Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6ZljlyNrA4dkSJnV0r11rsZJYKI.roa
File:                     6ZljlyNrA4dkSJnV0r11rsZJYKI.roa (raw, json)
Hash identifier:          Zsdb/TnB8C6++GxfzYJyrefg5Om0il2Kvhz0XizZNdU=
Subject key identifier:   E9:99:63:97:23:6B:03:87:64:48:99:D5:D2:BD:75:AE:C6:49:60:A2
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08B526AC
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6ZljlyNrA4dkSJnV0r11rsZJYKI.roa
Signing time:             Sat 18 Jun 2022 03:39:44 +0000
ROA not before:           Sat 18 Jun 2022 03:39:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146089644 (0x8b526ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 18 03:39:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9996397236b0387644899d5d2bd75aec64960a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:85:89:21:e0:78:f6:1f:8d:04:68:8f:d1:
                    1a:99:88:80:7a:8c:af:54:52:93:74:fc:f5:00:0c:
                    40:9c:65:9a:54:6c:22:45:5f:e8:e1:39:9b:6a:fe:
                    47:cd:52:33:9a:fa:01:c0:2d:3f:88:54:35:18:da:
                    7a:63:44:88:aa:97:64:45:f6:10:d5:73:2b:c7:4d:
                    c9:01:49:01:96:d4:9e:8a:d7:05:a8:ae:7d:a8:cd:
                    ca:e3:40:95:d5:87:2e:b0:8e:39:a6:fd:9a:45:7a:
                    2b:73:49:91:53:90:87:d2:53:a0:44:4f:83:b2:5e:
                    7c:66:df:52:27:69:72:3e:0a:a5:83:8a:60:ed:dc:
                    57:15:63:72:26:22:37:23:a9:ff:c9:76:6c:8f:ae:
                    7a:79:64:52:ea:3b:c0:7d:5e:bf:93:3c:ec:12:18:
                    f3:c3:2a:23:12:a0:fc:b6:fd:53:7f:d4:90:40:de:
                    4f:27:ce:b6:eb:bb:40:87:5d:89:41:3b:9e:04:ec:
                    9b:e5:8f:90:28:69:67:a6:74:42:29:cb:5a:a9:0f:
                    9d:24:7b:f1:3f:19:30:35:e6:81:c5:e2:ad:2e:39:
                    3b:c2:f3:cb:a6:7e:40:29:5d:27:43:95:9e:51:eb:
                    13:c7:f9:d3:3c:f8:a7:d4:7d:48:6d:0d:ed:83:81:
                    ce:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:99:63:97:23:6B:03:87:64:48:99:D5:D2:BD:75:AE:C6:49:60:A2
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6ZljlyNrA4dkSJnV0r11rsZJYKI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         4d:74:16:fa:35:3a:c2:60:a6:fd:0c:2e:f3:a6:25:8e:86:01:
         4c:3b:ee:d1:70:08:00:a3:aa:51:b0:13:33:ad:e0:af:77:ef:
         d9:27:31:46:2f:2e:39:f3:7d:61:16:af:f4:51:e8:d4:95:01:
         39:ed:c4:fe:ef:2c:59:a1:4e:98:44:e2:b0:a1:e6:71:fa:04:
         ba:b9:68:86:c9:70:5e:bd:bd:7f:ba:d3:3d:ac:0b:a1:cf:6d:
         24:86:97:63:7d:2a:c3:79:f5:f5:dc:1d:46:f8:ad:e0:31:89:
         d0:04:b4:22:b7:d5:a0:03:3e:e1:23:44:0a:ed:78:1f:58:31:
         96:a3:97:7b:f6:11:65:3b:70:b2:ba:7a:97:af:d7:d3:a0:d9:
         0d:1b:ca:9a:1a:ce:98:b9:ef:91:57:15:f9:f9:0d:3e:6b:3e:
         fa:0d:7d:77:41:70:35:2b:c0:64:28:36:37:fc:99:ef:43:e3:
         98:72:34:67:7b:ec:98:59:ca:92:b2:3b:5e:51:92:6d:1e:eb:
         63:cd:c7:37:96:7f:dc:cf:08:c9:e6:9d:18:62:b9:d8:5b:5b:
         54:d7:9f:6b:bf:50:f3:86:12:2c:75:dd:3d:f1:09:72:d0:28:
         32:21:d9:18:59:15:0d:8b:26:9a:fa:e0:40:33:f2:32:32:9e:
         d4:ed:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org