Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Wad5G5RVLAXyZ0iTRXa22PpI_Ko.roa
File:                     Wad5G5RVLAXyZ0iTRXa22PpI_Ko.roa (raw, json)
Hash identifier:          2GfjNFSRk9YFuFqljwPgr+3jEQjGkq0HzMJiWsJsMEs=
Subject key identifier:   59:A7:79:1B:94:55:2C:05:F2:67:48:93:45:76:B6:D8:FA:48:FC:AA
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0860BA70
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Wad5G5RVLAXyZ0iTRXa22PpI_Ko.roa
Signing time:             Sun 12 Jun 2022 02:24:02 +0000
ROA not before:           Sun 12 Jun 2022 02:24:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140556912 (0x860ba70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 12 02:24:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59a7791b94552c05f26748934576b6d8fa48fcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:b9:c5:9b:2d:84:e3:67:fe:08:9d:50:a7:
                    89:84:a8:92:c9:17:39:78:dc:ee:ae:1e:fb:55:51:
                    19:66:2d:10:19:7d:4d:25:35:53:80:aa:81:60:40:
                    7b:c9:08:e4:78:77:b3:f5:0d:54:61:ce:11:8b:a1:
                    cd:fe:4d:f5:ac:0e:54:5f:82:16:65:75:2c:10:e9:
                    32:73:b3:95:7b:60:65:e1:36:10:f3:c5:44:f7:1f:
                    87:be:df:f7:f4:47:63:ce:e0:8d:3b:71:89:51:d9:
                    f6:7e:43:3a:d2:98:d8:75:05:94:cc:95:5e:c2:fd:
                    8d:f0:f7:bd:06:5a:48:bd:67:0a:1d:73:7e:30:4e:
                    34:7d:ee:51:ab:a3:aa:8a:af:34:d5:b7:f2:1b:6e:
                    98:ac:ca:ec:37:4d:4d:7e:be:dc:22:47:fe:70:b1:
                    7c:60:9f:81:07:1a:e0:c5:3f:7f:8e:1f:a2:4a:f1:
                    37:75:18:48:2e:a0:c3:31:31:d3:84:62:f3:a7:89:
                    5b:99:40:31:29:fb:c2:d4:67:08:be:a1:19:da:b1:
                    5b:9c:2a:04:e9:61:f2:e5:9e:f6:c9:c5:9e:ef:a2:
                    52:5e:ff:0c:ec:c2:07:8b:fd:4a:1f:ab:f0:af:e2:
                    47:cb:b2:d7:5d:62:87:5d:44:84:f9:b9:b1:91:46:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A7:79:1B:94:55:2C:05:F2:67:48:93:45:76:B6:D8:FA:48:FC:AA
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Wad5G5RVLAXyZ0iTRXa22PpI_Ko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:ba:a7:e1:b7:1d:e8:06:9b:3f:9e:21:83:a6:8d:96:c9:6d:
         a1:81:10:22:9a:fb:ed:a0:7b:6c:74:76:26:98:9d:fb:ee:76:
         6f:8f:b4:7f:9e:e6:a1:1a:fe:4e:72:2f:c6:b6:14:dd:3a:8e:
         db:f4:1e:a1:a0:51:3a:3d:26:17:d1:c5:ab:85:4b:3e:51:b4:
         67:d1:a0:39:91:77:66:ad:05:e2:8a:7e:5e:ea:b6:a6:02:fc:
         a8:b6:4b:eb:2e:9c:bb:43:08:47:16:6c:85:2e:75:1d:ef:b6:
         fe:34:e8:81:58:8b:02:5b:22:de:b5:6b:e9:10:bd:76:4f:3c:
         00:ff:af:78:1a:f3:ec:ca:eb:39:27:16:93:ec:58:31:a3:33:
         b7:e1:d5:d4:ad:f0:9b:f7:02:92:f3:d9:9e:ec:96:b5:2a:cc:
         d2:c1:23:5a:31:eb:69:05:1c:a1:12:a1:3c:84:8f:54:da:95:
         53:47:3e:bf:4f:5b:1d:ed:05:52:62:06:f6:41:b8:24:48:55:
         3c:19:eb:42:5c:e2:96:52:02:0c:28:65:a6:4a:01:4c:a6:7a:
         b4:dc:49:a2:73:1a:a7:03:5d:82:61:9d:3e:ee:68:ca:c3:cd:
         57:75:95:8d:bb:1e:ab:9c:3f:13:d2:7d:ba:97:54:0d:1b:9a:
         17:4b:b4:b3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECGC6cDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
MjAyMjQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTlhNzc5MWI5NDU1
MmMwNWYyNjc0ODkzNDU3NmI2ZDhmYTQ4ZmNhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL9MucWbLYTjZ/4InVCniYSokskXOXjc7q4e+1VRGWYtEBl9
TSU1U4CqgWBAe8kI5Hh3s/UNVGHOEYuhzf5N9awOVF+CFmV1LBDpMnOzlXtgZeE2
EPPFRPcfh77f9/RHY87gjTtxiVHZ9n5DOtKY2HUFlMyVXsL9jfD3vQZaSL1nCh1z
fjBONH3uUaujqoqvNNW38htumKzK7DdNTX6+3CJH/nCxfGCfgQca4MU/f44fokrx
N3UYSC6gwzEx04Ri86eJW5lAMSn7wtRnCL6hGdqxW5wqBOlh8uWe9snFnu+iUl7/
DOzCB4v9Sh+r8K/iR8uy111ih11EhPm5sZFGzX0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRZp3kblFUsBfJnSJNFdrbY+kj8qjAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1dhZDVHNVJWTEFYeVowaVRSWGEyMlBwSV9Lby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCDuqfhtx3oBps/niGDpo2WyW2hgRAimvvtoHts
dHYmmJ377nZvj7R/nuahGv5Oci/GthTdOo7b9B6hoFE6PSYX0cWrhUs+UbRn0aA5
kXdmrQXiin5e6ramAvyotkvrLpy7QwhHFmyFLnUd77b+NOiBWIsCWyLetWvpEL12
TzwA/694GvPsyus5JxaT7FgxozO34dXUrfCb9wKS89me7Ja1KszSwSNaMetpBRyh
EqE8hI9U2pVTRz6/T1sd7QVSYgb2QbgkSFU8GetCXOKWUgIMKGWmSgFMpnq03Emi
cxqnA12CYZ0+7mjKw81XdZWNux6rnD8T0n26l1QNG5oXS7Sz
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:10 2025 by rpki-client