Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/fvi0MxC35F552BdU7i4QsEbVPWQ.roa
File:                     fvi0MxC35F552BdU7i4QsEbVPWQ.roa (raw, json)
Hash identifier:          oh5hWeQnNSF6LkMBfxA3QlE6qG5MHUzoDpA6WlIYttU=
Subject key identifier:   7E:F8:B4:33:10:B7:E4:5E:79:D8:17:54:EE:2E:10:B0:46:D5:3D:64
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       0181F72D500A5127DE239B5A8214E9BAF1B5
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/fvi0MxC35F552BdU7i4QsEbVPWQ.roa
Signing time:             Wed 13 Jul 2022 10:49:10 +0000
ROA not before:           Wed 13 Jul 2022 10:49:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209372
IP address blocks:        193.160.72.0/24 maxlen: 24
                          88.218.239.0/24 maxlen: 24
                          194.28.157.0/24 maxlen: 25
                          212.69.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f7:2d:50:0a:51:27:de:23:9b:5a:82:14:e9:ba:f1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Jul 13 10:49:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ef8b43310b7e45e79d81754ee2e10b046d53d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:1e:0e:36:38:5a:66:da:dd:0c:31:6b:83:
                    de:0a:28:ad:4e:ad:94:2b:9b:fb:1a:30:9a:0f:ff:
                    ee:3a:99:37:52:0e:cb:58:74:a3:fa:ba:1b:1d:94:
                    3c:a1:d0:e7:04:f4:93:da:f6:28:c1:13:02:cd:32:
                    47:fc:01:5b:96:6a:6c:26:76:5b:c7:8f:9d:80:8e:
                    97:bd:09:8a:26:68:b3:a1:bd:da:23:14:5c:5c:b6:
                    36:74:62:06:06:1a:71:b4:b6:4c:2b:19:70:e3:5b:
                    39:61:cb:4c:90:31:f5:a6:73:4f:28:76:ea:f3:37:
                    e1:06:03:a7:6e:b2:db:4c:10:f1:6a:f0:e4:d3:8c:
                    03:73:a1:0f:8d:86:78:4f:fc:58:b8:ac:f5:79:92:
                    e1:52:8c:a5:7b:ba:69:1d:53:50:d3:31:b5:73:c9:
                    ca:eb:88:d4:c8:75:42:c5:ba:11:ea:c4:fa:5f:5c:
                    cf:41:8b:ec:8b:8c:dc:df:90:1c:8b:ac:02:a2:8e:
                    e3:05:1a:fa:28:ee:90:31:5f:07:49:30:54:eb:6c:
                    b9:71:60:80:ca:09:5b:58:c6:b2:da:7f:0e:b3:81:
                    6f:34:ca:98:a4:e5:dd:24:5a:ae:f0:30:39:e1:cb:
                    f4:e3:f4:21:53:ba:c1:65:5f:bd:ee:bc:78:d2:8d:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F8:B4:33:10:B7:E4:5E:79:D8:17:54:EE:2E:10:B0:46:D5:3D:64
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/fvi0MxC35F552BdU7i4QsEbVPWQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.239.0/24
                  193.160.72.0/24
                  194.28.157.0/24
                  212.69.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:55:42:8e:09:07:7a:9b:4f:af:dc:d5:34:f4:0d:64:fe:36:
         05:f9:9b:c2:46:81:10:22:4f:1a:59:02:d3:ef:cd:bf:a9:59:
         52:2f:f9:ff:81:a9:16:85:fd:9d:db:5c:bd:ff:c5:de:f2:7c:
         07:51:16:b5:09:9a:14:9a:44:fa:a5:02:6f:db:78:51:d3:cf:
         ec:5a:a9:e8:a5:b7:45:56:0c:f3:50:ef:3b:10:6d:38:05:98:
         57:fb:3a:52:ef:66:d5:a1:1f:8f:e4:7f:31:6a:b0:f4:d5:1a:
         89:c0:ec:ee:19:ef:43:7b:32:32:d2:33:1b:69:91:4c:48:a6:
         1c:6f:8c:11:9d:92:c5:92:d7:06:4a:4b:c2:d7:e8:c8:6c:b4:
         39:04:5f:51:20:d9:2a:b6:6e:fe:fb:be:5d:dd:7f:02:ec:80:
         c5:3a:b2:c8:ff:fb:c2:47:2b:a4:09:46:fd:0e:c7:fa:eb:ec:
         6a:b8:d6:ee:e9:f0:66:e7:14:67:d5:11:0e:5f:c2:ec:6b:48:
         e9:02:7f:91:43:0f:1c:9f:4d:09:e4:94:70:90:66:93:e2:f0:
         64:bb:9b:31:4c:aa:4d:fc:25:a5:8e:8f:93:38:d7:74:48:f4:
         92:e4:80:ef:27:2d:44:ec:f9:55:ae:9f:f0:9c:d1:f8:84:19:
         18:85:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org