Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa
File:                     3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (raw, json)
Hash identifier:          D5yrFZV6xi2KCSBmDvXQGsi/mQ5hVMDAyWlliG2pDEg=
Subject key identifier:   ED:2D:2C:80:44:F6:2F:0D:E8:86:EA:23:12:9D:65:C2:2A:8D:48:41
Certificate issuer:       /CN=a09effbd0b329b7aeebd1afbca5e7363f7e8ad5d
Certificate serial:       02CA92B4CC1948D1F95156CE5BAD91DF2DB77330
Authority key identifier: A0:9E:FF:BD:0B:32:9B:7A:EE:BD:1A:FB:CA:5E:73:63:F7:E8:AD:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJ7_vQsym3ruvRr7yl5zY_forV0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa
Signing time:             Tue 02 May 2023 10:46:53 +0000
ROA not before:           Tue 02 May 2023 10:41:53 +0000
ROA not after:            Tue 30 Apr 2024 10:46:53 +0000
asID:                     142111
IP address blocks:        176.126.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ca:92:b4:cc:19:48:d1:f9:51:56:ce:5b:ad:91:df:2d:b7:73:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09effbd0b329b7aeebd1afbca5e7363f7e8ad5d
        Validity
            Not Before: May  2 10:41:53 2023 GMT
            Not After : Apr 30 10:46:53 2024 GMT
        Subject: CN=ED2D2C8044F62F0DE886EA23129D65C22A8D4841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:aa:a6:36:1b:09:ee:a2:d9:5d:a1:df:39:0f:
                    17:b9:eb:e3:1a:4f:5a:a8:79:cd:8b:42:28:23:71:
                    13:92:88:07:16:51:b0:bc:95:62:6d:88:0c:0f:53:
                    ca:f5:08:c0:1a:e1:01:89:08:97:24:4a:93:94:bb:
                    58:9c:a6:f0:da:f4:d5:56:4b:5a:2a:33:2c:85:3c:
                    6a:eb:06:fd:fa:b3:e1:9f:d7:57:2e:7f:33:eb:b1:
                    74:5a:e5:69:44:32:bd:74:1f:11:37:ed:a4:6b:7a:
                    f0:ff:39:96:8b:3d:a9:7c:0a:c2:52:b0:6c:1f:5b:
                    7a:03:a8:f1:74:74:01:82:0f:23:88:3a:5c:28:cd:
                    c9:33:ab:db:67:ca:ba:ba:99:3d:46:f8:61:9d:85:
                    1c:0b:de:6f:0c:1c:f5:02:48:fe:96:3a:9f:cd:ab:
                    52:56:98:14:f8:98:c9:2a:29:e5:a4:85:06:7b:da:
                    93:35:a4:1c:de:34:d9:53:63:37:e5:1f:a0:76:f9:
                    62:cf:ea:3a:9c:d5:37:8e:eb:a1:a6:9f:bf:dc:ea:
                    e0:77:7d:7d:73:66:2a:8c:9e:8a:a8:62:5e:92:8e:
                    ca:e3:60:bf:2b:6f:d5:ec:82:36:de:32:2a:eb:43:
                    d0:36:81:93:ac:45:19:d4:7f:3a:b2:2c:d3:7c:b7:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2D:2C:80:44:F6:2F:0D:E8:86:EA:23:12:9D:65:C2:2A:8D:48:41
            X509v3 Authority Key Identifier:
                keyid:A0:9E:FF:BD:0B:32:9B:7A:EE:BD:1A:FB:CA:5E:73:63:F7:E8:AD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/A09EFFBD0B329B7AEEBD1AFBCA5E7363F7E8AD5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ7_vQsym3ruvRr7yl5zY_forV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:1f:9b:54:97:e4:2d:95:57:cc:74:51:91:44:ed:4e:30:58:
         47:36:b5:60:21:ad:50:0c:af:8e:83:e9:9d:6f:b7:d1:e6:99:
         ef:e7:b6:34:c5:f7:e1:96:33:ba:6e:cf:9d:cb:d4:7b:08:ba:
         68:1d:c5:66:35:51:c4:bb:3f:21:55:d0:d4:fb:29:e7:9b:71:
         95:01:5b:8c:31:df:01:b4:fa:c7:8b:f4:f4:c0:91:1f:d5:8c:
         95:6e:4a:f2:02:a8:42:87:ae:ff:17:7d:4e:c9:52:44:3d:8d:
         04:97:3f:38:09:21:62:6c:c6:63:ac:bd:91:d4:e1:2a:1a:f0:
         47:82:a5:64:18:61:29:46:28:48:4d:bd:6b:58:15:ed:ee:2d:
         1e:3d:28:83:04:54:9b:86:01:49:8d:05:ba:c2:5a:44:6e:f5:
         d9:22:59:d8:e9:dd:53:d3:71:70:21:23:84:3c:bf:99:2c:c6:
         f9:fc:7a:33:58:7d:14:ca:31:dd:55:ac:fe:a1:c0:35:e2:7f:
         f5:84:be:87:49:32:96:df:ef:8b:8c:54:17:e8:2b:8f:51:09:
         10:fd:b1:d8:31:7e:48:3f:af:89:2b:0a:41:20:51:79:9a:15:
         98:53:9d:7d:0f:38:bb:27:2e:9a:e8:48:08:2b:d6:1a:eb:fc:
         ae:21:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org