Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2kTxoqF5Vz4s_X3a99LB3MvbEas.roa
File:                     2kTxoqF5Vz4s_X3a99LB3MvbEas.roa (raw, json)
Hash identifier:          fc+IX24+VDeaDWH0aW/8D1fy1m13iI0M79ine4MbcNk=
Subject key identifier:   DA:44:F1:A2:A1:79:57:3E:2C:FD:7D:DA:F7:D2:C1:DC:CB:DB:11:AB
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       072D0A7C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2kTxoqF5Vz4s_X3a99LB3MvbEas.roa
Signing time:             Thu 19 May 2022 17:43:29 +0000
ROA not before:           Thu 19 May 2022 17:43:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120392316 (0x72d0a7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 19 17:43:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=da44f1a2a179573e2cfd7ddaf7d2c1dccbdb11ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:55:88:b5:2e:f9:9f:43:6f:34:04:12:38:
                    29:ab:16:90:29:29:66:12:c8:d0:5a:e8:db:23:a0:
                    cc:14:1d:c3:b2:47:1f:3d:ae:bb:a6:37:70:df:35:
                    ba:a1:eb:6c:2d:c9:5c:44:52:73:1d:bd:21:0b:a7:
                    8d:08:82:d2:ee:ac:3e:5c:f8:1e:f4:4c:57:1f:a3:
                    04:45:2c:f6:4f:c2:dc:25:e0:a7:09:6a:ba:21:cf:
                    cd:53:fc:12:b5:e2:22:4d:b0:b4:dd:ac:87:2a:16:
                    55:a1:d3:e1:7f:68:f1:6f:83:07:40:c9:22:11:ee:
                    c2:a7:cd:d3:e7:d9:8b:9c:a3:9b:65:d9:a2:b0:29:
                    37:eb:66:cc:c2:a4:3c:28:6f:a6:6b:36:5c:58:81:
                    89:6b:88:67:ef:7c:5a:33:c4:76:e0:87:2b:82:d1:
                    10:2f:68:7c:3c:f2:4a:e8:0d:37:b5:df:a9:b9:a2:
                    f2:5f:8a:6f:88:3f:14:c3:ba:70:3c:31:3c:de:07:
                    6d:56:1a:df:0c:95:19:2c:68:26:56:25:57:6a:1f:
                    ed:36:fd:fb:57:7b:f3:57:e7:a0:db:f4:ba:28:4a:
                    c1:cf:69:6f:09:5e:0a:00:d0:7b:84:3b:c1:c4:db:
                    16:a9:91:92:98:b2:f8:8c:e0:47:d9:40:73:11:9a:
                    d5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:44:F1:A2:A1:79:57:3E:2C:FD:7D:DA:F7:D2:C1:DC:CB:DB:11:AB
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2kTxoqF5Vz4s_X3a99LB3MvbEas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:60:de:62:59:70:4e:d2:d5:93:1b:e2:e0:83:49:f7:1d:f7:
         93:0a:7d:27:78:f8:6a:44:46:9c:23:01:85:e7:37:fb:43:13:
         e3:7a:2d:0b:11:89:9f:b8:c0:63:7b:b1:98:bd:48:64:c5:bb:
         c7:f8:ec:28:a7:8c:90:9d:3f:1a:7e:e0:04:10:4f:bc:3a:53:
         99:7e:64:19:2e:78:c7:99:1d:2f:ea:bd:c1:17:b7:1c:fe:83:
         43:46:2b:3a:9d:0d:f3:0e:d1:73:d9:07:c5:ba:43:9f:f6:3a:
         5f:d3:24:f1:5a:50:b6:63:69:e6:08:51:9f:5d:73:72:a8:01:
         8e:cc:50:25:1e:3b:60:fc:c2:d1:58:e5:96:c7:e8:d6:8a:d8:
         47:67:2b:ea:98:0d:62:c8:56:2a:b9:ba:72:c5:82:08:f0:ed:
         f9:98:12:1c:7d:e4:2b:30:ae:b8:0a:bc:0b:4d:17:4c:80:6c:
         fc:1d:43:08:90:5e:3b:8f:06:71:e8:1c:0b:33:39:91:fd:c5:
         ab:dc:45:58:7b:07:ac:5b:3b:74:01:0e:e3:a3:6f:a6:f7:84:
         ed:6f:0d:e7:1d:dd:15:a6:b8:d4:2c:13:72:0a:7f:e4:07:7b:
         df:ab:e7:ae:23:7d:3f:2c:cf:6c:73:9a:5a:97:d5:bb:d5:71:
         a8:37:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org