Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/cPBYVrES6J9FMFQ8V2bgzknEMb8.roa
File:                     cPBYVrES6J9FMFQ8V2bgzknEMb8.roa (raw, json)
Hash identifier:          Zkw7mdVfWJ4Nox1Lq313eh8pldDBc3CcrX/uTR2Ds3w=
Subject key identifier:   70:F0:58:56:B1:12:E8:9F:45:30:54:3C:57:66:E0:CE:49:C4:31:BF
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       091EDC15
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/cPBYVrES6J9FMFQ8V2bgzknEMb8.roa
Signing time:             Mon 28 Mar 2022 22:39:17 +0000
ROA not before:           Mon 28 Mar 2022 22:39:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207710
IP address blocks:        193.160.72.0/23 maxlen: 24
                          194.28.158.0/24 maxlen: 25
                          194.28.157.0/24 maxlen: 25
                          194.28.156.0/24 maxlen: 25
                          194.104.4.0/24 maxlen: 24
                          212.69.132.0/24 maxlen: 24
                          194.104.6.0/24 maxlen: 25
                          194.104.5.0/24 maxlen: 25
                          212.69.134.0/24 maxlen: 24
                          212.69.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153017365 (0x91edc15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Mar 28 22:39:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=70f05856b112e89f4530543c5766e0ce49c431bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:80:8b:00:81:2f:a9:7e:02:4e:8a:f4:62:
                    6e:cd:d4:cf:63:a8:28:1b:d9:3a:04:53:03:84:12:
                    af:2e:86:62:d8:af:30:58:8a:e4:4c:ea:b2:d3:93:
                    e0:c3:23:86:82:fd:07:75:65:fe:bf:d0:62:9d:f0:
                    f5:6b:fc:fb:be:73:94:e9:26:04:1d:a3:e3:e8:f6:
                    63:ca:1d:13:10:ad:a0:52:84:41:de:70:0f:28:78:
                    eb:4b:9d:1c:60:29:4c:36:16:04:f8:0f:b0:21:30:
                    72:c5:66:d4:e6:a0:f8:9b:e0:68:64:05:8e:20:eb:
                    06:2d:60:79:82:2b:e1:6f:6c:5c:f8:d6:33:89:8b:
                    37:d7:60:ab:99:87:f6:66:86:ca:f6:04:ac:b4:30:
                    14:29:b8:96:f6:a0:e6:63:39:95:4c:3e:aa:a8:3d:
                    2e:a6:8e:c7:a6:59:82:3e:dc:0f:38:a3:61:4c:79:
                    89:93:cf:48:96:f3:49:a7:73:3f:16:1a:ed:b0:9c:
                    9e:7e:93:15:07:91:85:27:51:70:d0:1e:d9:2a:d1:
                    58:07:ee:c9:6f:48:a0:93:59:41:f5:3c:e7:b9:31:
                    0b:c7:d9:b3:74:5e:8b:2b:ce:7d:a8:35:f6:c4:e5:
                    f5:9c:8c:cf:63:6e:65:09:86:a1:a4:80:71:dc:76:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F0:58:56:B1:12:E8:9F:45:30:54:3C:57:66:E0:CE:49:C4:31:BF
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/cPBYVrES6J9FMFQ8V2bgzknEMb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.72.0/23
                  194.28.156.0-194.28.158.255
                  194.104.4.0-194.104.6.255
                  212.69.132.0-212.69.134.255

    Signature Algorithm: sha256WithRSAEncryption
         88:13:61:8f:36:4a:52:61:d5:55:ef:e2:de:9c:6f:b1:32:50:
         75:e2:1a:42:1b:81:81:1e:48:4b:b6:5f:59:68:56:40:27:5f:
         b1:42:88:43:1a:78:06:c7:22:31:d9:27:4e:c4:e8:ff:4b:3e:
         b2:63:39:7e:6f:69:96:17:61:ce:38:16:bf:89:bd:f9:e2:64:
         eb:41:80:d8:e1:36:c1:01:64:1c:b1:d8:09:5b:42:44:70:ea:
         89:c5:27:3d:20:76:a9:7f:cc:01:18:f8:a3:8d:08:60:66:a9:
         60:2d:ac:e6:14:5a:7e:c6:fd:8a:73:f7:38:fa:3a:16:df:f5:
         0c:2b:b4:60:5c:20:b1:7e:46:d8:a9:ab:53:c2:bc:0a:76:3a:
         ab:c2:69:30:49:ae:3d:f5:24:80:34:1c:42:28:71:d7:5b:df:
         19:9f:b3:7d:4b:84:2e:72:c6:97:cb:31:09:03:74:42:3e:ef:
         19:cb:d4:07:41:1b:9b:bb:0a:12:95:ab:ec:e2:7b:f8:4d:ff:
         9b:78:3b:e0:62:fc:29:2d:93:a6:23:fe:b6:bb:13:e9:5b:08:
         47:d6:08:82:82:f1:22:95:51:bf:4a:05:8e:61:21:51:92:72:
         7a:79:c9:80:53:ac:cf:fd:5a:1c:79:95:4f:b7:b8:8b:c1:bc:
         08:d4:0d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org