Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/faUrWBXvHIpn74RBIrLyu8diW84.roa
File:                     faUrWBXvHIpn74RBIrLyu8diW84.roa (raw, json)
Hash identifier:          5IhkfJ4tatxxwUvroWVCqKeJ/pOgzXuXjBX2Wy7Fecw=
Subject key identifier:   7D:A5:2B:58:15:EF:1C:8A:67:EF:84:41:22:B2:F2:BB:C7:62:5B:CE
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       0181F72D50D57DD56BEE57002CF772E7D80C
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/faUrWBXvHIpn74RBIrLyu8diW84.roa
Signing time:             Wed 13 Jul 2022 10:49:10 +0000
ROA not before:           Wed 13 Jul 2022 10:49:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213296
IP address blocks:        194.28.156.0/24 maxlen: 25
                          194.28.158.0/24 maxlen: 25
                          194.104.4.0/24 maxlen: 24
                          212.69.132.0/24 maxlen: 24
                          194.104.5.0/24 maxlen: 25
                          194.104.6.0/24 maxlen: 25
                          212.69.134.0/24 maxlen: 24
                          212.69.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f7:2d:50:d5:7d:d5:6b:ee:57:00:2c:f7:72:e7:d8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Jul 13 10:49:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7da52b5815ef1c8a67ef844122b2f2bbc7625bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f6:9c:c8:17:27:56:51:89:3c:2f:16:70:45:
                    b0:cc:c7:cb:d0:59:ad:ef:78:f8:2c:59:73:03:bf:
                    2b:f9:3a:36:d9:19:13:04:7f:33:3e:e7:d0:06:d8:
                    04:bf:fa:d7:c1:98:e2:f9:98:68:ec:ef:c4:e5:50:
                    e7:85:da:e2:27:65:b8:f9:24:6c:9a:39:e2:15:d7:
                    d0:90:5e:11:bd:8f:a2:ab:f6:a0:b2:53:09:a6:9f:
                    15:e2:72:9d:20:4b:36:d2:4d:9b:1c:be:24:f3:13:
                    1e:2e:ee:88:1c:58:a9:b2:d5:53:9a:bd:f8:bf:90:
                    3c:f8:fc:a3:dc:75:85:02:38:88:d8:4a:e4:cf:80:
                    ed:52:14:8f:c1:3e:de:bd:18:fa:fc:6f:1c:91:8f:
                    7f:25:f3:cb:09:a2:93:fd:39:89:e9:34:23:e7:a2:
                    c9:b6:92:94:96:cc:56:ed:95:81:e6:a7:c1:de:5f:
                    ea:56:5d:69:14:ff:31:5e:de:ae:e8:a9:15:f3:9d:
                    ea:2b:4b:05:f5:1c:9b:fd:76:b8:8e:82:cc:09:ff:
                    f8:8f:23:ad:4d:75:57:dd:d4:65:14:83:92:4b:6c:
                    56:bd:43:e0:d3:d1:e1:7b:a6:dd:ee:2f:2c:18:d5:
                    a4:6e:47:3e:b9:2f:9b:00:41:9b:e6:fb:c7:5e:5a:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:2B:58:15:EF:1C:8A:67:EF:84:41:22:B2:F2:BB:C7:62:5B:CE
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/faUrWBXvHIpn74RBIrLyu8diW84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.28.156.0/24
                  194.28.158.0/24
                  194.104.4.0-194.104.6.255
                  212.69.132.0-212.69.134.255

    Signature Algorithm: sha256WithRSAEncryption
         27:1a:81:36:c6:b8:97:db:e6:d0:c2:c7:06:a2:6f:1f:69:67:
         c0:44:f8:cd:05:fc:5f:1c:53:8c:17:2e:12:08:4f:fe:06:df:
         b3:33:c8:e5:28:d4:70:73:ca:16:90:dd:98:d9:b7:77:2e:5f:
         f5:a4:d0:33:be:65:97:1a:5b:1e:bb:ae:d5:75:ae:c0:9d:b0:
         00:e7:0a:28:2c:31:13:f4:0d:50:39:53:aa:69:35:45:c6:3d:
         47:4d:87:0a:2a:ba:ac:14:3d:25:b6:82:6e:aa:16:f3:a4:11:
         ea:da:2e:a2:6d:da:a5:85:5d:0a:c8:a0:95:05:8a:c8:a0:dd:
         c1:23:69:a9:1e:35:be:04:35:61:a3:60:0d:7a:33:8c:8e:f9:
         9d:39:03:57:f0:5e:dc:d9:c0:63:4f:f8:3a:e4:56:e2:94:10:
         37:1a:1c:52:ec:5f:7c:db:70:66:23:6a:a1:9f:15:28:46:3e:
         c3:80:4d:0e:ac:7c:74:23:56:53:d3:36:2d:81:3d:09:4b:2b:
         3d:da:84:84:e0:35:19:9c:ac:ea:6f:be:1e:93:04:31:cf:76:
         51:08:b3:5b:c8:89:cc:f1:1e:89:39:bd:5a:f3:b3:8c:d2:4b:
         31:ea:43:fe:69:9a:ea:f4:0e:0b:95:9f:25:ad:71:88:a1:cf:
         75:f1:0e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org