Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UDEo_H88Z78ZsMDQAw7E5xGHfzY.roa
File:                     UDEo_H88Z78ZsMDQAw7E5xGHfzY.roa (raw, json)
Hash identifier:          9nIZxp0x8l3zb6dkhsFToLz+zCnzCqOiMIRp7GsfLvw=
Subject key identifier:   50:31:28:FC:7F:3C:67:BF:19:B0:C0:D0:03:0E:C4:E7:11:87:7F:36
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08052133
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UDEo_H88Z78ZsMDQAw7E5xGHfzY.roa
Signing time:             Sun 05 Jun 2022 03:04:20 +0000
ROA not before:           Sun 05 Jun 2022 03:04:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134553907 (0x8052133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  5 03:04:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=503128fc7f3c67bf19b0c0d0030ec4e711877f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8c:45:fd:45:a5:95:89:70:cf:4c:b9:55:f0:
                    9c:de:5b:ab:e5:cf:72:02:4d:a3:e8:b8:bb:69:a1:
                    f4:e3:05:05:2d:b3:b6:d2:42:da:40:24:17:25:4a:
                    43:40:17:b0:61:0f:67:18:5a:db:9d:3a:22:02:4a:
                    f0:eb:68:ec:f4:92:10:0a:34:c1:e6:c8:da:e6:20:
                    10:73:3e:5a:fd:4d:7e:82:d1:2e:e7:e9:72:f5:1d:
                    e3:d1:64:6e:55:c7:c2:5f:1b:cf:a5:4d:e1:26:2f:
                    44:9e:61:d0:0a:c9:dd:d7:6d:27:33:bc:ea:0b:a8:
                    74:b8:02:22:72:16:7e:9c:ba:39:58:17:7c:91:84:
                    30:f0:f0:5c:68:91:a9:8a:d2:71:9c:62:ea:3c:3e:
                    41:ec:f4:3e:f6:b2:22:ed:6b:53:00:87:86:04:65:
                    c4:a6:86:2a:1f:a9:8f:e2:ca:56:c7:42:5d:45:b3:
                    e2:d5:d5:84:ba:8d:44:8d:9f:e4:75:8e:03:56:e0:
                    b9:0b:bf:d7:08:92:3c:aa:d0:37:3a:46:25:ef:85:
                    ea:3f:20:0e:86:8e:2a:e2:75:16:02:fb:10:a6:b9:
                    48:eb:be:48:9c:ce:e1:da:59:88:fe:79:ab:2d:a6:
                    15:9c:60:e8:af:0e:de:8e:c0:dd:f0:bb:d3:19:71:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:31:28:FC:7F:3C:67:BF:19:B0:C0:D0:03:0E:C4:E7:11:87:7F:36
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UDEo_H88Z78ZsMDQAw7E5xGHfzY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f2:ea:79:68:3c:33:11:68:79:75:52:40:2e:81:db:85:2a:
         9e:de:32:85:1a:80:36:77:2b:a7:01:54:01:fd:b3:38:72:7d:
         14:13:bf:b2:65:0d:ed:97:72:cc:2c:fd:4c:25:a6:a2:6a:b5:
         d1:5c:5f:a9:03:9f:fb:d3:bc:95:0d:59:a7:7d:f2:50:56:86:
         39:34:6a:6c:c9:aa:e5:61:c6:85:dd:9f:05:e3:4b:f0:f1:d9:
         59:ce:65:e5:31:3b:03:68:b9:59:86:7f:41:e0:28:5a:14:19:
         4f:e9:42:65:3e:f1:62:99:16:a0:84:66:fc:e5:74:6e:08:75:
         3f:59:68:e7:07:15:e0:ef:aa:8a:7f:d9:ae:64:6f:08:64:ca:
         96:78:fe:5b:e5:62:51:e7:c8:ab:08:bd:9b:87:e9:0a:95:b5:
         5d:d5:88:a8:eb:b1:2e:e6:f5:e9:c1:fb:92:72:3b:62:cf:3a:
         f2:30:18:17:bf:ca:7d:4b:86:4f:84:6f:7f:33:bc:66:7e:e7:
         22:85:2d:34:7e:b1:96:a4:35:f7:43:9f:d3:ee:71:0a:dd:bf:
         40:00:37:9a:08:35:89:26:3b:67:b1:21:ea:ad:8c:79:47:2e:
         14:c9:30:28:64:c9:e0:2f:19:44:70:20:11:1d:91:ed:ee:0f:
         72:4a:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org