Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/uG9e5LXGe5FC6_ml7OGuOziVAxE.roa
File:                     uG9e5LXGe5FC6_ml7OGuOziVAxE.roa (raw, json)
Hash identifier:          xrNtcnzAvS1fXXJ8olK/5DZXLmDAS4ZzlwuHQ7aongk=
Subject key identifier:   B8:6F:5E:E4:B5:C6:7B:91:42:EB:F9:A5:EC:E1:AE:3B:38:95:03:11
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       09DB45F4
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/uG9e5LXGe5FC6_ml7OGuOziVAxE.roa
Signing time:             Mon 13 Jun 2022 16:17:41 +0000
ROA not before:           Mon 13 Jun 2022 16:17:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209372
IP address blocks:        212.69.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165365236 (0x9db45f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Jun 13 16:17:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b86f5ee4b5c67b9142ebf9a5ece1ae3b38950311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:a0:f5:8a:81:6b:a3:c4:38:62:1e:a4:08:
                    f0:95:2a:82:ff:c1:bb:20:60:c1:af:6e:5d:7e:92:
                    ed:d8:ad:78:c1:40:cc:e5:28:2e:a8:21:71:a2:3d:
                    91:3d:90:6e:29:0e:0a:19:2f:5b:3c:36:6a:bc:98:
                    2b:b2:e9:78:90:d7:12:14:10:1d:5b:18:dd:46:7b:
                    7d:a0:fc:32:49:a0:33:26:22:d5:ea:ea:a5:e3:10:
                    91:72:40:cf:d8:95:42:f3:fa:19:1b:05:0b:8b:fb:
                    fe:3d:17:18:32:ad:4f:c7:14:09:f3:80:98:e5:6c:
                    38:bf:be:2b:c0:58:f6:1c:26:a9:8b:a6:2d:6f:a4:
                    b1:e9:59:e9:a2:f8:d8:84:2c:63:8b:fc:b3:d2:53:
                    de:8f:8e:45:d8:4f:14:00:25:e1:05:86:d8:8f:9b:
                    60:d4:9e:12:b2:ec:5a:65:cd:f1:97:73:7e:7f:31:
                    b1:ad:74:00:d8:83:d4:05:27:7c:e6:96:18:d4:fc:
                    9b:2d:93:af:4c:2c:30:0e:7b:6d:a0:e5:dc:48:8c:
                    87:9f:cd:7a:c3:d9:3c:24:40:85:ae:de:f4:22:ed:
                    8b:11:4b:69:70:21:3f:2e:70:a6:35:e7:fc:80:47:
                    e5:8e:ed:bc:7b:82:12:a5:82:3d:02:6e:f7:16:c3:
                    b0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6F:5E:E4:B5:C6:7B:91:42:EB:F9:A5:EC:E1:AE:3B:38:95:03:11
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/uG9e5LXGe5FC6_ml7OGuOziVAxE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.69.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:8c:a8:e9:d5:c5:5d:75:d8:46:0d:84:20:e4:c2:7a:86:b6:
         80:43:c1:b6:df:15:7d:cc:17:3d:01:af:78:c7:63:cc:8a:ac:
         63:d8:92:ea:3e:b4:37:5d:79:20:1a:6f:dc:4e:2f:71:0f:98:
         93:c9:be:df:a7:48:f1:96:7c:03:69:84:5b:a2:a3:b7:0f:db:
         b2:e4:03:b3:90:11:5c:af:54:c5:ba:80:aa:43:3b:40:a0:42:
         85:97:0c:0f:6e:34:3c:85:00:d1:0f:2e:0f:04:6e:cf:60:4b:
         71:da:a3:29:07:96:81:92:5d:4f:19:ac:33:25:19:49:2a:8d:
         5d:6e:4d:82:7a:48:10:fa:80:ca:a8:dc:ec:65:47:d5:69:20:
         69:85:f2:51:66:87:ab:b9:d0:c5:f7:3c:2a:0a:56:71:b5:9c:
         65:d9:67:db:db:81:5c:88:ab:67:cd:d5:d0:75:52:b6:a3:62:
         d5:83:9e:b2:19:f3:d8:0d:d4:7b:8a:c4:29:a6:92:a4:68:47:
         e5:f4:79:64:b3:f1:32:d3:06:4b:55:10:61:c8:33:23:92:67:
         81:fd:0d:58:83:74:72:78:fe:40:05:49:ac:fc:48:00:d3:92:
         fb:d6:1e:e6:a5:da:e5:ad:9e:26:f8:b9:82:34:84:d4:12:ca:
         76:d9:f2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org