Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/aBPDS_3LxjAHZbNDQXiT1oBAaW8.roa
File:                     aBPDS_3LxjAHZbNDQXiT1oBAaW8.roa (raw, json)
Hash identifier:          ILXpytPzIOYmWtiJelcT/tWJHPjdDzBj2+wErGlE+lQ=
Subject key identifier:   68:13:C3:4B:FD:CB:C6:30:07:65:B3:43:41:78:93:D6:80:40:69:6F
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       0185709502D091EE61CD22E87CD6D6DC9F92
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/aBPDS_3LxjAHZbNDQXiT1oBAaW8.roa
Signing time:             Mon 02 Jan 2023 03:44:51 +0000
ROA not before:           Mon 02 Jan 2023 03:44:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207795
IP address blocks:        194.28.156.0/24 maxlen: 25
                          194.28.158.0/24 maxlen: 25
                          194.104.4.0/24 maxlen: 24
                          194.104.5.0/24 maxlen: 25
                          194.104.6.0/24 maxlen: 25
                          212.69.132.0/24 maxlen: 24
                          212.69.133.0/24 maxlen: 24
                          212.69.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:02:d0:91:ee:61:cd:22:e8:7c:d6:d6:dc:9f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Jan  2 03:44:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6813c34bfdcbc6300765b343417893d68040696f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:93:a8:18:2a:1c:90:85:9c:a6:a6:2f:7d:
                    d3:ea:85:c7:fc:77:f2:7a:8d:b1:f1:68:30:5b:e1:
                    76:e2:89:02:2b:56:f0:52:9c:2c:e1:e8:aa:35:55:
                    4e:e8:01:8a:8a:95:70:da:83:19:ec:a2:d1:63:48:
                    26:ea:b7:1d:2a:76:d6:48:4b:54:86:4d:79:96:81:
                    a5:22:c2:7f:74:5e:a9:44:c9:e8:c8:1d:43:6a:0c:
                    9f:ed:fa:db:c7:c0:06:42:55:05:19:c2:5f:58:1c:
                    71:f6:43:56:22:9d:0c:9b:5f:29:4c:6a:03:bd:2f:
                    1b:71:1e:59:c3:93:d1:92:20:ce:5e:ee:12:4b:05:
                    64:8e:69:b4:7b:8f:1e:dc:50:38:e9:54:44:aa:67:
                    3c:13:0e:c1:ef:f5:13:a6:7e:40:1c:04:bc:9f:b3:
                    9a:91:ce:35:2c:d6:3c:95:7c:b1:d9:6c:3e:c1:8f:
                    e5:08:b8:be:f2:db:3f:6a:f6:d0:c4:05:4c:21:49:
                    79:ed:1c:1a:64:d1:a6:53:d5:82:66:dd:a8:fd:c1:
                    5c:e7:62:7f:6e:a3:06:32:92:99:e1:98:c9:38:64:
                    cc:e7:0a:ab:d5:26:4c:55:61:92:f0:e2:c5:e0:56:
                    1d:97:8e:c5:7e:4e:28:04:35:51:36:42:cd:64:37:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:13:C3:4B:FD:CB:C6:30:07:65:B3:43:41:78:93:D6:80:40:69:6F
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/aBPDS_3LxjAHZbNDQXiT1oBAaW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.28.156.0/24
                  194.28.158.0/24
                  194.104.4.0-194.104.6.255
                  212.69.132.0-212.69.134.255

    Signature Algorithm: sha256WithRSAEncryption
         80:25:9e:8f:82:3a:a3:10:50:4b:2e:c9:fc:36:72:eb:df:5d:
         72:3d:6a:bd:3e:41:4d:3b:92:2f:26:c2:fb:8d:55:4c:de:b5:
         81:50:1c:76:9f:e3:0b:85:d3:54:82:82:c8:fb:d5:9d:bd:64:
         87:8d:5c:6a:71:24:ff:5e:62:7c:39:3f:9f:c6:7e:1d:02:47:
         92:c7:82:20:3e:28:79:b1:2d:86:14:6d:bc:43:08:1a:72:f7:
         e5:8d:2d:5d:96:2a:c0:bb:58:84:a2:b4:5e:69:0f:ca:36:a4:
         4b:04:0a:f6:e5:d7:7d:0b:f4:23:0d:ef:53:4d:e3:21:a1:13:
         2e:96:18:03:70:e6:4c:2f:78:51:44:df:3b:b5:00:e6:a9:78:
         86:ee:0e:6f:40:4a:30:fc:10:cf:7e:3d:42:62:8b:22:82:5b:
         6c:b0:f8:75:c7:d1:19:05:aa:a5:03:8e:15:20:ed:da:80:4d:
         69:5c:0c:71:83:96:4e:ae:0d:fb:3b:84:3b:45:ae:53:9a:56:
         bc:2b:10:fc:69:7a:9d:3c:41:2c:75:5d:0f:43:f5:47:df:1e:
         7a:03:91:e3:85:f3:9e:2d:9a:fd:2e:15:14:b2:d4:90:74:1f:
         fa:d1:7e:da:b8:89:8e:dd:55:8e:95:bc:1d:bd:93:08:b3:14:
         3f:8d:c5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org