Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/YxjVuzZYh9-Mv_vU8cX5NvNXFRo.roa
File:                     YxjVuzZYh9-Mv_vU8cX5NvNXFRo.roa (raw, json)
Hash identifier:          kTF50TRLsKwTJSXRY/X8CErRj70GCaNk5irtUa1cBDU=
Subject key identifier:   63:18:D5:BB:36:58:87:DF:8C:BF:FB:D4:F1:C5:F9:36:F3:57:15:1A
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       08F51E6C
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/YxjVuzZYh9-Mv_vU8cX5NvNXFRo.roa
Signing time:             Tue 22 Mar 2022 22:01:34 +0000
ROA not before:           Tue 22 Mar 2022 22:01:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207710
IP address blocks:        194.104.4.0/24 maxlen: 24
                          212.69.132.0/24 maxlen: 24
                          212.69.134.0/24 maxlen: 24
                          212.69.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150281836 (0x8f51e6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Mar 22 22:01:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6318d5bb365887df8cbffbd4f1c5f936f357151a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:d0:09:c6:db:68:9a:78:e7:45:81:2a:5f:
                    a3:1c:d2:4a:a9:c6:40:21:b2:35:9b:1f:cd:08:f7:
                    fa:b4:fe:9d:96:c2:9f:09:ad:3d:70:4c:a0:d7:4b:
                    56:a0:9c:44:65:b1:19:2c:fa:ff:3e:0c:21:ec:65:
                    a0:47:2a:10:ad:b9:25:71:ff:de:d2:72:60:1e:2b:
                    eb:6b:c7:22:1e:e1:51:f6:e8:b5:ad:30:de:c2:6a:
                    7d:46:a6:5d:88:3f:61:e3:06:a1:59:4c:e6:1a:e0:
                    e8:6b:93:cc:21:9c:e0:20:db:02:d4:3b:86:fa:a7:
                    8c:90:df:2a:7f:a8:1d:94:19:cd:ab:7a:a4:e4:a0:
                    91:ec:4f:31:9e:c0:2a:71:24:16:3b:82:56:39:68:
                    e7:74:3c:ff:9d:37:1d:4c:d3:4c:6d:95:1c:fb:35:
                    c9:7b:f6:f1:1d:c5:2f:88:cd:10:e5:44:93:b8:9b:
                    06:b9:90:ed:7c:2c:61:87:43:41:d9:b5:11:b7:0b:
                    47:5b:80:1f:84:04:5b:d2:67:7f:6d:99:34:5d:3e:
                    c6:23:fc:b1:f8:81:b6:c1:87:0c:3d:70:8a:e6:2e:
                    87:59:55:f1:9a:66:ff:ce:11:fe:18:5d:b5:71:69:
                    3d:a5:92:41:c5:64:df:d2:4d:03:e3:51:78:e5:3c:
                    0b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:18:D5:BB:36:58:87:DF:8C:BF:FB:D4:F1:C5:F9:36:F3:57:15:1A
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/YxjVuzZYh9-Mv_vU8cX5NvNXFRo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.4.0/24
                  212.69.132.0-212.69.134.255

    Signature Algorithm: sha256WithRSAEncryption
         0c:70:27:c7:f9:84:0d:de:ef:af:a5:37:40:85:d9:bd:1b:55:
         3b:56:9b:af:28:de:a7:88:b7:c6:42:f3:e8:f7:7a:60:2c:b7:
         2e:f5:96:56:a7:38:6f:bb:c3:ff:02:4f:4d:1b:73:bf:26:76:
         45:43:20:7d:bd:8e:3c:58:de:ab:12:fe:e3:19:1c:96:c2:12:
         22:1e:84:57:2d:9f:3f:f2:5c:06:cc:c7:42:94:ab:2f:96:c0:
         36:d1:88:02:da:d8:e1:a7:5e:05:23:01:bc:80:81:35:bd:3d:
         ce:54:38:c3:d4:96:8c:67:04:e3:4a:0d:dc:b2:02:c9:aa:c6:
         ea:fd:0c:56:b8:ed:65:65:18:a0:61:39:a7:7d:19:0f:0c:72:
         34:86:4e:62:3a:60:20:88:01:b8:2e:a0:fe:ee:52:28:39:89:
         cf:15:dc:a0:5f:28:a6:32:1f:f3:05:23:47:34:30:29:7a:25:
         0b:f7:c5:69:d3:8a:a1:11:ba:2c:61:5f:e5:7a:4b:bf:a9:41:
         dc:35:2c:44:63:2d:80:88:b5:be:00:09:ab:62:6c:88:d2:48:
         90:48:81:0b:15:f2:eb:32:28:d7:ec:9d:bb:b9:6a:45:85:ad:
         9f:b4:ae:a3:07:5a:27:17:46:2b:0f:1f:d0:71:0b:59:6b:67:
         15:50:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org