Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MhUGxn2Wve4rQM50iHnCUM08LxQ.roa
File:                     MhUGxn2Wve4rQM50iHnCUM08LxQ.roa (raw, json)
Hash identifier:          1NrcWzZUKtKxwXi+KB8xC5ibCT2/YdinirbgV2XqlZo=
Subject key identifier:   32:15:06:C6:7D:96:BD:EE:2B:40:CE:74:88:79:C2:50:CD:3C:2F:14
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08EF4084
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MhUGxn2Wve4rQM50iHnCUM08LxQ.roa
Signing time:             Wed 22 Jun 2022 16:35:52 +0000
ROA not before:           Wed 22 Jun 2022 16:35:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149897348 (0x8ef4084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 22 16:35:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=321506c67d96bdee2b40ce748879c250cd3c2f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:22:29:b0:8d:d6:06:11:16:a5:88:f5:02:
                    24:a3:97:c2:92:b7:03:f0:9e:ec:05:fc:ba:01:80:
                    7e:2a:e2:b5:cb:e3:41:96:9a:2f:3f:e4:e8:4b:9e:
                    ae:98:bf:f3:05:3a:45:fc:b1:82:64:78:ff:54:79:
                    7e:82:65:49:50:b9:83:1f:99:50:76:53:a6:33:cf:
                    30:e7:6f:39:cf:2a:92:d4:ff:17:cd:fc:fc:7c:43:
                    ca:a1:2a:37:c8:9d:20:ff:38:5d:73:fc:fd:08:63:
                    49:d6:2c:46:a5:68:73:58:3b:c7:28:58:ea:cb:ba:
                    f1:d5:21:11:75:9e:13:9c:b8:7d:80:cb:f5:be:66:
                    04:4e:21:9a:42:2b:87:8b:f5:98:31:04:76:a0:10:
                    66:4a:8d:00:5c:12:21:9b:40:28:db:10:77:b7:31:
                    df:02:f6:2c:41:08:fe:99:24:c0:f3:89:05:f5:44:
                    4b:4c:20:1a:0b:c6:a6:c4:22:59:bf:64:df:0a:6b:
                    91:90:6a:60:4d:85:74:bc:52:a0:a7:86:c9:ba:70:
                    69:5a:7e:25:6d:60:25:84:df:a5:55:58:47:b5:2d:
                    09:2e:52:d8:cf:c8:04:f0:a3:67:03:11:64:dc:41:
                    52:a5:20:c3:e7:c3:1b:90:c5:0c:3d:16:28:ce:c2:
                    58:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:06:C6:7D:96:BD:EE:2B:40:CE:74:88:79:C2:50:CD:3C:2F:14
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MhUGxn2Wve4rQM50iHnCUM08LxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:ac:1b:ac:c2:74:da:51:99:8e:c6:74:c8:05:97:84:d2:f5:
         72:38:7f:2c:c0:0a:26:0e:f2:3b:9f:d9:be:8b:0c:b1:b3:b6:
         33:34:16:6b:1d:83:2c:0d:51:9f:45:a1:b3:c7:fc:b5:a9:37:
         9a:5d:40:33:89:b2:c1:fb:cb:29:2d:88:44:b0:f7:2f:d3:b9:
         f1:91:d0:cb:6c:d8:0b:ad:7c:c7:95:06:a3:65:48:41:ed:67:
         5a:5d:7f:3c:4f:03:49:5b:c5:d8:f7:1b:06:15:64:e7:1f:4a:
         61:0d:c1:ac:95:fa:e7:06:35:f3:fa:2d:eb:92:37:b4:98:05:
         ea:15:c7:52:fb:34:f5:e4:6b:a8:e5:99:3c:5c:e8:7c:3a:df:
         a4:1e:e0:7d:4a:7a:22:71:e2:a4:5e:08:18:18:b3:ba:e9:b8:
         5b:12:e5:67:fc:d8:0f:a3:69:ac:9a:5b:7d:02:41:09:ed:8e:
         ea:40:e2:12:e8:1f:e7:61:e2:ff:75:8c:4f:31:41:f4:26:79:
         87:c6:3c:6d:31:80:b1:b9:58:46:69:ad:a0:c4:e8:b3:f1:ac:
         49:32:69:3b:ba:fd:d3:4b:ff:65:4f:07:07:25:61:79:6e:71:
         b7:ac:e5:c2:9a:ea:c6:4f:27:e5:c1:cf:5e:08:e6:0a:49:ce:
         0b:f9:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org