Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DTsLLMiOYjHVpLIrTcr5UNOk5dM.roa
File:                     DTsLLMiOYjHVpLIrTcr5UNOk5dM.roa (raw, json)
Hash identifier:          V0kubN7sZgZmL6TCQb7ybi8JL80rjF9IGwjlEExtvno=
Subject key identifier:   0D:3B:0B:2C:C8:8E:62:31:D5:A4:B2:2B:4D:CA:F9:50:D3:A4:E5:D3
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06CC4A9A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DTsLLMiOYjHVpLIrTcr5UNOk5dM.roa
Signing time:             Thu 12 May 2022 01:28:02 +0000
ROA not before:           Thu 12 May 2022 01:28:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114051738 (0x6cc4a9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 12 01:28:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d3b0b2cc88e6231d5a4b22b4dcaf950d3a4e5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b0:8a:7d:22:7d:f4:0c:6a:0c:19:47:c8:92:
                    f3:a0:49:6c:b1:c7:cf:76:24:d5:82:74:a1:3c:65:
                    d8:3d:b1:b3:a6:74:8e:f1:22:9c:af:e1:ee:e0:2d:
                    8c:65:00:a2:98:e8:7e:95:2f:76:a2:93:53:dd:77:
                    73:7b:26:ce:75:b6:8a:09:08:81:23:08:7b:da:da:
                    14:de:b9:a0:d7:25:dd:b6:f6:81:aa:3c:de:fe:70:
                    5d:d3:5f:40:ab:94:e6:f1:ae:82:da:7a:f7:b5:b2:
                    6d:ad:db:a2:98:b9:23:57:73:90:14:b5:4e:db:70:
                    7b:31:1d:48:d6:16:84:9f:e6:47:2b:8e:85:e2:7f:
                    23:3a:56:aa:81:92:45:d2:bf:df:ac:b4:06:6e:46:
                    a6:5f:d9:10:7e:74:d7:7a:3d:41:7e:59:85:91:7a:
                    a2:1e:30:bb:85:29:4d:cb:fb:de:9b:80:75:d3:cc:
                    cd:e7:48:e2:52:d1:cf:bc:c7:da:cb:7b:5e:ec:b9:
                    a7:3b:af:b2:f3:08:0b:ae:12:0a:b0:87:d8:f1:aa:
                    60:9a:73:17:0a:47:1c:c8:ed:84:59:94:62:bc:0c:
                    ed:44:0d:f2:44:ed:c6:f0:3c:22:8c:89:66:9f:5d:
                    47:f3:70:46:1b:87:b1:41:dd:5f:98:2f:15:5e:7c:
                    3d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3B:0B:2C:C8:8E:62:31:D5:A4:B2:2B:4D:CA:F9:50:D3:A4:E5:D3
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DTsLLMiOYjHVpLIrTcr5UNOk5dM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:ee:4f:63:f6:b5:f5:bf:92:bd:d7:86:a5:4c:f4:4e:d1:
         a8:12:e9:d7:66:68:36:bf:e0:11:40:b7:d8:e6:f5:a8:08:97:
         be:64:f1:61:b0:56:2b:fd:a9:9a:fa:0a:1a:b3:c0:c5:35:7d:
         79:03:98:69:2f:0c:e5:7d:f4:d3:58:50:d2:b2:4e:24:54:58:
         94:9c:6d:30:de:a0:9e:b8:fa:23:db:81:b1:6a:a6:b4:e5:d7:
         bd:91:cc:88:8a:9c:7a:39:77:2d:da:63:52:3b:90:76:42:af:
         14:1d:5d:ce:04:48:cd:2d:be:5f:35:99:ad:ed:6d:d0:5d:26:
         aa:55:81:ef:58:b8:f9:05:dd:c9:8d:d4:ca:5c:3e:18:bd:08:
         cc:36:d8:24:16:7e:2f:61:4b:f0:22:f9:a2:0d:50:ba:a4:43:
         fe:d8:1a:d4:4f:93:43:20:76:21:49:d1:89:55:6c:56:2b:3e:
         eb:29:c1:00:22:c5:98:a2:10:95:e0:c9:43:8e:44:41:ba:86:
         5e:87:0f:14:0a:dc:8f:92:a3:6f:f5:f9:0b:de:e5:7f:2f:99:
         e6:d5:6a:9d:30:f7:a5:d3:9b:7d:00:51:28:c3:73:c4:0a:66:
         fb:26:4e:d7:6f:07:59:fc:ca:22:fb:ba:fb:17:54:5e:29:cc:
         8f:43:f0:9b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBsxKmjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUx
MjAxMjgwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQzYjBiMmNjODhl
NjIzMWQ1YTRiMjJiNGRjYWY5NTBkM2E0ZTVkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI6win0iffQMagwZR8iS86BJbLHHz3Yk1YJ0oTxl2D2xs6Z0
jvEinK/h7uAtjGUAopjofpUvdqKTU913c3smznW2igkIgSMIe9raFN65oNcl3bb2
gao83v5wXdNfQKuU5vGugtp697Wyba3bopi5I1dzkBS1TttwezEdSNYWhJ/mRyuO
heJ/IzpWqoGSRdK/36y0Bm5Gpl/ZEH5013o9QX5ZhZF6oh4wu4UpTcv73puAddPM
zedI4lLRz7zH2st7Xuy5pzuvsvMIC64SCrCH2PGqYJpzFwpHHMjthFmUYrwM7UQN
8kTtxvA8IoyJZp9dR/NwRhuHsUHdX5gvFV58PSUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQNOwssyI5iMdWksitNyvlQ06Tl0zAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0RUc0xMTWlPWWpIVnBMSXJUY3I1VU5PazVkTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIjANBgkqhkiG9w0BAQsFAAOC
AQEAOFzuT2P2tfW/kr3XhqVM9E7RqBLp12ZoNr/gEUC32Ob1qAiXvmTxYbBWK/2p
mvoKGrPAxTV9eQOYaS8M5X3001hQ0rJOJFRYlJxtMN6gnrj6I9uBsWqmtOXXvZHM
iIqcejl3LdpjUjuQdkKvFB1dzgRIzS2+XzWZre1t0F0mqlWB71i4+QXdyY3Uylw+
GL0IzDbYJBZ+L2FL8CL5og1QuqRD/tga1E+TQyB2IUnRiVVsVis+6ynBACLFmKIQ
leDJQ45EQbqGXocPFArcj5Kjb/X5C97lfy+Z5tVqnTD3pdObfQBRKMNzxApm+yZO
128HWfzKIvu6+xdUXinMj0Pwmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org