Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WUdpq4T4aWTG3QVsdAS-5zKe5Jk.roa
File:                     WUdpq4T4aWTG3QVsdAS-5zKe5Jk.roa (raw, json)
Hash identifier:          CYlfPkED6ASHzCmpAI/718H/wOs+G9HwWUalGVqkhxo=
Subject key identifier:   59:47:69:AB:84:F8:69:64:C6:DD:05:6C:74:04:BE:E7:32:9E:E4:99
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0666E944
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WUdpq4T4aWTG3QVsdAS-5zKe5Jk.roa
Signing time:             Sun 01 May 2022 15:08:02 +0000
ROA not before:           Sun 01 May 2022 15:08:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107407684 (0x666e944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May  1 15:08:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=594769ab84f86964c6dd056c7404bee7329ee499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:10:d6:a0:e0:55:73:a7:14:1b:71:e4:43:1d:
                    2c:a9:eb:55:45:2f:36:08:1d:7a:e2:cd:82:04:dd:
                    1e:86:e0:85:0f:db:7b:66:04:60:46:86:ce:fb:ac:
                    8c:0b:f4:78:fd:4a:b0:de:e7:f2:18:d3:29:00:e8:
                    b9:10:c7:65:b6:61:56:86:c1:a2:e7:b3:60:56:db:
                    bc:6e:f2:22:6c:18:98:66:23:b6:52:37:49:2e:41:
                    57:a0:00:92:0d:94:92:4f:e3:d8:3d:c2:06:b2:ea:
                    41:1d:b0:d7:2f:62:5c:df:f1:ca:e3:7c:79:d0:15:
                    e0:2a:80:82:a1:85:de:59:28:56:3a:74:06:70:dd:
                    02:e8:58:32:23:9c:75:6a:a1:2f:1a:02:e6:7e:21:
                    4e:ca:68:04:57:40:cd:58:e5:35:2e:c4:fe:65:4a:
                    8f:a5:df:aa:8a:d6:33:f6:4b:8f:98:55:38:ae:40:
                    d1:f3:96:40:bc:8c:bd:56:b1:9f:ac:ec:cb:70:bc:
                    e3:1c:82:d5:08:05:95:78:d0:63:27:32:91:b4:8d:
                    42:63:22:8e:ef:0c:11:b8:81:10:cc:e3:9f:c3:94:
                    79:21:70:19:1a:38:73:d9:77:c3:57:da:9b:bc:16:
                    48:89:02:22:bf:c4:31:ae:c8:99:d7:a2:ab:48:5b:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:47:69:AB:84:F8:69:64:C6:DD:05:6C:74:04:BE:E7:32:9E:E4:99
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WUdpq4T4aWTG3QVsdAS-5zKe5Jk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         ab:55:5d:28:8b:62:c9:e5:ca:d6:9b:15:2c:63:11:69:aa:00:
         df:0d:76:1f:54:99:6a:21:7f:4b:86:8e:5b:a2:93:c5:4e:97:
         66:6b:16:27:5b:e1:44:1e:55:34:77:fd:da:c5:7b:05:a7:4a:
         e7:2e:64:a0:11:2d:4e:a0:44:c3:27:5b:08:98:b2:9d:ae:d8:
         eb:31:5a:d0:2e:35:6f:a6:a9:fd:06:78:79:9d:49:1a:6c:a3:
         05:e6:e2:63:6e:64:73:77:00:51:40:5a:ae:4c:fc:44:19:db:
         0e:0d:5b:4b:1d:5e:2c:ca:6e:8d:ab:a3:4b:2d:7d:f9:47:de:
         7e:3e:ad:c5:27:2c:e4:ca:7a:75:d7:be:dd:2d:5d:ce:af:a0:
         a3:b9:5c:d2:d8:de:a9:2c:7c:f4:db:12:24:e2:23:58:b8:73:
         c3:ef:e9:e7:12:db:8b:ec:54:d3:76:fd:f5:99:bc:49:64:b3:
         eb:fc:e3:ea:5d:06:68:b2:42:2d:67:a4:c2:e2:43:fc:e7:bf:
         1d:cc:e5:61:8a:8e:5d:76:12:ec:9e:04:81:90:65:cf:39:f7:
         63:73:98:fa:08:ad:47:b3:f8:3a:04:1a:1d:2b:14:56:72:29:
         28:f1:d0:7d:9a:dd:f5:19:b7:ec:a7:02:ad:2f:83:6e:ef:93:
         e1:c7:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org