Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/N51QMvGx5tkq1jKvGxmOXe4sTBU.roa
File:                     N51QMvGx5tkq1jKvGxmOXe4sTBU.roa (raw, json)
Hash identifier:          XI6s4dnjV3i659MvIYa7bx8010c7bH5Mw9dvcEgBpus=
Subject key identifier:   37:9D:50:32:F1:B1:E6:D9:2A:D6:32:AF:1B:19:8E:5D:EE:2C:4C:15
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       093F8D02
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/N51QMvGx5tkq1jKvGxmOXe4sTBU.roa
Signing time:             Wed 29 Jun 2022 04:19:56 +0000
ROA not before:           Wed 29 Jun 2022 04:19:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155159810 (0x93f8d02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 29 04:19:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=379d5032f1b1e6d92ad632af1b198e5dee2c4c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3e:e3:15:63:24:b8:ff:5e:a2:0c:23:b9:6f:
                    94:0d:a6:f3:f7:b2:52:f4:70:ce:1e:29:a8:14:47:
                    ec:90:77:8f:13:1c:9e:41:31:de:13:68:c6:e0:14:
                    db:2b:75:8b:fe:2a:74:4a:9f:50:2e:ab:ba:c2:c2:
                    98:36:db:78:9d:23:21:8d:9d:cc:50:05:66:d4:01:
                    4b:4e:55:ea:36:85:37:58:4c:0e:db:a3:9e:3a:9e:
                    77:6d:ea:50:2a:3c:77:66:ee:e5:33:5a:6f:a4:87:
                    12:56:1f:be:d0:33:41:8b:2c:63:0f:c5:71:5a:ef:
                    c0:fc:28:5c:23:2c:76:a7:c2:fa:b1:71:69:39:c0:
                    84:3e:2f:49:05:1d:2e:d4:1b:af:9c:49:c1:71:47:
                    22:44:98:0c:06:ed:32:9f:a0:0c:92:6e:4b:95:4b:
                    e1:25:04:97:b9:fb:f0:bf:f3:21:68:ad:55:fc:b5:
                    a8:d4:c1:cb:d6:6a:e0:1e:f7:32:e4:e1:33:1a:98:
                    cd:b7:2c:b0:68:ed:e7:60:91:a5:5a:ed:13:f0:18:
                    f4:56:9b:5f:4a:67:cf:da:b9:90:d4:43:ab:4f:06:
                    18:8c:23:bc:07:63:f0:7d:11:5d:d2:49:ff:ef:79:
                    a6:cf:e9:9e:d2:ea:69:bc:de:a7:f2:77:bb:6c:7b:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9D:50:32:F1:B1:E6:D9:2A:D6:32:AF:1B:19:8E:5D:EE:2C:4C:15
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/N51QMvGx5tkq1jKvGxmOXe4sTBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:2f:9b:94:4d:bb:62:a1:56:b6:46:f6:ba:35:87:c7:36:bb:
         e7:2d:bb:9e:a0:e0:9c:e4:a0:0d:2f:76:d6:dd:9d:a7:6b:cc:
         d2:d7:5c:05:f0:31:b0:53:06:c7:de:36:bd:14:20:29:b1:dd:
         e8:d4:0a:44:cf:ad:51:3f:1b:d2:65:01:3f:68:35:0e:06:49:
         b3:d6:51:09:6d:c1:70:9a:1a:31:25:d9:b7:59:2f:fc:71:5a:
         dc:22:ff:9b:ab:f0:ef:92:7d:35:a6:30:ba:2c:94:9c:68:e3:
         34:db:8b:15:2c:a5:58:8f:43:25:5a:d5:51:b7:a9:31:b5:86:
         77:71:d4:24:0b:3f:34:4b:df:eb:0f:da:c1:e1:2e:75:e5:a8:
         4d:e4:8b:b4:6b:d8:9c:d2:a9:0b:e6:f8:4e:61:38:3d:a4:2b:
         24:20:96:fe:a0:34:b7:ff:14:49:a0:9f:bb:66:cb:f2:ba:e4:
         d6:ce:88:fb:6c:6b:ea:b2:3e:ad:65:01:2b:ce:12:81:6d:db:
         cc:dd:e8:d9:90:8c:84:3d:41:6a:4f:a7:5a:af:70:eb:72:1a:
         1c:f2:99:87:b7:50:07:87:45:39:d5:29:fd:85:12:d8:0f:ec:
         16:e7:91:97:64:b1:b7:f1:9c:c0:f2:e0:f8:92:cb:76:34:f2:
         ad:cd:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org