Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS199565.roa
File:                     AS199565.roa (raw, json)
Hash identifier:          gigbbGZqJAazB8Sb0pp3m0W5T/5cHa3y2ZI2FAn/9oQ=
Subject key identifier:   1D:14:93:0A:05:2C:73:EC:63:7A:89:68:D2:4D:E7:9D:2E:56:53:96
Certificate issuer:       /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial:       75668AB37198FF66161540D4E08100ED29FF1CC6
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS199565.roa
Signing time:             Tue 06 Jun 2023 09:25:58 +0000
ROA not before:           Tue 06 Jun 2023 09:20:58 +0000
ROA not after:            Tue 04 Jun 2024 09:25:58 +0000
asID:                     199565
IP address blocks:        178.254.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:66:8a:b3:71:98:ff:66:16:15:40:d4:e0:81:00:ed:29:ff:1c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
        Validity
            Not Before: Jun  6 09:20:58 2023 GMT
            Not After : Jun  4 09:25:58 2024 GMT
        Subject: CN=1D14930A052C73EC637A8968D24DE79D2E565396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:d8:4d:fb:0d:0d:a9:18:f0:59:05:1d:d2:
                    39:88:ad:aa:20:ca:c0:28:8f:aa:8c:31:29:8f:bf:
                    b0:40:35:b8:7b:b4:96:07:b5:1e:74:db:7d:33:c0:
                    01:a0:bb:f1:6e:73:a2:c2:f0:c4:ac:8c:0b:6a:6e:
                    9f:47:7d:15:c8:14:e8:2d:e4:b5:42:4c:eb:43:a5:
                    6e:5b:78:c4:eb:95:d2:9d:9d:67:d3:b0:81:47:94:
                    8a:c6:ba:f9:a7:58:83:f3:f9:51:b5:64:f4:6f:5c:
                    6f:f7:d5:39:a0:12:fc:9a:c8:01:b8:82:05:ca:fe:
                    29:30:69:d9:f5:d8:4f:9a:b8:f2:e0:7d:0d:20:44:
                    97:eb:82:ae:6a:d9:5e:24:ff:da:12:99:6f:2a:0d:
                    dd:8f:6f:91:fe:fd:e3:65:ba:24:f0:fa:61:93:44:
                    f2:f8:b3:56:13:c9:9d:f8:f3:81:f2:57:74:b4:05:
                    53:96:39:1d:4e:be:60:c7:8f:10:77:20:40:d5:3a:
                    4a:bf:45:0b:ef:5e:a1:79:e3:78:31:fd:14:6c:3f:
                    13:48:f8:d7:64:b0:56:5f:af:08:60:6f:dc:36:82:
                    e3:c8:27:11:fb:d0:73:86:fe:e2:1d:7a:4a:77:60:
                    e2:e2:c6:80:61:b1:41:f9:c2:7a:ab:50:5c:56:a4:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:14:93:0A:05:2C:73:EC:63:7A:89:68:D2:4D:E7:9D:2E:56:53:96
            X509v3 Authority Key Identifier:
                keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS199565.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:f4:9d:de:73:8e:34:25:3a:73:e9:35:73:bc:15:1e:e1:
         41:ea:96:89:37:7d:24:d5:3d:dd:a2:1f:04:69:60:d9:42:2e:
         b8:65:71:d5:f9:f9:96:a0:9b:1c:d9:61:67:c6:1f:1f:69:24:
         87:90:0a:10:f0:44:08:a0:43:1d:f6:a8:5d:0e:6b:9b:62:a4:
         d0:87:b2:6d:8f:34:d0:52:d3:74:18:c9:ef:9b:9a:fa:94:43:
         8b:ca:43:7f:45:46:ce:75:f9:a1:89:b5:ef:88:0f:47:9b:d1:
         22:b7:f7:1c:e2:0f:30:00:91:01:b1:19:b6:a0:51:d0:37:af:
         bb:8d:7b:88:9a:2c:ed:5c:86:4d:73:6b:79:3f:e9:4d:63:01:
         3b:b6:25:40:e8:b3:2e:4b:4f:0d:4a:1f:26:31:ba:f4:30:a0:
         40:82:8f:91:83:72:98:6a:02:a3:cd:6a:ad:14:18:c4:ab:b1:
         48:29:a3:33:2d:b9:25:13:c2:c2:51:a1:a0:02:91:ee:18:89:
         28:22:58:3c:1d:ef:6c:23:c1:88:b3:20:7c:db:af:04:22:a9:
         ce:9b:36:e6:2d:11:09:d7:89:ff:5f:cd:03:a5:2b:5b:e2:2d:
         de:00:40:5c:92:b0:80:1f:d9:03:e8:e9:51:14:9a:f5:dc:4f:
         e1:b5:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org