Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qb9dY8FZPZfL4xKv0829hu1MlfU.roa
File:                     qb9dY8FZPZfL4xKv0829hu1MlfU.roa (raw, json)
Hash identifier:          K/+WIuj/uttWAkJ+FjQDan6DbAI55gWcq5ipWxld0as=
Subject key identifier:   A9:BF:5D:63:C1:59:3D:97:CB:E3:12:AF:D3:CD:BD:86:ED:4C:95:F5
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181EB981CB430C75607C027433949ABEEC5
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qb9dY8FZPZfL4xKv0829hu1MlfU.roa
Signing time:             Mon 11 Jul 2022 04:50:23 +0000
ROA not before:           Mon 11 Jul 2022 04:50:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:eb:98:1c:b4:30:c7:56:07:c0:27:43:39:49:ab:ee:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul 11 04:50:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a9bf5d63c1593d97cbe312afd3cdbd86ed4c95f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:0d:36:9f:54:8a:8a:ad:66:b8:7c:35:03:
                    ae:f7:fa:ef:75:b7:b1:46:0a:38:50:04:23:50:58:
                    0c:1a:ef:d3:66:f9:72:4c:03:dc:d7:6b:bf:b4:78:
                    ce:c3:a8:2c:25:59:25:a3:8b:bf:f3:30:87:b8:22:
                    95:78:5d:44:36:40:fc:f2:03:ce:2a:e0:3e:92:39:
                    12:d2:bc:87:7b:b0:e4:2c:2b:3b:e6:3e:b0:cf:81:
                    19:77:09:44:03:3c:5a:b2:c7:50:4c:70:d1:c5:67:
                    79:e8:c5:1e:f6:2b:2e:62:23:53:46:21:90:46:f1:
                    67:a2:3d:c2:cb:d7:e9:67:81:e9:28:3d:fe:1a:a9:
                    ed:c4:2d:51:3e:e1:9f:fa:24:5a:8b:d2:07:bb:9a:
                    c8:ab:ff:7f:72:9f:0a:b4:de:26:31:0f:31:dc:9c:
                    04:6f:81:c7:31:e3:28:a3:f0:82:1b:92:2c:7b:e5:
                    c7:ff:54:19:02:83:2d:42:78:8e:6e:13:ec:f9:7f:
                    71:e9:ff:7a:65:e2:f0:cf:43:91:d8:cf:5f:3f:8d:
                    14:d6:93:b8:8c:2e:62:9d:f4:54:f0:90:31:74:a2:
                    67:8e:4f:a7:a4:ee:c4:a6:7f:14:cb:13:97:aa:da:
                    b5:79:db:67:86:ad:85:25:c1:fd:ef:b8:63:b7:79:
                    63:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BF:5D:63:C1:59:3D:97:CB:E3:12:AF:D3:CD:BD:86:ED:4C:95:F5
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qb9dY8FZPZfL4xKv0829hu1MlfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:47:e1:91:f6:86:e8:d3:b8:b5:36:52:7b:5c:c9:d6:64:c6:
         3d:91:00:b7:d5:4d:7f:f2:ce:c8:19:02:f1:ad:f8:ea:b2:bb:
         ac:d3:e6:34:3e:4d:04:bd:89:ca:66:0b:c9:91:3e:a6:8a:16:
         2d:07:20:27:fb:30:94:05:e9:23:5b:51:0b:ab:ce:e5:33:9d:
         73:4d:11:1c:ba:22:85:7e:91:ec:7b:39:05:2b:46:a1:b2:f3:
         97:9d:fb:a4:03:ae:c8:96:4e:72:7d:5c:ae:b1:d6:42:06:b8:
         b4:1b:fa:51:cf:2d:e4:45:5f:02:9d:cc:90:15:41:eb:a9:ce:
         41:d8:2a:2a:b8:fd:3e:93:9f:a4:e6:a2:63:6b:f2:00:9c:3b:
         05:83:34:4b:06:20:d0:2b:1d:08:1c:37:bf:e9:1e:f3:52:5d:
         a5:73:fa:0d:7e:72:19:a3:5d:4e:53:ab:6c:d8:f9:b3:b5:b7:
         0a:97:65:7f:c5:a9:39:43:9d:20:dc:d0:92:fe:82:82:57:29:
         93:04:95:49:0d:2a:5e:7d:4a:3c:54:a3:dc:fc:e6:dc:6d:46:
         67:c8:0b:62:b7:e2:a7:da:e2:d7:35:ba:21:bd:5f:87:8d:7b:
         c5:13:40:4c:45:97:8e:bd:66:28:d9:f4:42:1c:02:03:e8:d1:
         ad:0d:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org