Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Eqjgpz5X66wEOFKxzo8pRfAjjLI.roa
File:                     Eqjgpz5X66wEOFKxzo8pRfAjjLI.roa (raw, json)
Hash identifier:          RA1oSHkmKiJ0N62yJ40YsE/6TpKUze5SeqTaAdfJQ/g=
Subject key identifier:   12:A8:E0:A7:3E:57:EB:AC:04:38:52:B1:CE:8F:29:45:F0:23:8C:B2
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04EACC4C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Eqjgpz5X66wEOFKxzo8pRfAjjLI.roa
Signing time:             Thu 10 Mar 2022 16:25:59 +0000
ROA not before:           Thu 10 Mar 2022 16:25:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82496588 (0x4eacc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 10 16:25:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12a8e0a73e57ebac043852b1ce8f2945f0238cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:31:e0:01:4e:25:11:91:99:3c:04:f6:bd:
                    33:e9:97:c3:3a:68:49:66:6f:6f:99:4d:10:ea:be:
                    e5:85:8f:81:16:50:89:2a:5a:7d:73:f3:b2:32:a6:
                    e4:c9:99:57:69:e1:3d:a3:8c:3b:18:45:66:85:23:
                    1b:bb:68:98:9b:cd:a7:54:51:c9:f9:5a:da:24:37:
                    5c:24:9d:62:b3:38:e3:e9:1b:41:81:4b:c0:be:37:
                    e6:2f:ff:e7:d0:bf:1a:5b:58:a9:91:28:36:db:39:
                    dc:f2:e9:48:c5:e1:e4:97:cc:fb:76:7d:8c:8d:b5:
                    84:a9:85:2f:48:57:e8:9f:c0:85:20:68:51:5c:1f:
                    48:c3:93:a0:47:7d:af:65:e9:2f:87:d5:8a:5f:54:
                    ac:e8:73:b2:70:d3:79:8c:af:dd:0a:16:86:af:c3:
                    9c:bf:fd:09:0b:54:e3:ba:65:b8:fe:7e:48:07:7a:
                    5f:80:a4:dc:44:be:17:5a:1b:11:4e:62:3f:c7:b8:
                    d5:19:a9:63:41:c4:4d:1d:f0:4a:73:d3:53:3d:8e:
                    50:ab:d5:6e:b4:af:ce:00:53:d1:77:8d:6d:46:4d:
                    db:1f:62:21:3b:05:3c:a4:4c:78:cf:a9:d6:6a:ea:
                    41:66:8a:7b:70:25:79:d1:cb:18:12:0c:40:3f:03:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A8:E0:A7:3E:57:EB:AC:04:38:52:B1:CE:8F:29:45:F0:23:8C:B2
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Eqjgpz5X66wEOFKxzo8pRfAjjLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:ee:db:17:76:23:cc:61:2b:78:79:aa:a2:51:4e:00:03:
         1a:c8:07:d1:2f:23:c5:30:7a:5c:98:88:22:4e:0d:05:58:d0:
         8d:2f:e0:c0:16:32:81:29:ac:ea:83:08:26:cf:9c:35:38:2e:
         4b:22:4f:21:48:f2:e9:69:6d:4d:10:85:e1:8f:54:f6:5c:92:
         a2:75:5a:e1:61:9a:73:fb:c9:5f:c9:fa:00:67:24:52:99:e5:
         c8:13:a8:11:51:40:bd:11:49:71:12:33:72:75:5d:15:be:19:
         79:39:56:53:e0:fe:2d:5b:27:0a:d2:0d:5c:74:0c:99:fe:51:
         b9:2d:1d:6f:03:d8:99:23:e4:e6:4a:9a:c9:9a:63:41:ac:d6:
         b9:07:b0:f3:c5:dc:b7:e4:15:ea:04:71:02:84:b2:b2:b7:7e:
         59:e3:94:08:35:6d:96:de:22:f2:a8:b3:34:ec:47:21:75:7c:
         ce:97:0f:b1:43:2c:79:a0:6f:00:b3:17:79:9a:77:a4:c9:97:
         bc:90:c2:ce:17:15:9f:de:ff:80:1c:e7:b8:4c:88:f3:07:8e:
         6d:15:f2:ad:8c:7e:4d:21:0f:a9:32:29:32:47:5a:10:bc:ef:
         a1:0b:f7:b3:30:54:b6:9b:4b:2a:c0:5c:03:b4:f9:41:33:23:
         46:13:2a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org