Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0qRk5PBu_J6EDnkDkqo0fXyzi9o.roa
File:                     0qRk5PBu_J6EDnkDkqo0fXyzi9o.roa (raw, json)
Hash identifier:          bcQSXEEQ/NvwS/RDl5CyO5mUE0zxsCwpKFNMgeFUUCM=
Subject key identifier:   D2:A4:64:E4:F0:6E:FC:9E:84:0E:79:03:92:AA:34:7D:7C:B3:8B:DA
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06F203E1
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0qRk5PBu_J6EDnkDkqo0fXyzi9o.roa
Signing time:             Sun 15 May 2022 03:46:41 +0000
ROA not before:           Sun 15 May 2022 03:46:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116524001 (0x6f203e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 15 03:46:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2a464e4f06efc9e840e790392aa347d7cb38bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:51:6b:06:dc:33:f4:6e:45:72:6b:4a:46:92:
                    f9:e8:bd:e1:89:17:79:01:e4:e0:14:5d:9f:ae:e5:
                    d7:ed:0c:ae:79:cf:f8:6f:a8:3c:f2:14:4a:3d:87:
                    92:a6:75:16:0c:3d:9e:a8:ca:d0:67:25:56:d7:f1:
                    ac:8e:4b:cb:d1:fc:c4:5d:2d:f3:ef:b4:4b:ae:19:
                    31:ba:13:13:5e:56:8d:0e:dd:90:db:a6:1d:86:49:
                    b9:36:ba:44:27:0f:ef:d5:72:32:3d:df:1d:7f:0c:
                    c8:d0:3a:cc:40:aa:6b:37:ef:26:d5:05:e7:2b:9c:
                    ee:76:a7:a2:1f:38:40:23:7d:97:bd:7e:14:90:4d:
                    f0:49:eb:a8:60:29:aa:ce:7c:11:a8:8a:1d:0f:c4:
                    28:59:29:5d:d8:23:a8:6f:0c:54:fb:ab:6f:2b:03:
                    f7:a2:e9:3f:85:91:9b:47:9b:7f:8a:29:b6:22:4c:
                    9f:d6:87:61:e4:78:14:1a:e0:e7:49:04:38:fb:b6:
                    49:32:dc:a3:c0:78:95:d2:22:12:cc:e5:2a:ab:ec:
                    6c:5c:a0:17:29:dd:e1:a3:35:dd:9c:a2:50:e7:7b:
                    30:4c:2c:f0:69:ed:8f:af:79:f7:b7:3e:90:2a:dd:
                    c0:88:02:b6:d2:37:0a:8e:6b:6d:5a:fb:d9:de:e3:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A4:64:E4:F0:6E:FC:9E:84:0E:79:03:92:AA:34:7D:7C:B3:8B:DA
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0qRk5PBu_J6EDnkDkqo0fXyzi9o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:12:47:4c:66:61:67:3f:f3:06:f0:44:f6:40:59:1f:30:e8:
         be:2b:4d:ee:1e:e1:3e:eb:b2:af:47:e8:91:09:94:ce:d9:8f:
         e9:ec:4e:06:0e:1f:75:ad:68:17:e2:9f:f1:69:7d:b7:8c:bf:
         7c:78:23:68:6e:79:e0:39:ed:3c:0b:c6:7b:a7:eb:33:95:06:
         9f:02:25:c9:71:f9:3a:41:e8:93:3e:bd:2d:7c:43:a3:9b:7d:
         f0:e8:41:b7:7c:be:54:8b:70:88:9d:33:5f:d7:e8:f1:0e:e7:
         d8:5d:42:fe:40:11:63:bd:ae:31:ec:28:9a:cb:85:05:f3:13:
         61:01:93:0a:61:b8:20:16:1b:8f:b9:0b:d1:6b:19:74:14:bc:
         e4:ba:9e:72:ac:51:a0:90:2a:ba:73:1e:fd:83:97:da:cd:81:
         18:45:8b:1b:76:12:57:fc:12:59:d9:e9:84:1a:49:fc:4f:a8:
         1e:07:25:89:40:68:0c:09:a1:27:5f:7b:86:fa:88:5e:db:28:
         ce:f8:71:1a:25:6a:3d:1b:63:d5:8c:06:23:70:b9:6b:e8:df:
         70:f0:91:b0:d5:50:65:54:31:a9:af:80:67:94:e5:5c:4e:bc:
         54:91:2a:28:72:d2:b9:d2:0f:84:42:32:64:65:7a:54:0e:b6:
         f5:09:2f:07
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBvID4TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUx
NTAzNDY0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDJhNDY0ZTRmMDZl
ZmM5ZTg0MGU3OTAzOTJhYTM0N2Q3Y2IzOGJkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOVRawbcM/RuRXJrSkaS+ei94YkXeQHk4BRdn67l1+0MrnnP
+G+oPPIUSj2HkqZ1Fgw9nqjK0GclVtfxrI5Ly9H8xF0t8++0S64ZMboTE15WjQ7d
kNumHYZJuTa6RCcP79VyMj3fHX8MyNA6zECqazfvJtUF5yuc7nanoh84QCN9l71+
FJBN8EnrqGApqs58EaiKHQ/EKFkpXdgjqG8MVPurbysD96LpP4WRm0ebf4optiJM
n9aHYeR4FBrg50kEOPu2STLco8B4ldIiEszlKqvsbFygFynd4aM13ZyiUOd7MEws
8Gntj69597c+kCrdwIgCttI3Co5rbVr72d7jh48CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTSpGTk8G78noQOeQOSqjR9fLOL2jAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzBxUms1UEJ1X0o2RURua0RrcW8wZlh5emk5by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIDANBgkqhkiG9w0BAQsFAAOC
AQEAdRJHTGZhZz/zBvBE9kBZHzDovitN7h7hPuuyr0fokQmUztmP6exOBg4fda1o
F+Kf8Wl9t4y/fHgjaG554DntPAvGe6frM5UGnwIlyXH5OkHokz69LXxDo5t98OhB
t3y+VItwiJ0zX9fo8Q7n2F1C/kARY72uMewomsuFBfMTYQGTCmG4IBYbj7kL0WsZ
dBS85LqecqxRoJAqunMe/YOX2s2BGEWLG3YSV/wSWdnphBpJ/E+oHgcliUBoDAmh
J197hvqIXtsozvhxGiVqPRtj1YwGI3C5a+jfcPCRsNVQZVQxqa+AZ5TlXE68VJEq
KHLSudIPhEIyZGV6VA629QkvBw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:21 2025 by rpki-client