Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e20313937363434.roa
File:                     34352e36352e3131382e302f32342d3234203d3e20313937363434.roa (raw, json)
Hash identifier:          uaQySoDNpditmVOIo5kwCr6ZSi7sBH52B6Y5Gzq0lBY=
Subject key identifier:   51:F0:7B:3F:BA:44:0F:4C:D7:3C:65:9B:7B:90:AD:0C:5A:F9:19:59
Certificate issuer:       /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial:       7427244CA800E1B4BFD40DC8289A1E43D59069FC
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e20313937363434.roa
Signing time:             Wed 02 Aug 2023 12:39:31 +0000
ROA not before:           Wed 02 Aug 2023 12:34:31 +0000
ROA not after:            Wed 31 Jul 2024 12:39:31 +0000
asID:                     197644
IP address blocks:        45.65.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:27:24:4c:a8:00:e1:b4:bf:d4:0d:c8:28:9a:1e:43:d5:90:69:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
        Validity
            Not Before: Aug  2 12:34:31 2023 GMT
            Not After : Jul 31 12:39:31 2024 GMT
        Subject: CN=51F07B3FBA440F4CD73C659B7B90AD0C5AF91959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:01:7c:0b:e2:4c:db:d8:a6:0a:1b:b6:5b:
                    8c:67:c7:36:03:1d:af:c3:65:80:4d:de:5d:23:64:
                    c5:f4:e3:65:26:fa:26:86:e5:2f:ed:67:60:36:48:
                    6b:9f:b4:d5:e1:73:41:fe:d6:49:aa:52:02:1a:0e:
                    d8:fa:fa:23:ca:fa:c0:dd:80:12:dc:79:98:d3:ce:
                    3c:ab:4e:b7:78:fc:0b:bc:7c:0c:8e:9f:08:5f:ad:
                    47:06:9a:da:76:eb:06:00:a7:e5:c4:72:ff:d0:2f:
                    05:df:81:25:70:c2:a0:20:66:f8:55:9c:b4:af:c9:
                    83:b2:12:a8:ae:52:38:8c:39:0e:4c:ea:74:41:c3:
                    aa:eb:40:f9:64:54:03:c9:4e:9b:a1:6f:c1:96:7b:
                    4a:e7:ac:f5:3d:27:3f:76:ce:cf:6c:be:6f:a7:b4:
                    72:bd:75:3c:a2:ac:73:38:b2:27:ed:14:c7:75:7b:
                    3f:b1:81:8e:c7:f3:5b:45:56:1a:01:55:00:8f:9c:
                    96:10:a2:ad:dc:18:69:01:fd:3a:20:c2:b4:92:3a:
                    97:64:55:fa:ce:5c:8e:d1:37:e8:73:f1:55:94:07:
                    80:46:58:a3:90:71:0b:99:50:5f:f7:45:aa:65:96:
                    28:19:74:4c:a2:70:36:4a:a3:1d:32:49:93:48:90:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F0:7B:3F:BA:44:0F:4C:D7:3C:65:9B:7B:90:AD:0C:5A:F9:19:59
            X509v3 Authority Key Identifier:
                keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e20313937363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:5d:24:33:7f:0e:83:ac:0a:49:a1:e0:74:5c:5e:60:0a:67:
         8c:01:07:5b:40:64:48:4a:91:84:66:48:98:91:16:93:11:e7:
         d6:36:ba:c9:1a:73:6f:8b:d6:be:7c:d0:e0:17:ec:23:22:eb:
         c3:72:ec:dd:f9:27:66:d4:86:d7:49:45:e8:16:be:96:ff:60:
         4e:56:b1:68:88:63:85:20:57:ee:7c:87:1e:55:31:90:9d:db:
         5b:9b:d0:99:c1:08:05:af:cc:b5:4a:2b:cd:08:19:3e:6b:27:
         6e:45:38:97:76:63:7d:4c:09:8d:09:dd:94:5d:0b:d6:83:e2:
         d7:a5:33:cd:ed:85:9b:85:e1:2b:3a:e8:e9:54:f5:bc:f8:45:
         c8:1f:8f:c0:b9:e5:50:a9:59:79:36:19:e5:fa:5c:50:d9:4a:
         30:c9:27:bb:fd:3e:f4:51:d5:94:68:29:7f:67:cf:f4:e4:8b:
         c8:45:3a:34:83:c6:e6:dd:0a:61:53:14:fc:c5:c3:ee:f9:56:
         f6:23:bb:2a:38:88:c1:b9:39:79:db:2a:e2:e9:43:3b:39:7d:
         e5:29:0c:9f:20:6e:dc:b3:3b:94:62:8e:e6:cb:cd:a8:c4:9a:
         b9:41:3e:e8:19:2b:1f:50:74:99:ba:b7:dc:f5:f8:20:66:16:
         88:07:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:59 2024 by rpki-client on console-ams.rpki-client.org