Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yVCUljlr5MR00QZWSnlyDgMaoMI.roa
File:                     yVCUljlr5MR00QZWSnlyDgMaoMI.roa (raw, json)
Hash identifier:          jfsNulJ3timSbI8ELjNPZpE/lbsFVl8hrJVH42mhJFk=
Subject key identifier:   C9:50:94:96:39:6B:E4:C4:74:D1:06:56:4A:79:72:0E:03:1A:A0:C2
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08258445
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yVCUljlr5MR00QZWSnlyDgMaoMI.roa
Signing time:             Tue 07 Jun 2022 05:41:27 +0000
ROA not before:           Tue 07 Jun 2022 05:41:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136676421 (0x8258445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  7 05:41:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c9509496396be4c474d106564a79720e031aa0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:b3:6c:b6:26:49:d5:f1:ff:c4:0d:a2:4a:
                    5f:73:fa:f1:96:bf:d7:85:50:1b:1a:52:f9:b0:19:
                    70:17:b1:f8:00:e8:50:38:27:26:6d:c3:5a:d5:14:
                    7a:54:a2:a0:84:db:f1:67:6a:87:78:d8:00:2a:43:
                    02:47:d8:9d:0c:7a:95:8f:8d:f7:72:1c:ce:46:be:
                    46:10:0d:8c:ae:76:ce:59:bf:cb:8d:13:8e:88:7c:
                    64:ef:ee:2e:28:b0:2b:5c:18:4b:40:21:77:1e:a1:
                    90:fe:8a:d9:81:42:36:a2:2e:b5:fe:99:84:90:61:
                    d1:23:00:01:bf:fe:8d:43:c6:69:7b:5f:33:dc:f6:
                    2f:ea:79:40:e9:81:b2:5a:53:a1:fc:b2:a5:b4:03:
                    06:6e:f7:e0:91:82:31:1d:0d:57:d9:75:e9:dc:69:
                    80:f9:c9:62:46:57:a9:b7:10:42:06:4d:52:d8:0e:
                    63:cf:96:1f:85:43:40:dd:2e:9e:95:97:4c:d3:57:
                    88:ba:5b:81:4c:80:74:05:81:2f:18:73:db:fa:61:
                    b6:a4:c3:81:08:a7:93:6a:1b:c5:f0:5c:24:6e:2d:
                    a1:59:ec:81:0d:f1:e1:82:30:34:9f:0e:f7:ba:6b:
                    c5:df:36:e1:f0:83:0c:14:49:31:d7:5e:f0:67:c6:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:50:94:96:39:6B:E4:C4:74:D1:06:56:4A:79:72:0E:03:1A:A0:C2
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yVCUljlr5MR00QZWSnlyDgMaoMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:a0:ee:61:c1:76:36:74:02:a3:d8:f2:31:e7:3e:36:21:
         a4:0c:19:f9:97:a1:71:c1:d0:a9:d3:ff:82:04:61:39:4d:a0:
         6f:3e:ed:0e:fd:6f:e8:11:f9:a8:32:e6:c4:7a:fc:f2:a1:32:
         97:89:36:28:25:24:de:0e:f6:1a:f3:20:ac:35:67:12:fa:3c:
         52:9d:3a:f1:5b:0c:32:71:07:47:68:dd:35:47:47:f6:53:8d:
         2d:0e:53:c3:5a:95:e4:bb:2a:17:61:9f:b1:c6:e8:eb:1c:ae:
         86:52:b8:0c:30:df:49:66:ed:71:ab:a8:0b:4c:29:76:f1:9d:
         5a:e0:ee:99:bd:34:93:ae:16:3a:26:48:6d:00:dd:d2:c6:15:
         81:4f:96:df:92:7c:6b:d3:a6:cc:38:e4:26:5c:86:52:6c:d7:
         93:be:4e:51:f3:e5:14:98:5b:42:65:1e:3a:65:86:f7:a4:28:
         18:7b:74:f4:f5:f0:a2:f9:25:a5:5c:ff:9b:cb:5a:bf:8a:fa:
         a0:af:46:3b:28:17:41:29:b8:0d:d3:a8:59:bf:e8:12:33:ca:
         98:cf:d0:32:26:64:e9:52:d4:56:2a:ac:61:77:91:e5:20:f8:
         57:ac:43:36:26:92:32:40:4e:d8:40:34:43:5b:30:75:6a:9c:
         93:6d:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org