Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FQ7w0m6dSvyCiylANG8d3C62msE.roa
File:                     FQ7w0m6dSvyCiylANG8d3C62msE.roa (raw, json)
Hash identifier:          0kMh6wGsKPajqaZF+SH4tX04yPU6+felb3UwzGlQwZs=
Subject key identifier:   15:0E:F0:D2:6E:9D:4A:FC:82:8B:29:40:34:6F:1D:DC:2E:B6:9A:C1
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04E4B112
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FQ7w0m6dSvyCiylANG8d3C62msE.roa
Signing time:             Thu 10 Mar 2022 02:38:14 +0000
ROA not before:           Thu 10 Mar 2022 02:38:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82096402 (0x4e4b112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 10 02:38:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=150ef0d26e9d4afc828b2940346f1ddc2eb69ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d5:54:c8:9a:5f:c5:82:02:90:a7:c0:64:6e:
                    d5:22:fc:f8:f7:79:f3:a4:46:d0:62:1e:27:39:a2:
                    68:45:81:67:1b:fb:fd:7f:a2:68:09:5e:37:c6:c6:
                    dd:41:25:b1:0b:30:5a:c6:b4:d6:9f:59:06:81:6b:
                    3e:85:16:70:a8:38:16:b1:2a:91:d3:1a:47:e5:7d:
                    6e:37:f5:a5:f1:84:b2:9b:bc:20:75:93:cc:03:92:
                    ca:56:67:44:2b:6b:3d:75:d6:c0:60:e5:31:f0:a0:
                    2a:9d:04:ba:5e:93:03:11:7a:41:7b:21:35:63:a2:
                    f9:86:be:f6:ce:62:0a:5d:bf:ba:d6:3e:47:b2:9a:
                    67:8d:f1:3f:13:dd:43:14:8f:ec:b3:83:f9:e1:02:
                    53:85:85:7c:01:8d:52:3c:09:52:9d:4a:02:9d:05:
                    4b:cc:f9:2a:8d:a0:c4:a3:b5:55:59:af:16:28:c3:
                    b3:88:1f:1c:ce:75:5a:04:1b:56:ab:a7:02:04:c9:
                    b8:70:8f:8e:66:4f:1a:1f:b0:99:40:ae:b7:31:e8:
                    f3:57:df:5a:45:01:18:fe:6f:c2:d0:f4:94:0f:ea:
                    f5:f8:67:10:d4:d5:62:6e:5e:a3:22:8e:8e:62:3c:
                    1f:07:87:00:b0:fb:fb:3e:60:2b:75:df:d8:f5:88:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0E:F0:D2:6E:9D:4A:FC:82:8B:29:40:34:6F:1D:DC:2E:B6:9A:C1
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FQ7w0m6dSvyCiylANG8d3C62msE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         9d:52:a8:65:a0:7c:9b:24:74:91:db:13:e2:48:2c:4c:b1:03:
         7f:26:3c:f4:33:7d:5d:ab:26:94:4f:8f:52:e7:44:8f:b4:a7:
         0d:0c:4f:cc:b5:1e:ab:ee:0c:35:66:e7:54:d9:7d:cc:c7:63:
         c4:01:6a:d6:44:92:f3:b7:e2:c1:83:2a:07:d7:ef:6c:38:6b:
         07:ab:cb:da:41:e4:66:78:f7:8f:cc:34:82:a1:fb:bb:6b:7e:
         bc:2b:9e:2d:4b:3c:71:39:8e:a6:da:43:e7:e1:f8:86:71:23:
         a6:73:ab:f5:01:bd:93:53:e8:76:a6:ac:4f:e5:0d:4c:ed:a0:
         fd:53:5e:92:7e:e7:5a:60:65:91:b0:bc:eb:c7:23:9a:07:4d:
         5a:f2:6d:23:1b:ee:78:f1:aa:e2:f2:e9:90:60:4b:08:82:d9:
         0d:ea:42:e9:81:05:59:a4:9d:16:9c:fe:04:0b:d9:7f:4b:73:
         43:8b:f8:1a:90:81:9e:93:4d:dd:90:53:59:48:42:da:df:a2:
         92:bf:d1:d1:e0:cf:77:12:5a:09:5c:59:95:ae:da:57:61:39:
         1a:ea:5a:b7:78:cf:80:d0:3b:6d:e6:54:a2:e7:bc:bc:85:02:
         e1:2b:a1:58:b1:bf:31:52:c9:a8:c7:f4:1c:ac:ed:76:e1:65:
         52:bc:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org