Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3OrFZzYZyPXIRkezzkfFc6sAOHg.roa
File:                     3OrFZzYZyPXIRkezzkfFc6sAOHg.roa (raw, json)
Hash identifier:          62/7t5WpsfWAYdXjw2rKdTfd3FhujYV5hQ15+a92qKo=
Subject key identifier:   DC:EA:C5:67:36:19:C8:F5:C8:46:47:B3:CE:47:C5:73:AB:00:38:78
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08C22E04
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3OrFZzYZyPXIRkezzkfFc6sAOHg.roa
Signing time:             Sun 19 Jun 2022 04:17:38 +0000
ROA not before:           Sun 19 Jun 2022 04:17:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146943492 (0x8c22e04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 19 04:17:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dceac5673619c8f5c84647b3ce47c573ab003878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:bd:d0:8a:a3:cf:9a:99:ed:1d:89:d4:10:
                    70:81:c6:8e:05:80:81:aa:fa:b4:48:eb:1f:09:30:
                    a5:0c:0d:c3:06:76:7f:9d:62:36:82:3b:2b:ff:a4:
                    5f:34:2e:58:c8:61:9d:eb:cd:75:cb:4c:71:bd:2b:
                    eb:aa:a5:f2:2a:a8:b8:6f:c7:69:76:80:c3:0e:03:
                    82:de:bc:20:b2:37:80:1d:9c:2b:02:4e:fa:67:fd:
                    a9:ff:2e:7a:54:35:16:5c:83:0d:e1:76:1e:dc:02:
                    26:e7:72:11:d3:53:75:2f:4f:9a:45:9d:07:fd:92:
                    df:46:e2:41:90:f8:ed:7b:cc:1b:c4:43:d2:fb:ab:
                    c3:a8:a4:0b:b5:31:ee:71:28:22:85:cb:6f:56:e6:
                    52:c9:ef:19:ae:12:0e:8c:b8:c4:e5:e5:b4:0e:f1:
                    8a:23:61:94:6a:ac:61:6f:dd:8a:88:e9:bb:21:74:
                    af:aa:21:ac:e8:65:1c:cc:22:4a:a8:a7:a9:98:7e:
                    b9:15:23:88:13:c0:e3:1a:ff:7e:56:55:75:f7:e8:
                    30:0e:ad:0b:e7:9e:c4:36:5a:5f:47:6e:24:c0:4f:
                    09:4b:fb:dc:f3:51:8c:85:d0:92:63:0d:fe:d8:22:
                    c7:4e:14:0e:08:f7:85:2a:e4:ff:cf:1e:59:3e:89:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EA:C5:67:36:19:C8:F5:C8:46:47:B3:CE:47:C5:73:AB:00:38:78
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3OrFZzYZyPXIRkezzkfFc6sAOHg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:9c:5e:16:8e:b7:1a:b4:af:58:31:4e:54:b8:79:a6:72:
         7f:b6:85:96:01:80:0f:48:78:e6:7a:3a:f4:f4:42:b3:58:48:
         18:87:8a:b7:e9:4f:49:2d:38:d5:ca:e9:8e:49:49:26:1c:aa:
         98:33:bc:2e:35:d0:72:6b:de:b6:4d:c7:55:3e:d2:cd:58:4d:
         1d:ed:4a:ab:35:43:75:9b:df:b9:4f:c6:cd:dc:10:e2:7b:99:
         c7:1b:65:5d:35:21:e4:c5:d5:16:69:9c:68:41:4a:9b:ed:cb:
         1c:ed:aa:7e:96:9e:45:d2:a1:99:ee:1d:fa:c9:b5:8b:f3:5c:
         9b:d4:65:7d:fc:6e:a1:a5:36:39:1a:c5:11:d8:00:65:74:c6:
         b8:73:22:a2:59:7e:4e:82:92:24:23:bd:19:ad:61:d4:79:dd:
         00:ca:e4:2f:44:0c:72:7a:cd:f3:84:c3:7a:d5:6c:0d:7e:35:
         c1:9d:04:19:6b:d6:d6:29:67:31:32:9d:66:c2:7b:01:f6:47:
         79:38:65:b3:18:4d:29:a7:f9:52:6e:e4:b5:7d:ad:d6:6e:e8:
         f9:69:1f:01:7a:aa:bc:41:e6:ac:21:de:aa:bd:3b:49:5c:90:
         97:93:bc:9e:a6:67:be:d5:f8:38:80:e0:b7:bf:7a:0f:b2:b4:
         bb:6a:72:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org