Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zgiwIJ1mpKkVRPu_CFklHpcpmlk.roa
File:                     zgiwIJ1mpKkVRPu_CFklHpcpmlk.roa (raw, json)
Hash identifier:          ry7Xu6hb7a3DoLht5pHUHhiQz1qbdF2K9tkGL0w0RxI=
Subject key identifier:   CE:08:B0:20:9D:66:A4:A9:15:44:FB:BF:08:59:25:1E:97:29:9A:59
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0832281B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zgiwIJ1mpKkVRPu_CFklHpcpmlk.roa
Signing time:             Wed 08 Jun 2022 05:23:02 +0000
ROA not before:           Wed 08 Jun 2022 05:23:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137504795 (0x832281b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  8 05:23:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ce08b0209d66a4a91544fbbf0859251e97299a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:24:c6:f5:48:1c:09:7a:4b:95:82:2a:42:
                    90:58:52:08:30:21:fe:b4:87:96:80:51:a9:10:ca:
                    f1:67:a0:66:34:fc:81:c2:c0:19:ae:4c:69:99:44:
                    0b:07:25:bc:e8:87:fc:e4:de:d4:76:47:45:4b:1c:
                    54:51:e5:21:ef:00:42:5f:e9:2c:70:5e:56:6e:75:
                    93:17:c6:a4:a9:82:68:2c:28:fa:59:5a:9c:81:2b:
                    4f:cc:68:e0:25:c6:29:3c:88:a4:43:9b:ce:41:b7:
                    6b:ec:7a:a3:96:cb:af:62:de:aa:27:9c:cf:e6:c2:
                    79:b3:f1:45:69:1d:4b:49:30:f9:bf:24:c3:e7:d3:
                    cb:eb:ee:6d:7a:1e:9c:cd:6f:e1:6f:09:7c:cc:f3:
                    8a:fa:84:e1:36:6a:b2:6b:c8:4f:e7:50:6b:13:cf:
                    e3:d3:01:d6:3c:ad:ab:57:f3:2f:0f:23:b9:0c:3a:
                    c6:c7:f8:8a:04:d7:18:b4:4e:cf:02:de:b0:90:18:
                    8b:3d:64:bf:02:01:83:ad:91:7d:4c:a0:82:5d:f0:
                    04:a6:b0:2c:c2:df:b9:ab:b6:6d:20:77:9a:0d:5f:
                    13:f4:25:51:22:52:89:f5:d7:bf:01:43:70:4c:90:
                    8d:25:a6:5d:0f:61:c7:6c:d3:02:00:fa:72:c7:26:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:08:B0:20:9D:66:A4:A9:15:44:FB:BF:08:59:25:1E:97:29:9A:59
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zgiwIJ1mpKkVRPu_CFklHpcpmlk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:a7:30:f3:8d:23:7f:89:d5:ac:86:da:18:5e:74:95:51:
         ab:af:03:1f:f4:b0:8c:42:a1:85:09:db:47:06:7b:67:6e:32:
         38:45:ab:f5:a1:57:8f:5a:f6:4f:a0:92:a0:a6:6f:bb:42:0d:
         7c:07:e8:9b:8f:f3:71:c8:f9:ce:9a:44:13:60:6a:05:c3:6c:
         be:88:f3:04:a2:86:7a:3b:89:ef:15:65:96:b7:3d:b5:54:c9:
         a7:ae:d4:59:32:d3:ed:96:a2:a8:80:ec:bd:f9:71:f1:0a:59:
         a3:7d:d6:19:54:13:00:3d:2a:a2:8d:dd:dc:a2:8c:b5:00:7c:
         b6:2a:14:3c:4b:42:84:0c:ce:6b:1c:cc:d0:e2:6d:e7:30:c4:
         38:62:79:97:80:4d:e7:18:ea:ff:4a:7a:32:ae:a4:6b:b7:78:
         8d:e5:4c:e5:2d:f2:2d:d5:a9:e4:7e:ea:59:01:28:68:8a:ae:
         b6:de:94:61:4c:82:70:27:a4:df:b8:f4:e6:37:aa:7e:8f:13:
         4e:55:ef:24:72:10:20:fd:d1:f0:95:de:fc:a1:3f:1b:0d:17:
         de:5f:59:5a:e1:62:1a:ba:ed:2f:f7:22:dd:62:09:2f:35:8e:
         ac:89:91:45:a9:9b:df:1b:bd:30:40:db:7a:51:14:8e:b7:a4:
         76:12:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net