Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TE6Phq7cfRPIW_tVfKfSc7ZOk-Q.roa
File:                     TE6Phq7cfRPIW_tVfKfSc7ZOk-Q.roa (raw, json)
Hash identifier:          hp5926mJfuhrTaGGK3tw+m9UeoqgDsp1ur0FJhko8u8=
Subject key identifier:   4C:4E:8F:86:AE:DC:7D:13:C8:5B:FB:55:7C:A7:D2:73:B6:4E:93:E4
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0970B799
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TE6Phq7cfRPIW_tVfKfSc7ZOk-Q.roa
Signing time:             Sat 02 Jul 2022 04:59:16 +0000
ROA not before:           Sat 02 Jul 2022 04:59:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158381977 (0x970b799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  2 04:59:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4c4e8f86aedc7d13c85bfb557ca7d273b64e93e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b8:40:70:96:fa:8f:95:fa:54:88:0d:e8:7a:
                    89:6c:14:35:1e:72:a3:2f:de:b4:6e:c8:de:83:37:
                    7d:7a:ab:b3:79:db:fb:34:aa:d5:59:03:16:f6:88:
                    a9:58:ed:10:d4:1c:77:45:2b:81:a1:a8:62:08:6a:
                    19:88:18:40:25:82:d1:e9:be:b2:23:d8:0b:1f:ce:
                    95:21:bb:af:55:c0:a1:09:d4:ee:30:51:0c:36:b7:
                    f6:6f:c1:ae:1d:49:57:59:8f:59:cd:f1:5e:15:40:
                    7e:7b:1c:39:95:93:e1:69:b1:2b:da:2a:18:08:55:
                    c8:62:cc:20:a7:e1:66:79:56:73:8e:b9:8a:7a:08:
                    61:e6:9b:31:f1:5e:61:aa:9b:26:9f:c3:30:2c:c6:
                    10:7e:6f:6f:88:a7:73:da:61:bf:97:34:b2:f6:98:
                    39:32:b7:aa:3b:ec:35:e7:9a:56:b5:52:6b:2a:7d:
                    6d:24:e0:39:70:5a:93:e5:2f:06:c2:93:77:94:7f:
                    4a:66:ae:23:89:69:bf:75:10:b5:7c:5c:f6:8e:f1:
                    8b:1a:28:b9:de:a3:30:ae:56:bc:9b:59:98:21:f2:
                    9d:63:89:cf:bb:7d:01:10:a6:00:51:dd:9b:55:dc:
                    5e:61:13:eb:09:6f:62:17:7e:bf:44:03:c4:75:93:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4E:8F:86:AE:DC:7D:13:C8:5B:FB:55:7C:A7:D2:73:B6:4E:93:E4
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TE6Phq7cfRPIW_tVfKfSc7ZOk-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a0:17:ea:ac:c4:60:da:7a:91:72:03:af:d1:fc:f7:69:13:
         e9:1a:d1:69:d1:25:05:d1:2c:b4:cd:aa:4c:14:23:18:16:5c:
         d1:99:15:08:27:26:7d:a7:75:76:38:3e:5c:3f:62:6f:ad:0c:
         f3:3e:f7:f1:df:81:57:bc:13:8e:fd:d7:1a:09:a1:14:09:c0:
         ef:7c:24:cd:93:41:f4:4c:b3:1a:22:12:05:d5:ac:d9:e9:cb:
         d8:5b:ad:95:5a:1f:3d:e0:ba:81:a2:29:b8:2f:19:cd:eb:4a:
         3c:a6:99:5c:d6:46:48:a3:83:4e:ca:e4:dd:38:34:f7:a7:20:
         b3:1b:a9:87:6d:04:d5:5e:00:ad:f9:29:e3:c4:cb:aa:9e:73:
         dd:48:c4:02:2b:49:27:72:4c:b4:2a:3e:43:d0:82:73:e1:0b:
         5e:75:ee:d1:a5:85:b4:ce:e1:9f:75:fe:25:80:8e:c1:b6:7f:
         b9:27:7c:e6:8d:9a:57:98:7f:73:99:cf:69:1a:2f:41:0c:4b:
         31:cc:44:7a:52:e7:4c:9e:58:ca:6d:e6:b0:c0:1f:a4:17:ce:
         e3:0d:cf:7b:d4:9f:e0:19:97:96:80:c5:e0:66:a7:f0:88:98:
         45:42:f4:9a:13:38:ea:ce:77:f7:05:f4:7a:be:7c:98:73:e5:
         ed:10:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org