Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oeZsBWCQFgAZyl97KhQjVBU1oKk.roa
File:                     oeZsBWCQFgAZyl97KhQjVBU1oKk.roa (raw, json)
Hash identifier:          ivhPr5JycXBVh5YYeqsHKxfW5eStG1KxXBJEpIolFn0=
Subject key identifier:   A1:E6:6C:05:60:90:16:00:19:CA:5F:7B:2A:14:23:54:15:35:A0:A9
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       083FE4EA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oeZsBWCQFgAZyl97KhQjVBU1oKk.roa
Signing time:             Thu 09 Jun 2022 05:46:04 +0000
ROA not before:           Thu 09 Jun 2022 05:46:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138405098 (0x83fe4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  9 05:46:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a1e66c056090160019ca5f7b2a1423541535a0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:b9:cd:ef:0c:4f:ac:93:38:73:34:5c:23:
                    c7:4d:48:17:63:2d:63:ad:a0:87:ca:76:3d:bc:c1:
                    65:fc:74:c4:36:09:d7:fa:73:42:3a:bc:e8:c5:d6:
                    ae:d3:ae:39:9e:97:27:a9:39:6c:88:35:a5:65:1d:
                    2e:b9:6f:2d:44:e8:3f:93:6c:36:ba:99:b9:41:aa:
                    21:38:e0:6d:77:24:39:64:02:c3:ec:76:b1:dc:d3:
                    a6:c4:f9:86:13:bd:d9:be:46:b8:ca:0b:09:36:ba:
                    06:a9:28:b4:81:96:c9:a5:9a:8d:06:29:9f:13:35:
                    87:cd:07:ff:41:93:e4:a0:5e:dc:24:ee:e0:f2:2f:
                    22:00:f8:af:68:5d:31:e6:60:db:2a:4b:c3:27:92:
                    dc:07:4a:fb:e3:1d:33:8f:49:16:f5:3e:4b:4f:11:
                    44:58:4d:a7:9d:f5:12:f8:7d:a6:45:67:6b:0d:bc:
                    5f:64:a9:e8:a5:73:66:1d:1e:f4:d3:ef:13:e4:29:
                    40:76:d5:db:82:1d:e6:a4:a6:52:3a:19:cd:d5:12:
                    79:8e:85:0b:57:e5:22:bc:46:c0:5c:92:81:a0:42:
                    9e:c2:e1:56:92:20:d0:de:f9:6f:e7:fd:89:c0:86:
                    8f:4d:61:5d:bc:a1:31:00:05:0d:0d:db:2e:08:ad:
                    2f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:6C:05:60:90:16:00:19:CA:5F:7B:2A:14:23:54:15:35:A0:A9
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oeZsBWCQFgAZyl97KhQjVBU1oKk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:db:d7:c8:93:a8:4a:6f:29:7e:25:75:78:01:63:88:bb:aa:
         d7:fd:d4:ab:5b:2d:3e:7d:37:86:86:df:ca:0e:91:30:88:c7:
         b3:72:cd:61:d1:ce:b3:0e:ad:ff:9a:08:28:aa:9c:4f:c3:82:
         a4:b9:88:6a:fd:4f:6d:9f:8f:41:bc:cf:a2:45:d5:3f:19:a1:
         9e:77:f7:07:6c:aa:68:07:cd:0a:cf:71:fa:de:50:c6:10:b6:
         39:67:ab:3e:9f:27:28:0c:49:28:70:6f:4f:3b:71:86:c2:66:
         69:3c:09:54:b0:3b:0e:7b:49:9f:01:7e:f3:5b:f3:41:c6:d3:
         e8:6d:ad:ed:73:51:6c:bf:b2:e0:67:6e:85:c9:61:d2:71:ba:
         11:f2:3f:06:82:a2:f8:5a:42:8f:07:94:27:2d:12:64:e2:66:
         3d:1b:10:2c:76:af:c8:8b:65:3f:4a:d1:9a:e8:54:54:b0:85:
         b8:d3:57:44:70:b8:48:0a:00:a6:e0:6d:d9:f9:bf:10:17:d7:
         6c:f3:66:9d:01:54:52:12:ae:73:ce:42:69:5b:1b:15:53:e0:
         55:05:cc:6d:41:35:3d:89:39:93:6e:b5:66:55:52:ec:9a:8b:
         9a:a3:12:28:43:a2:8f:eb:4b:b3:b9:fb:69:05:78:a5:19:cd:
         f7:86:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org