Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/lqwEfBy33mcyXu0RjZwyUQidgLs.roa
File:                     lqwEfBy33mcyXu0RjZwyUQidgLs.roa (raw, json)
Hash identifier:          eBZTQCYPD3IANnsVXkE/BLxkW7sLeukeWNTPVebSZBs=
Subject key identifier:   96:AC:04:7C:1C:B7:DE:67:32:5E:ED:11:8D:9C:32:51:08:9D:80:BB
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       01838EE1D4B2CF6E7F2FD399A04EE0E9178A
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/lqwEfBy33mcyXu0RjZwyUQidgLs.roa
Signing time:             Fri 30 Sep 2022 14:51:48 +0000
ROA not before:           Fri 30 Sep 2022 14:51:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        193.160.72.0/24 maxlen: 24
                          193.228.51.0/24 maxlen: 24
                          193.228.50.0/24 maxlen: 24
                          193.228.49.0/24 maxlen: 24
                          193.228.48.0/24 maxlen: 24
                          88.218.239.0/24 maxlen: 24
                          194.28.157.0/24 maxlen: 25
                          212.69.135.0/24 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:8e:e1:d4:b2:cf:6e:7f:2f:d3:99:a0:4e:e0:e9:17:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Sep 30 14:51:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=96ac047c1cb7de67325eed118d9c3251089d80bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:e6:a0:8b:1b:3e:3c:dc:25:02:95:93:ce:
                    1f:50:99:f2:2c:60:6d:29:2c:2c:0d:0a:97:3a:68:
                    8b:16:9f:6c:b3:b3:49:13:ca:50:2a:f2:d0:31:80:
                    53:bf:08:9e:3a:fa:15:80:51:2f:82:61:cd:93:2b:
                    29:f5:9a:1d:c9:83:ec:14:e3:02:9c:44:6a:86:0e:
                    27:49:55:fb:49:46:a3:27:a0:a8:05:ab:bb:d8:88:
                    c9:a1:e3:14:c6:63:3e:5e:1e:6d:22:f0:3c:7d:af:
                    67:45:a6:ef:19:de:8f:55:04:ae:aa:2c:15:a1:54:
                    6f:58:ae:89:f5:de:ae:8b:57:57:d6:40:7d:4d:fb:
                    88:fa:22:21:75:9a:f1:72:11:55:dd:4e:01:28:c6:
                    73:9e:f5:ad:b1:2c:9b:4a:34:1e:f9:fa:0f:e5:a4:
                    ad:94:65:7d:9c:be:69:3d:e9:03:98:35:00:15:88:
                    78:3a:28:68:04:08:86:68:3f:f8:2a:d3:1c:69:fb:
                    dd:fe:87:a7:39:c0:ce:b5:08:38:88:5b:24:d4:b5:
                    4a:b8:44:0e:e4:b3:b0:74:fa:8a:40:dc:d0:ae:5a:
                    98:df:71:6b:98:a2:4b:cb:d7:22:ce:cc:e8:d6:eb:
                    82:9a:43:b6:89:59:ab:5c:b7:58:a2:d5:08:97:73:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AC:04:7C:1C:B7:DE:67:32:5E:ED:11:8D:9C:32:51:08:9D:80:BB
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/lqwEfBy33mcyXu0RjZwyUQidgLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.239.0/24
                  193.160.72.0/24
                  193.228.48.0/22
                  194.28.157.0/24
                  212.69.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:89:f7:99:ff:a7:08:4d:eb:fd:b2:a4:2e:93:c5:8a:06:b4:
         07:91:80:ac:7c:b5:fc:7e:a5:4b:1f:cf:96:54:4d:5d:56:42:
         ed:7a:e0:3c:4d:7d:bb:62:b8:c7:b5:e3:72:de:0f:38:8f:e1:
         dd:f3:84:5f:74:4b:3c:a3:31:bd:4a:f8:7d:6e:50:94:99:31:
         ef:0d:c3:c5:c8:7d:f8:de:67:e8:cf:2b:e4:29:b4:e3:09:28:
         7c:0b:13:2c:a0:5d:28:e9:a3:f1:d3:cb:51:90:b7:88:5f:c0:
         83:dd:50:ca:f6:0f:79:a1:06:03:20:51:6e:a6:4d:d3:4f:dc:
         49:cc:67:79:22:a8:b8:ab:0d:7d:4b:1f:f8:0e:fa:e1:e4:ec:
         a9:15:96:a1:dc:e8:38:99:41:f3:66:ac:df:ac:67:92:24:bf:
         9e:97:23:35:0a:29:3e:1d:47:34:26:14:40:f6:4e:99:45:d7:
         e8:30:c3:12:f8:15:a4:9b:79:ea:d7:67:d5:b0:04:1a:d4:bc:
         16:21:df:23:e5:c9:22:db:a6:10:e7:c9:c3:bf:0e:58:75:f8:
         dc:82:2e:f9:69:2c:f7:bc:9c:40:16:94:78:22:87:49:89:e7:
         ca:5e:4e:8f:3e:0e:2a:10:22:69:c9:1c:66:53:ce:52:d6:2a:
         79:e3:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org