Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/POpczUvZXfsC3x8VNmgwdEpMYvA.roa
File:                     POpczUvZXfsC3x8VNmgwdEpMYvA.roa (raw, json)
Hash identifier:          MLYUj+3gUU00GgSufM42KeSlBtzZeuVfgbK39pWiAts=
Subject key identifier:   3C:EA:5C:CD:4B:D9:5D:FB:02:DF:1F:15:36:68:30:74:4A:4C:62:F0
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       070AB489
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/POpczUvZXfsC3x8VNmgwdEpMYvA.roa
Signing time:             Tue 17 May 2022 05:49:29 +0000
ROA not before:           Tue 17 May 2022 05:49:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118142089 (0x70ab489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 17 05:49:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3cea5ccd4bd95dfb02df1f15366830744a4c62f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:54:8a:b1:d4:99:ef:9b:e5:18:e5:ec:53:
                    23:fa:b5:87:da:e7:2f:f2:03:e6:a6:4f:70:3a:ce:
                    12:7f:3b:0e:15:da:94:8c:0b:ff:c9:14:2e:3a:2d:
                    27:8b:10:d2:81:60:3b:d9:7d:f8:2a:b4:36:5d:ca:
                    c0:1e:20:03:d2:f7:80:08:71:8c:4f:de:f9:9d:68:
                    77:03:b4:a3:93:e2:5c:16:9b:d5:65:37:e5:71:86:
                    e3:02:de:52:9b:fa:26:43:e2:3b:18:48:78:4e:0f:
                    93:52:fd:f8:fd:cf:53:c0:fb:18:a8:e9:cf:2b:0b:
                    31:98:9e:90:91:f6:8e:e0:5b:07:92:70:8f:eb:2d:
                    94:ef:ae:bf:90:3c:e9:22:6b:50:81:41:1b:9a:93:
                    98:47:25:16:e0:07:71:70:54:cd:3c:aa:c9:66:e2:
                    12:22:6f:a6:9e:99:4a:68:96:8f:de:33:ab:ee:61:
                    3a:e3:07:f2:56:48:9e:e6:3b:6c:94:69:c3:e5:fb:
                    31:b9:8f:0f:a0:6e:8d:49:42:2d:3c:d1:ad:79:8e:
                    59:5d:03:b7:fa:09:0c:32:ed:6c:2e:f6:46:51:15:
                    15:d9:0a:7c:69:0c:3a:fd:13:dd:6c:a2:04:dc:6b:
                    41:1d:61:89:0b:4e:2b:82:d1:8c:23:03:e8:be:f5:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EA:5C:CD:4B:D9:5D:FB:02:DF:1F:15:36:68:30:74:4A:4C:62:F0
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/POpczUvZXfsC3x8VNmgwdEpMYvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:e6:65:68:5b:b1:ea:87:c6:54:1d:f3:2e:67:7e:e4:55:
         cf:80:61:28:f9:a5:b0:6b:0f:54:a4:b6:18:8a:f8:59:34:9a:
         62:40:02:78:80:3a:6d:3d:49:8b:92:f3:8e:4a:f1:f8:a6:83:
         61:c8:89:58:6a:a9:e5:73:77:80:41:5f:32:b5:8f:6d:23:c9:
         33:49:2d:8b:75:57:98:bc:b7:12:36:40:cc:9e:34:1c:a5:22:
         4c:a3:c3:45:16:26:7f:c3:73:be:0f:4d:11:20:5d:81:fe:ec:
         12:19:09:55:e7:a1:c2:01:d1:ae:f8:9e:3c:89:79:c6:ca:4e:
         82:8e:73:fa:55:00:cb:3d:78:31:ac:a2:3f:c9:10:89:c8:3d:
         91:b1:e8:c4:b0:ca:b9:a4:55:46:37:f9:ad:8c:8c:63:9b:3a:
         6c:bf:c3:ed:e2:06:83:29:8d:03:47:eb:14:7a:1f:a7:83:6e:
         61:fb:8a:92:98:77:a8:ef:29:e3:15:b0:4d:8d:7e:cc:17:be:
         c7:53:e1:b8:78:36:0d:fa:63:14:b9:e7:61:5c:a7:11:5a:40:
         72:1a:37:2f:9e:b2:f2:b5:37:ca:ef:ca:df:b5:9e:e9:32:c1:
         35:1f:c7:19:e3:ae:80:a9:79:fa:7a:90:d5:da:6a:e3:af:00:
         bb:04:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org