Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/mejdAa8p33VHoZWPhu2NPgfnSvo.roa
File:                     mejdAa8p33VHoZWPhu2NPgfnSvo.roa (raw, json)
Hash identifier:          BMZRFJvyFxDpCt4lQotZdQmufgeyLWh4aFL5hbXiZc4=
Subject key identifier:   99:E8:DD:01:AF:29:DF:75:47:A1:95:8F:86:ED:8D:3E:07:E7:4A:FA
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       0884FA35
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/mejdAa8p33VHoZWPhu2NPgfnSvo.roa
Signing time:             Sat 12 Feb 2022 19:09:02 +0000
ROA not before:           Sat 12 Feb 2022 19:09:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        212.69.132.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142932533 (0x884fa35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Feb 12 19:09:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=99e8dd01af29df7547a1958f86ed8d3e07e74afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:8e:51:ff:88:46:30:1e:b9:df:15:a7:ae:
                    54:56:9e:2a:d5:03:10:23:ac:82:e4:f6:04:5a:fb:
                    af:0b:e8:e7:28:f8:f5:e6:5d:63:04:a3:91:02:62:
                    ba:22:09:57:f6:a6:a5:66:d1:b5:e8:7f:6d:2b:56:
                    51:86:43:81:60:85:0a:5e:5c:a7:7c:d3:1c:3b:b6:
                    05:1b:2f:f4:fc:1b:64:7c:86:70:98:f0:b4:05:01:
                    52:91:c0:92:e4:a6:a6:38:96:75:d8:1b:06:17:65:
                    69:fc:75:a1:1a:b2:55:ec:35:5f:cb:d8:4f:12:b1:
                    22:ed:53:96:c1:b0:cd:91:1a:d9:dd:da:62:ec:98:
                    ff:7f:71:73:59:7a:c6:c5:e5:2a:ad:42:24:26:21:
                    0a:72:b8:c0:2a:e2:7f:d3:5f:fb:c1:6d:5e:ca:83:
                    a4:43:47:82:7f:73:87:61:da:2a:56:1b:bd:c9:55:
                    4b:0a:d3:a4:3d:85:f8:c6:56:6b:e4:97:18:3d:fb:
                    1e:cd:ab:70:b6:a4:39:e2:48:16:c6:2b:5e:9e:d2:
                    11:7b:7e:92:a5:20:1b:9b:67:20:1d:5b:4e:b0:1e:
                    84:fe:29:c1:df:07:0c:38:23:87:ba:3f:fc:e8:01:
                    01:e8:dc:8e:eb:f2:82:40:b9:9c:5e:cb:30:d0:a1:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E8:DD:01:AF:29:DF:75:47:A1:95:8F:86:ED:8D:3E:07:E7:4A:FA
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/mejdAa8p33VHoZWPhu2NPgfnSvo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.69.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:63:8b:d2:15:9f:bb:90:91:92:5a:29:2e:ea:03:20:5f:b2:
         c2:b6:49:73:96:8e:ac:88:f0:e8:0f:1c:ae:6b:19:6e:36:80:
         19:29:93:92:4e:c2:07:8f:90:71:cc:13:5d:84:41:28:22:a0:
         b5:dc:2b:53:7a:3a:23:1e:7d:c2:c0:92:f5:30:48:7f:01:13:
         66:e4:e5:7b:72:d5:89:bc:3b:4b:53:70:68:d7:77:b5:db:ab:
         f2:0f:64:74:34:74:7f:35:70:3f:24:62:6a:6d:c1:7c:9d:80:
         57:2a:89:25:91:63:04:39:1b:5f:2e:53:bd:b2:51:3f:45:6a:
         da:f8:d4:51:f5:9b:f6:ba:d6:b5:28:f8:9d:43:fa:05:47:e7:
         3d:e0:33:25:2e:cc:de:83:72:ff:d9:86:14:c1:53:89:00:7b:
         7f:0e:90:75:71:2f:e3:0c:a0:eb:fc:8a:74:5f:56:a3:cc:ec:
         00:29:50:8c:f1:55:79:e3:01:56:5e:30:e3:38:47:09:05:d4:
         53:43:bb:f7:d9:c7:65:68:95:69:e9:8c:83:5f:4a:cb:d9:30:
         47:eb:65:b7:4e:27:b3:f6:54:5d:2a:a3:6f:9b:14:3d:30:4e:
         b4:ed:cf:17:77:dd:2e:74:61:8c:78:45:d1:43:8a:04:70:b4:
         1e:f2:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org