Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BWEVtkNBgn26LF-6o4nNGwEntn8.roa
File:                     BWEVtkNBgn26LF-6o4nNGwEntn8.roa (raw, json)
Hash identifier:          7PkY9GSvvITOrgJN07OBhnx+atP9Bg2Z/Jh0WDwQow4=
Subject key identifier:   05:61:15:B6:43:41:82:7D:BA:2C:5F:BA:A3:89:CD:1B:01:27:B6:7F
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06E4797F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BWEVtkNBgn26LF-6o4nNGwEntn8.roa
Signing time:             Sat 14 May 2022 03:23:41 +0000
ROA not before:           Sat 14 May 2022 03:23:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115636607 (0x6e4797f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 14 03:23:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=056115b64341827dba2c5fbaa389cd1b0127b67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cd:be:6d:32:64:1a:83:01:61:e5:e1:c8:68:
                    0e:32:79:11:87:2b:96:88:c9:0f:73:dc:f5:29:16:
                    13:dc:c6:0d:dd:a6:be:9a:22:eb:da:75:f6:c3:2b:
                    14:ca:59:3c:2e:33:e2:4d:f5:56:b2:79:d5:e7:50:
                    50:8b:ba:78:4e:8e:30:a8:26:b0:72:ee:f2:ef:52:
                    8e:c5:84:2b:c7:be:05:08:f6:73:00:60:e6:4e:d3:
                    7b:1f:67:a1:f9:a1:e4:6c:18:44:16:27:7b:06:8d:
                    9a:e6:6a:db:ba:26:75:cb:30:4d:b4:c5:f3:02:06:
                    d9:06:f7:a6:5e:c4:83:e1:de:b8:ca:9a:d1:73:8e:
                    10:24:14:b7:b6:4f:c3:c9:5c:dd:32:01:49:bd:36:
                    99:80:24:b6:af:55:c9:19:c4:1e:44:6c:82:e9:a0:
                    a9:b5:67:75:45:50:5e:59:f9:a0:ad:2e:79:63:94:
                    ff:8a:9b:cc:0d:5c:8c:7e:f7:b0:05:ee:e3:a4:0c:
                    72:78:f2:00:d0:5c:74:a4:db:0c:5a:0e:e1:a3:67:
                    f0:15:f1:cd:06:eb:78:92:08:70:3e:bc:f5:7a:22:
                    ec:7c:59:20:35:84:dc:ee:63:0e:24:bf:88:b2:89:
                    75:9c:20:11:79:ee:11:7c:33:c0:77:fa:13:23:90:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:61:15:B6:43:41:82:7D:BA:2C:5F:BA:A3:89:CD:1B:01:27:B6:7F
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BWEVtkNBgn26LF-6o4nNGwEntn8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:72:d3:17:f4:51:3c:b7:96:e1:b4:9f:97:5f:65:90:ef:8b:
         3e:75:71:de:93:3e:6d:ed:93:84:2a:fa:58:0e:e6:ad:a5:42:
         5a:9e:4b:31:aa:7d:8d:b1:52:3d:84:d4:c7:ae:37:2a:7b:aa:
         ff:c8:b0:2f:ee:2c:6d:3d:b4:c1:90:dc:6b:ab:ec:2f:97:9a:
         3d:85:8f:75:1a:ca:dd:65:de:d8:fd:69:6b:29:32:ac:cf:a4:
         21:39:a7:76:35:08:4d:ae:5b:aa:5c:a3:11:05:be:4f:fb:6d:
         b2:ee:17:3a:83:4d:47:fb:a2:f9:39:dc:f4:55:85:1b:af:39:
         e0:1d:3c:35:20:64:a5:75:ce:f9:cd:b3:ad:39:a9:86:dd:33:
         fb:d0:3b:73:c3:93:75:ce:79:ca:75:a2:d0:af:86:5b:ef:f1:
         ac:08:62:71:9b:02:5b:b0:42:0b:2f:cf:d8:7b:ee:95:7d:38:
         03:c0:39:92:b1:fd:95:f7:5d:f2:a1:e6:c5:e9:65:40:42:7b:
         e8:36:04:5d:92:b6:a1:04:0c:a1:1d:d3:c7:ec:1a:78:16:37:
         23:e0:28:f4:8c:2d:43:f9:e5:86:59:2a:b1:af:ef:22:77:c9:
         1a:3a:a3:e6:99:6e:a7:5d:60:4b:af:61:de:77:79:0c:d0:cb:
         30:4a:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:27 2025 by rpki-client