Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wWYhVYaIY6BHbzjEK25SRe5EHL8.roa
File:                     wWYhVYaIY6BHbzjEK25SRe5EHL8.roa (raw, json)
Hash identifier:          2j4OHGwSgjEskK74NgMgMwmYQ2UdtIp0xzWTxn/SWc0=
Subject key identifier:   C1:66:21:55:86:88:63:A0:47:6F:38:C4:2B:6E:52:45:EE:44:1C:BF
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       074E22F9
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wWYhVYaIY6BHbzjEK25SRe5EHL8.roa
Signing time:             Sun 22 May 2022 00:33:30 +0000
ROA not before:           Sun 22 May 2022 00:33:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122561273 (0x74e22f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 22 00:33:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1662155868863a0476f38c42b6e5245ee441cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:08:39:bc:b8:3e:66:61:ea:4b:64:6b:12:
                    af:31:53:91:be:ff:ce:4e:69:57:6a:b5:87:12:f2:
                    aa:8f:d3:08:71:63:9d:8c:0f:3e:be:64:d2:35:e7:
                    af:c5:a5:c7:18:9f:ea:a3:14:a3:61:58:35:da:2e:
                    60:77:68:ec:a4:9b:26:d7:4f:c8:94:7d:cd:4f:ff:
                    64:26:81:b2:31:c0:51:32:a7:70:f2:86:8a:64:8b:
                    c2:b3:5f:ca:0b:90:99:a2:43:97:9c:1d:12:b9:36:
                    4e:03:b0:f9:01:82:5f:3b:4d:1d:4f:c6:92:72:22:
                    46:81:1e:d9:1a:06:16:76:4c:18:e2:34:ad:bf:12:
                    cb:ea:10:d3:4c:96:50:2a:55:67:74:7a:48:62:e3:
                    1d:21:67:e4:aa:b7:fc:04:c3:52:88:bd:98:c9:73:
                    03:bd:f2:17:25:cf:ee:cd:3f:0b:ed:db:3f:1e:46:
                    a4:77:8b:bc:87:6c:0f:10:b7:4d:8d:f9:0b:71:86:
                    59:fe:18:42:e4:d8:d4:5a:39:b8:7a:b8:3d:5b:2b:
                    ca:ca:a0:9d:91:64:42:0c:d0:28:60:a6:06:ac:07:
                    1d:ef:fc:5e:ef:15:64:ed:27:0f:a1:af:47:06:52:
                    90:ce:4d:57:d0:8d:39:a6:a0:34:6b:95:98:e6:cb:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:66:21:55:86:88:63:A0:47:6F:38:C4:2B:6E:52:45:EE:44:1C:BF
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wWYhVYaIY6BHbzjEK25SRe5EHL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:87:06:de:35:34:ae:3c:e7:9d:c1:9a:b5:7e:80:f0:76:c7:
         1b:fb:3a:d7:e5:b3:79:49:a3:ce:f1:51:a0:1a:eb:78:e7:29:
         96:9f:8b:35:67:a3:da:2b:e5:78:63:95:f8:50:4c:00:f7:a6:
         94:06:6c:c4:66:65:e3:b4:cb:d8:eb:9f:a0:04:73:9c:19:9f:
         66:af:a8:87:07:6e:dd:55:f9:da:0c:e1:54:82:e3:48:93:55:
         e2:f7:de:6b:5a:3a:4f:f3:32:fb:b8:6a:aa:25:b4:e6:59:06:
         9f:49:e1:a4:c0:bc:3c:cc:79:85:ca:3e:94:45:7d:e9:d0:27:
         ac:82:05:54:49:36:09:d9:2e:0d:c4:71:b7:f5:c6:ba:7e:39:
         36:ac:8a:30:30:ac:9c:00:35:fc:38:ba:49:33:1f:64:df:de:
         e0:5b:a4:33:f3:83:c1:9c:50:74:20:9f:8a:3d:40:ce:1e:1a:
         73:da:33:22:d7:ca:39:43:ce:89:b3:8e:22:89:97:15:78:e5:
         0b:d7:fb:80:09:28:f9:19:90:aa:7c:07:85:e7:14:96:2f:4d:
         f6:15:06:2a:2e:f1:b4:67:a0:af:52:3e:d5:61:0f:27:0f:a2:
         df:72:6b:d4:3f:d5:ee:72:2f:00:6e:31:bb:52:10:b1:f8:17:
         d9:32:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org