Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Jj4vwUr_rWBIIzVuKIWEj8HLfOg.roa
File:                     Jj4vwUr_rWBIIzVuKIWEj8HLfOg.roa (raw, json)
Hash identifier:          a/5Uqa0KbPAVFRdGuzN4OA9Alpw9Bz9Km6KU+fklnRo=
Subject key identifier:   26:3E:2F:C1:4A:FF:AD:60:48:23:35:6E:28:85:84:8F:C1:CB:7C:E8
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08D807A3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Jj4vwUr_rWBIIzVuKIWEj8HLfOg.roa
Signing time:             Tue 21 Jun 2022 02:06:44 +0000
ROA not before:           Tue 21 Jun 2022 02:06:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148375459 (0x8d807a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 21 02:06:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=263e2fc14affad604823356e2885848fc1cb7ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:34:14:46:a9:17:e7:6a:80:d1:db:61:3d:
                    2f:34:fa:0d:7f:ce:b5:dc:bd:30:d0:bc:10:8b:19:
                    51:37:a9:ee:d0:72:bb:62:9a:e6:64:fc:a9:7e:e9:
                    16:bb:18:c8:d6:2d:55:74:a3:70:65:06:45:91:ef:
                    8e:32:64:9f:51:ad:77:e1:49:98:39:8f:0e:70:36:
                    41:87:9f:85:43:00:cf:5a:25:a7:ca:a5:36:35:38:
                    66:56:b9:49:db:49:4b:36:b3:71:c8:25:24:04:2b:
                    9f:cb:63:93:0a:d2:a1:0e:6c:ad:65:65:48:eb:93:
                    3e:ac:1a:75:66:01:8c:17:39:15:7e:97:57:7f:2e:
                    83:e1:3e:3f:e2:39:af:4e:ca:0d:56:f0:c3:f3:cf:
                    91:83:d6:bb:7c:46:78:35:1e:bd:e6:f5:a1:90:75:
                    24:5d:36:2e:25:f7:de:b4:8a:2a:fa:e9:1b:16:e8:
                    b3:6a:28:a0:f5:cd:f9:ee:43:61:e6:fa:6f:ac:b3:
                    de:43:94:cd:c9:1e:12:97:73:91:37:8b:fb:91:9e:
                    42:5d:d7:33:e6:70:08:e4:05:d3:06:f0:ad:6b:20:
                    0f:da:60:7c:83:9f:79:7f:74:6c:f3:13:64:ab:01:
                    be:27:7b:75:6e:c0:bd:b7:fa:75:81:ee:1d:f7:1d:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3E:2F:C1:4A:FF:AD:60:48:23:35:6E:28:85:84:8F:C1:CB:7C:E8
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Jj4vwUr_rWBIIzVuKIWEj8HLfOg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         86:a9:32:5d:c3:ee:12:16:aa:7d:58:58:16:ce:a0:db:63:5c:
         4a:90:c3:c6:2d:2e:d3:d7:8f:2a:97:37:70:6d:75:be:a5:85:
         5f:56:ea:c7:80:72:7d:5e:ef:c7:c6:ee:04:65:b3:f9:3e:c8:
         71:8f:2d:3c:9f:77:2a:b1:47:85:82:96:29:e8:36:3c:0c:c8:
         2a:cf:fe:a5:49:b2:15:1c:f6:29:fb:2e:8e:67:6c:60:ba:63:
         17:29:16:ff:7a:e4:08:a5:92:41:9a:f2:d8:ab:5f:16:0e:83:
         f0:61:f2:ae:ad:82:66:6f:47:36:70:84:42:f8:1d:48:88:68:
         f5:51:82:93:5b:23:37:b1:12:a0:b1:72:de:32:94:ea:95:42:
         21:ad:e0:a6:1f:74:7b:b3:e4:91:b6:6f:3f:11:d4:e6:c1:b2:
         9f:1d:79:1a:84:7d:0a:7a:e9:35:9c:06:83:9d:30:1b:30:22:
         12:c4:9c:2b:19:b6:d6:10:c8:e2:a1:1b:14:6a:e9:4e:30:03:
         db:78:33:59:51:31:24:2e:a8:2e:07:99:c5:8a:bf:c9:9a:db:
         9d:5d:ec:ee:9c:11:d3:fd:76:ab:05:46:aa:22:2e:0c:a9:a9:
         da:9b:b6:bc:9e:99:9f:b7:28:14:b2:f1:06:3b:22:13:fe:80:
         67:09:f8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org