Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/toDP59dzpgbHc7CxAFjmalRZFuM.roa
File:                     toDP59dzpgbHc7CxAFjmalRZFuM.roa (raw, json)
Hash identifier:          ewF5WIkw48DSt4EXLRUlG/wGySN+yYwuaBu0buxi4Ic=
Subject key identifier:   B6:80:CF:E7:D7:73:A6:06:C7:73:B0:B1:00:58:E6:6A:54:59:16:E3
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       099F6241
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/toDP59dzpgbHc7CxAFjmalRZFuM.roa
Signing time:             Thu 19 May 2022 19:38:29 +0000
ROA not before:           Thu 19 May 2022 19:38:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        193.228.48.0/22 maxlen: 24
                          88.218.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161440321 (0x99f6241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: May 19 19:38:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b680cfe7d773a606c773b0b10058e66a545916e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:6b:d6:a3:80:5b:df:94:80:a4:8c:d8:e4:
                    2b:11:59:7e:0e:7a:9c:c6:8b:44:0e:e3:ec:33:ac:
                    ad:41:d6:43:85:9b:b8:fd:42:f5:8c:f0:73:ce:e3:
                    d2:b4:8f:e3:8a:18:e7:54:c4:ea:f1:52:89:fc:95:
                    ac:c2:0d:fd:fa:75:27:f5:db:27:cf:be:fe:18:7c:
                    ca:89:7f:d0:7c:91:d2:bf:d4:72:90:86:b4:4d:81:
                    7c:5e:1c:df:b6:aa:8d:ab:d3:44:0e:69:3e:b9:ac:
                    7f:de:48:90:99:c0:22:dd:a0:0f:3f:f8:7c:e9:34:
                    6d:8a:10:de:0f:8b:ad:c1:6e:c8:00:51:a8:88:6c:
                    89:b9:62:18:e0:8b:18:af:85:18:03:54:17:ee:32:
                    bb:07:12:34:bb:af:d2:a4:2c:64:1d:c5:80:c6:03:
                    ae:bb:45:1e:8d:ed:56:3a:8b:4f:bf:bb:8a:dd:85:
                    bc:d8:90:57:19:05:bb:9d:9b:44:30:a1:a4:2c:f0:
                    8a:d3:a9:ad:c6:14:59:19:75:fc:a9:2c:20:85:8f:
                    ad:d0:28:6f:78:a5:0b:80:e3:78:d7:ac:04:4c:d3:
                    2b:82:28:d4:f2:92:85:54:21:e3:83:cb:af:62:54:
                    a3:1d:4e:47:d1:47:22:6c:90:5e:e3:f6:cf:e5:e2:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:80:CF:E7:D7:73:A6:06:C7:73:B0:B1:00:58:E6:6A:54:59:16:E3
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/toDP59dzpgbHc7CxAFjmalRZFuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.239.0/24
                  193.228.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:3f:ed:7c:62:38:b5:1e:8d:55:1f:3c:b5:11:cb:76:de:3b:
         ba:75:00:74:32:92:b3:fe:6b:09:93:5a:b9:27:1d:12:82:44:
         78:09:df:ad:5b:d0:be:2f:12:81:9a:ac:71:e3:57:f8:e5:51:
         39:ea:da:eb:c8:a4:95:e5:0a:5e:f2:50:04:f0:6e:9d:b5:51:
         6a:c2:71:f7:10:1b:01:34:fb:13:59:c4:ce:8b:30:23:d5:c5:
         b1:f2:70:38:67:2b:00:f3:d5:32:47:ac:3c:8b:2e:11:09:18:
         39:77:33:d9:eb:9c:5b:27:15:80:cd:31:77:9c:8e:b3:1a:7e:
         a9:ee:73:20:0a:f8:8c:b1:15:75:71:94:fe:f9:a8:a0:ea:09:
         55:2e:2e:6c:78:8a:79:de:62:18:3e:c9:7d:25:d3:2f:94:a2:
         a1:8f:6a:ad:91:2d:b5:7b:e7:96:c7:19:3c:42:47:49:31:52:
         83:ea:e4:ac:07:95:7d:ad:3a:e5:5f:51:11:6e:c7:6e:ef:e7:
         a2:5b:2d:cb:26:f3:39:a4:a9:1e:6b:da:0f:0d:b1:d3:5b:8b:
         2c:9f:b2:68:93:c4:f7:27:a6:10:a4:01:42:f8:3a:94:49:df:
         bc:29:49:0c:af:1a:44:1b:52:26:f3:c4:84:40:de:a6:44:ba:
         c3:71:99:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org