Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uyR2ZL155OyZh63aWzHpWuAQiXc.roa
File:                     uyR2ZL155OyZh63aWzHpWuAQiXc.roa (raw, json)
Hash identifier:          mglPqIHktNYi1R3KEhraVd0BIoQtxO5k1gHbjJKCFEc=
Subject key identifier:   BB:24:76:64:BD:79:E4:EC:99:87:AD:DA:5B:31:E9:5A:E0:10:89:77
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08BA462A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uyR2ZL155OyZh63aWzHpWuAQiXc.roa
Signing time:             Sat 18 Jun 2022 15:26:44 +0000
ROA not before:           Sat 18 Jun 2022 15:26:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146425386 (0x8ba462a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 18 15:26:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bb247664bd79e4ec9987adda5b31e95ae0108977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:5a:50:af:6e:1c:d1:b3:a6:9a:72:2d:4e:
                    55:b1:61:2b:9d:4d:96:9c:96:5c:92:cc:69:68:6a:
                    fe:9d:c7:b9:e1:b1:be:59:a8:82:1e:b6:a1:09:14:
                    13:a8:c6:67:0b:d2:42:94:39:b5:f8:d4:f1:70:25:
                    5e:76:74:19:46:f3:e7:fb:c9:27:4b:39:d5:64:2c:
                    24:fd:1a:8a:3a:0f:7e:6c:1c:a2:e1:61:59:87:cf:
                    28:d8:a8:9e:a1:19:d2:ff:4a:0d:33:1d:d1:ea:7c:
                    0c:08:63:a6:1f:51:b4:2f:97:b2:ed:89:dd:73:a5:
                    b1:58:64:16:49:63:ac:73:5e:61:fe:81:07:6f:52:
                    92:d7:70:47:35:19:67:0b:f0:d3:8b:8e:12:24:fb:
                    01:77:84:8b:08:68:94:c3:7b:98:ee:af:f5:54:da:
                    57:23:db:62:22:0a:15:79:de:39:d6:70:45:f9:99:
                    5b:ae:e4:b0:db:06:9a:e4:89:e0:47:a8:b4:3d:1a:
                    b5:76:a4:04:e8:09:04:b2:1d:ee:80:09:f5:e5:be:
                    a5:ca:60:67:ee:01:b3:dc:4a:1b:17:f9:2e:d6:be:
                    df:58:ac:88:d6:c4:12:b7:09:6a:b3:cb:e7:bc:21:
                    2f:67:8f:09:c2:4d:f7:84:57:c6:66:03:f7:cc:ed:
                    c6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:24:76:64:BD:79:E4:EC:99:87:AD:DA:5B:31:E9:5A:E0:10:89:77
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uyR2ZL155OyZh63aWzHpWuAQiXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:8f:65:c3:90:b3:39:05:c7:01:01:2e:fe:85:ef:71:35:26:
         2d:b2:d1:2d:b8:80:70:cc:2f:b4:6d:5f:47:74:54:4e:cf:f5:
         4e:55:d0:6d:44:7b:2b:3e:77:ad:b5:9d:20:3e:9a:6d:32:db:
         39:4f:84:fb:23:14:ec:29:f6:69:3c:c2:d0:1a:8a:63:fd:ce:
         5d:2b:e9:d3:9b:e2:4e:9c:77:8e:b1:07:dc:23:fc:b4:4c:8b:
         81:48:cf:b8:4b:6c:24:da:96:90:8f:dd:bd:41:58:5d:da:3d:
         dd:7e:dd:99:5d:98:54:31:b6:2c:79:79:70:dc:2a:8c:b9:b2:
         a0:8d:de:41:63:c9:e2:3b:b7:cc:6d:3d:42:97:91:0b:a0:50:
         d2:90:29:34:93:0e:de:9e:28:83:ee:3e:3e:3e:9f:dd:58:a2:
         22:ce:e8:cb:55:05:07:5f:cd:b3:c3:d3:14:17:c4:d3:88:ad:
         f8:8a:fc:dd:1a:c9:aa:11:56:c1:d6:0c:86:1a:b0:d8:d8:b6:
         8c:7d:a0:d7:d0:1c:70:6d:86:66:91:80:b6:3b:d9:d4:f7:13:
         af:97:3d:cc:41:98:31:50:e1:85:3c:52:f1:06:fd:bf:fa:d6:
         f7:40:ff:d6:2b:7a:59:50:d6:9d:23:82:f3:12:b0:29:70:14:
         14:c1:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:14 2025 by rpki-client