Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32332d3234203d3e20323130393132.roa
File:                     3137362e3131382e3136302e302f32332d3234203d3e20323130393132.roa (raw, json)
Hash identifier:          LomRleXLcASOiAxKkKY/dWBTi/VD64wydmbV8qGyN9U=
Subject key identifier:   2D:A9:F4:1C:20:1E:8C:F0:70:E1:55:0B:33:99:0B:E7:B1:48:06:17
Certificate issuer:       /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial:       0C6EFAD60365AAFEE1D7EDB700BB7E679697CAC2
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32332d3234203d3e20323130393132.roa
Signing time:             Mon 18 Dec 2023 23:43:19 +0000
ROA not before:           Mon 18 Dec 2023 23:38:19 +0000
ROA not after:            Mon 16 Dec 2024 23:43:19 +0000
asID:                     210912
IP address blocks:        176.118.160.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6e:fa:d6:03:65:aa:fe:e1:d7:ed:b7:00:bb:7e:67:96:97:ca:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
        Validity
            Not Before: Dec 18 23:38:19 2023 GMT
            Not After : Dec 16 23:43:19 2024 GMT
        Subject: CN=2DA9F41C201E8CF070E1550B33990BE7B1480617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:0d:d0:49:cd:53:c1:af:58:05:8f:78:76:
                    48:c7:70:1d:fd:74:a7:09:87:b0:b2:bd:cc:a2:a5:
                    44:22:15:06:3a:c1:d5:67:c9:8e:10:74:61:3a:b8:
                    33:f2:4c:a9:48:3f:60:58:88:4b:90:86:be:6e:39:
                    24:4e:80:d7:40:b6:14:e7:a2:15:86:0d:a5:17:37:
                    2f:9c:d6:33:d8:9b:f7:83:74:60:92:db:97:c0:66:
                    37:72:ab:57:86:a0:54:09:ee:d7:30:be:bf:93:db:
                    e1:79:44:22:52:cc:37:3d:93:43:c3:f2:bb:7c:c4:
                    7b:f3:44:47:8d:2f:2b:93:26:76:a3:3f:06:64:a7:
                    02:25:01:59:9c:b3:33:63:86:2b:39:29:65:73:c3:
                    b2:b7:33:79:43:21:de:14:c3:2c:61:b5:62:7e:d2:
                    36:db:17:f3:e0:62:91:d5:c3:b8:d6:56:54:1a:55:
                    ce:ba:ee:1b:61:61:29:c9:52:47:34:3a:e0:0e:73:
                    3f:a0:25:24:a5:50:31:2d:78:59:ad:f3:b1:b9:b8:
                    ca:3b:f3:c7:9e:18:80:78:95:ca:46:bb:b2:34:12:
                    f3:54:b1:6b:a4:25:8f:5c:d2:7e:c2:99:7b:7d:6f:
                    d6:59:65:b5:41:9e:31:90:47:61:97:cb:a9:a2:32:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:F4:1C:20:1E:8C:F0:70:E1:55:0B:33:99:0B:E7:B1:48:06:17
            X509v3 Authority Key Identifier:
                keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32332d3234203d3e20323130393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:d3:f2:8c:0b:5d:fd:19:43:6d:b3:9b:d1:e8:66:43:28:ad:
         60:0e:62:72:ff:0a:c8:5d:c1:2b:ac:cd:7c:06:33:2e:05:1f:
         5e:ed:fa:b1:6b:9f:71:ff:68:ea:60:15:5e:55:14:71:6d:97:
         9d:f5:82:6a:42:38:56:75:db:14:8d:b5:73:b5:77:17:e4:b3:
         1f:79:0f:c3:f7:64:c0:4c:17:ee:0a:43:f5:4f:8f:1d:21:8e:
         18:fb:59:42:50:18:61:ae:24:00:46:35:fe:37:96:7b:e3:84:
         3d:b8:ae:b1:79:11:d0:a8:8a:c5:f9:9e:e0:3d:5d:45:b6:32:
         d5:dd:8d:1f:dd:50:d8:ba:fd:4c:a1:98:5e:80:83:e6:c4:b2:
         dd:5c:d1:94:b1:ea:aa:ca:ed:ae:60:75:48:77:e0:f6:6f:39:
         17:ab:7d:3f:66:f0:ae:a4:e4:5a:77:67:41:72:38:1f:00:a3:
         a1:ea:8d:fd:24:c6:27:ee:2d:9f:6e:8a:9a:14:4c:9f:ee:5f:
         d2:fc:ab:d6:fa:56:17:ae:fa:c8:09:6c:18:6f:3f:b9:e3:51:
         c8:87:bd:75:50:06:e3:9b:46:59:91:53:cb:69:cd:83:2b:12:
         01:a1:a5:18:66:28:b5:b5:f8:87:e0:df:b9:0d:71:09:15:b3:
         24:e7:7c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org