJDK8oDlW/97rvgN6+G/LkhQbKWZqy4HD+9HZf+6B
hByKKuWEhlx70zdYXiEayGynUa1aQCwwNjW76dqn3ndTcxjw8ovx9tJsLR9VqYOs
gzA5rXMNWa2Cw8Fb4JLKtbZQdTznHaKhwvsCLBcfeRwfnu9dyNxbD5g3Efxnbej8
BuwX863nQth5ONKtZ2ffB+eCsSoAhfstme7OR78CdJ2v8Hqh5iKAiVMXtcUwptzC
uXNFfR6/ilg7AscBQNXKMFSbtIaR49K3qDJjiNd18c32Eq6A+NwOstE3FD7WpJRz
GseNdyBsH8/5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org