Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/ZkOuMEcirotQ_j16ES8yq-5ATuo.roa
File:                     ZkOuMEcirotQ_j16ES8yq-5ATuo.roa (raw, json)
Hash identifier:          Z7SlTYeBrYrvRkQuZnL74SKeenHUhJCOpCzwMLJ+JuI=
Subject key identifier:   66:43:AE:30:47:22:AE:8B:50:FE:3D:7A:11:2F:32:AB:EE:40:4E:EA
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       09218132
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/ZkOuMEcirotQ_j16ES8yq-5ATuo.roa
Signing time:             Mon 28 Mar 2022 22:39:19 +0000
ROA not before:           Mon 28 Mar 2022 22:39:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213296
IP address blocks:        193.160.72.0/23 maxlen: 24
                          194.28.156.0/24 maxlen: 25
                          194.28.157.0/24 maxlen: 25
                          194.28.158.0/24 maxlen: 25
                          194.104.4.0/24 maxlen: 24
                          212.69.132.0/24 maxlen: 24
                          194.104.5.0/24 maxlen: 25
                          194.104.6.0/24 maxlen: 25
                          212.69.134.0/24 maxlen: 24
                          212.69.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153190706 (0x9218132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Mar 28 22:39:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6643ae304722ae8b50fe3d7a112f32abee404eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:a2:4b:8e:47:b8:ae:c8:8b:e5:63:5d:74:
                    69:ee:f5:10:be:fe:0c:70:1c:06:dc:2f:d1:f4:a0:
                    0c:ea:1a:05:02:fd:36:01:6d:38:38:f2:39:92:02:
                    77:76:bf:e7:2c:7e:a9:57:fc:57:bd:a5:b3:f7:2a:
                    9a:3f:27:cd:5e:72:74:ff:7e:a7:f6:ba:16:18:d1:
                    bc:14:35:59:fe:7f:a3:b8:5c:cf:2a:51:fb:c8:54:
                    03:4a:1b:4c:9f:93:6e:32:b6:51:14:95:17:5e:4f:
                    fc:41:d6:b8:e9:ad:67:be:88:1c:bd:55:d1:45:00:
                    ac:24:54:30:27:3e:68:ae:05:c3:62:67:e8:85:98:
                    cb:3f:3c:74:78:6f:b7:ac:03:e9:a1:f1:b4:b8:b0:
                    c9:57:77:a5:97:65:e0:3e:ec:f0:d5:53:9f:fe:86:
                    99:4b:c8:d3:a2:7f:27:bd:aa:75:84:5b:52:72:85:
                    c5:c9:b5:a5:ee:b0:e3:5c:a4:1b:ad:14:28:e1:66:
                    83:04:38:72:43:2f:51:15:60:9d:e2:a9:33:d8:a2:
                    f2:bc:91:88:a0:3e:f3:e2:27:30:59:3a:39:62:cc:
                    6e:a5:fb:08:d6:78:c1:01:07:e2:fe:37:b1:67:22:
                    f6:31:24:16:05:09:71:07:ee:77:51:66:41:6c:65:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:43:AE:30:47:22:AE:8B:50:FE:3D:7A:11:2F:32:AB:EE:40:4E:EA
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/ZkOuMEcirotQ_j16ES8yq-5ATuo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.72.0/23
                  194.28.156.0-194.28.158.255
                  194.104.4.0-194.104.6.255
                  212.69.132.0-212.69.134.255

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:04:3d:eb:a0:4b:20:17:0d:33:35:4e:89:35:19:7f:16:
         6e:ef:0f:2f:97:56:ef:8f:ee:0e:29:f5:69:87:73:a6:0d:5f:
         f5:3b:51:9e:de:03:6c:9b:72:bf:7f:58:06:44:f9:36:50:22:
         db:5a:6c:0e:b1:62:a9:95:66:99:d6:27:71:72:a4:a5:79:87:
         d5:cf:3c:d4:94:81:b3:c3:0d:d3:2d:0e:d5:6a:fc:64:e2:e5:
         a7:e0:fb:72:56:7b:c4:10:50:c8:cd:cb:4c:a9:0c:a5:66:9b:
         b9:c0:1b:f9:e4:9a:8f:f8:5e:33:62:bd:c2:c1:cc:38:ca:6b:
         8b:6c:99:5a:e1:25:9b:68:ca:3a:81:36:ad:db:23:98:cb:37:
         99:fd:36:41:2c:65:83:e5:4a:5f:7c:ec:44:37:4e:59:4c:ce:
         5f:3e:55:17:6d:fc:60:4d:97:f3:1c:37:d0:14:5e:3e:10:4f:
         28:34:f6:00:76:f5:dc:fb:e8:53:be:53:22:4e:07:fd:be:0d:
         bc:0c:55:0e:92:fe:33:38:84:eb:a0:77:b8:43:0f:24:a2:06:
         0a:8a:28:c6:5b:e8:8e:5d:e0:a9:77:91:49:96:78:e8:bd:7c:
         8e:1e:ab:b6:d0:90:70:04:fa:90:c0:8c:b8:24:03:5c:61:9b:
         12:27:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org