Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uoRnVooPdRcM6m6bnxKdBTQZmJw.roa
File:                     uoRnVooPdRcM6m6bnxKdBTQZmJw.roa (raw, json)
Hash identifier:          CpqDVxzGyDW7OmofB7rPOk5uuj1GUKszxC9XdnS9F8U=
Subject key identifier:   BA:84:67:56:8A:0F:75:17:0C:EA:6E:9B:9F:12:9D:05:34:19:98:9C
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       076023AC
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uoRnVooPdRcM6m6bnxKdBTQZmJw.roa
Signing time:             Mon 23 May 2022 05:27:29 +0000
ROA not before:           Mon 23 May 2022 05:27:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123741100 (0x76023ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 23 05:27:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba8467568a0f75170cea6e9b9f129d053419989c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:4c:1d:59:be:e2:eb:6f:a0:eb:3a:00:e4:
                    98:94:f3:cd:aa:a1:9d:14:09:eb:5e:6e:ae:f8:cd:
                    dc:ca:ec:1c:74:e5:e1:d0:64:8b:cb:9c:80:50:3e:
                    0a:d2:ce:fc:f3:fc:7f:11:7b:b5:9a:f4:64:35:c3:
                    fb:08:51:13:21:c8:1b:c2:58:1a:b7:39:44:ab:4d:
                    35:1e:77:12:27:95:a2:72:05:3c:66:6f:5f:ec:94:
                    09:9e:d5:44:70:45:f5:b6:9b:fb:5e:b0:6b:39:4e:
                    a1:9a:54:93:37:dc:75:0c:b4:54:d1:4a:d3:d5:66:
                    b2:20:1a:0c:29:58:32:50:40:2d:0a:9d:99:56:0c:
                    f8:31:f7:31:a0:e5:15:66:4b:19:94:e8:92:3c:9d:
                    a4:ab:3b:c7:72:7e:89:07:e3:39:0c:33:33:9c:c8:
                    41:d5:a1:4b:10:fb:d1:13:d7:af:f3:6e:a0:ea:66:
                    cc:e0:2f:a4:72:ae:e6:ee:56:32:8f:a1:94:11:6f:
                    6c:db:13:1b:74:a8:e8:4c:25:21:c2:d8:c1:8d:31:
                    b6:a0:99:67:23:aa:5b:2d:36:63:ca:8a:a4:9b:36:
                    05:07:44:ff:9c:07:38:fe:ed:7e:9c:c8:00:0b:64:
                    0a:3a:ff:be:ee:e7:5e:ed:4e:62:fd:d6:af:c5:58:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:67:56:8A:0F:75:17:0C:EA:6E:9B:9F:12:9D:05:34:19:98:9C
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uoRnVooPdRcM6m6bnxKdBTQZmJw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:d9:43:08:b8:f9:9c:e0:11:72:a4:52:e1:f4:fe:27:64:a3:
         fa:44:12:96:1e:c9:23:ad:72:b1:e9:69:26:d8:2b:61:5b:82:
         a5:a8:7a:b4:5f:8e:92:22:f0:4c:fa:40:1c:d5:da:17:24:a2:
         43:7d:92:f2:0d:0d:11:f2:70:16:85:45:53:f4:33:76:5d:2c:
         97:9c:8a:92:e1:cc:95:3e:6a:0b:0b:b4:ed:e2:cb:bc:ae:b5:
         c0:91:90:29:16:0a:df:a6:d1:43:c2:ec:b0:38:2c:45:59:45:
         8f:aa:26:b3:88:6b:3d:cb:f8:36:b5:60:5f:cf:6b:dd:75:14:
         5a:c0:56:f3:fd:ba:f3:c6:97:68:59:af:8a:be:1c:ae:92:90:
         94:dd:81:7e:41:d4:48:30:ac:50:a0:55:6c:ed:c3:59:0f:6d:
         b2:9f:2d:3b:74:2f:5f:06:7d:5e:ca:1f:c6:93:38:05:ae:44:
         dc:18:ab:e1:2b:db:e6:3d:34:90:4e:a8:ea:75:b8:22:2d:a2:
         7a:6a:41:87:3b:6d:f9:d3:af:4e:ed:04:c9:99:d1:08:c7:41:
         4e:ba:ae:f8:f3:a1:d0:ad:10:ba:f5:ef:a1:f5:db:c0:f1:8d:
         80:aa:d2:ad:7d:a1:c0:ee:c3:f5:2a:75:03:2e:8d:ac:f1:59:
         ec:d4:38:35
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB2AjrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUy
MzA1MjcyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmE4NDY3NTY4YTBm
NzUxNzBjZWE2ZTliOWYxMjlkMDUzNDE5OTg5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKN8TB1ZvuLrb6DrOgDkmJTzzaqhnRQJ615urvjN3MrsHHTl
4dBki8ucgFA+CtLO/PP8fxF7tZr0ZDXD+whREyHIG8JYGrc5RKtNNR53EieVonIF
PGZvX+yUCZ7VRHBF9bab+16wazlOoZpUkzfcdQy0VNFK09VmsiAaDClYMlBALQqd
mVYM+DH3MaDlFWZLGZTokjydpKs7x3J+iQfjOQwzM5zIQdWhSxD70RPXr/NuoOpm
zOAvpHKu5u5WMo+hlBFvbNsTG3So6EwlIcLYwY0xtqCZZyOqWy02Y8qKpJs2BQdE
/5wHOP7tfpzIAAtkCjr/vu7nXu1OYv3Wr8VYCr0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS6hGdWig91FwzqbpufEp0FNBmYnDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3VvUm5Wb29QZFJjTTZtNmJueEtkQlRRWm1Kdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIjANBgkqhkiG9w0BAQsFAAOC
AQEAqtlDCLj5nOARcqRS4fT+J2Sj+kQSlh7JI61yselpJtgrYVuCpah6tF+OkiLw
TPpAHNXaFySiQ32S8g0NEfJwFoVFU/Qzdl0sl5yKkuHMlT5qCwu07eLLvK61wJGQ
KRYK36bRQ8LssDgsRVlFj6oms4hrPcv4NrVgX89r3XUUWsBW8/2688aXaFmvir4c
rpKQlN2BfkHUSDCsUKBVbO3DWQ9tsp8tO3QvXwZ9XsofxpM4Ba5E3Bir4Svb5j00
kE6o6nW4Ii2iempBhztt+dOvTu0EyZnRCMdBTrqu+POh0K0QuvXvofXbwPGNgKrS
rX2hwO7D9Sp1Ay6NrPFZ7NQ4NQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org