Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136322e302f32332d3233203d3e20323034333136.roa
File:                     3137362e3131382e3136322e302f32332d3233203d3e20323034333136.roa (raw, json)
Hash identifier:          0XxABfNdDVrKExM72CBOFwLtwHGU0Ix3eVIBDugrNU8=
Subject key identifier:   98:61:8E:8E:C0:DD:F3:45:4E:1A:93:F0:BA:2B:F1:EA:65:50:9F:63
Certificate issuer:       /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial:       1D7D730DB2C3C4958AAF30AD0DA33104BE7D0E3B
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136322e302f32332d3233203d3e20323034333136.roa
Signing time:             Mon 18 Dec 2023 00:28:39 +0000
ROA not before:           Mon 18 Dec 2023 00:23:39 +0000
ROA not after:            Mon 16 Dec 2024 00:28:39 +0000
asID:                     204316
IP address blocks:        176.118.162.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7d:73:0d:b2:c3:c4:95:8a:af:30:ad:0d:a3:31:04:be:7d:0e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
        Validity
            Not Before: Dec 18 00:23:39 2023 GMT
            Not After : Dec 16 00:28:39 2024 GMT
        Subject: CN=98618E8EC0DDF3454E1A93F0BA2BF1EA65509F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:28:25:41:2e:8b:92:8e:87:8c:f0:8c:b9:
                    31:38:4a:0e:32:4d:77:2f:c3:ca:8c:f4:59:66:bf:
                    36:47:15:6a:49:8c:dc:4d:2d:e3:3d:87:5e:98:ac:
                    da:3c:32:3d:41:69:ac:62:05:ae:da:97:d4:8f:75:
                    6a:52:65:76:a7:3c:31:f2:10:ea:81:e1:8b:5b:3a:
                    13:38:b1:d3:92:2a:a3:3f:bd:c8:3e:68:f8:4c:9b:
                    6e:68:f2:43:f7:36:5b:fe:18:29:ff:ab:a8:9e:01:
                    ee:5b:6f:eb:53:43:92:2c:9a:4a:c4:fb:ab:f5:07:
                    8e:61:c5:f5:13:7b:49:04:66:38:f3:37:8b:5b:5f:
                    9a:52:b4:62:ef:97:35:ba:42:dc:b2:44:bb:de:c5:
                    52:48:41:dc:c4:81:07:41:e3:4f:b4:22:6d:50:d6:
                    76:97:6d:79:15:75:30:e6:df:33:7a:27:57:01:78:
                    74:b1:7e:1b:26:fd:70:cf:88:25:27:64:c9:63:80:
                    e1:6e:9f:aa:d0:a4:e4:79:ca:50:be:ac:79:0e:bc:
                    54:b2:d3:c9:9b:ae:a5:cc:86:7b:9d:d4:47:b2:6a:
                    08:b1:5c:b4:eb:e8:b3:21:b1:ab:de:76:1c:17:a5:
                    c1:e7:85:9b:e1:91:bd:31:0a:c0:32:65:1d:96:98:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:61:8E:8E:C0:DD:F3:45:4E:1A:93:F0:BA:2B:F1:EA:65:50:9F:63
            X509v3 Authority Key Identifier:
                keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136322e302f32332d3233203d3e20323034333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:72:2d:58:45:26:4e:6c:64:74:74:ab:85:c3:3f:4d:2a:43:
         39:16:33:c9:34:01:de:38:53:f0:61:91:67:82:3a:fe:a8:14:
         34:1c:70:42:e7:db:e3:ea:e0:44:e9:47:dc:5a:b7:6c:57:d6:
         e6:81:29:65:e8:30:b4:c1:4f:b2:98:4a:b2:d3:fd:ab:f9:9d:
         69:9e:b3:4b:54:cd:bf:4e:f1:36:fa:48:ab:56:08:28:ee:1a:
         2d:dc:29:a1:55:4a:a1:04:67:95:b6:bd:a6:7a:6c:02:63:e3:
         08:8a:71:68:e1:6b:39:d7:58:90:e9:4c:d4:61:8a:c1:4b:25:
         eb:75:ed:99:07:f9:01:61:2f:71:90:bd:8a:34:34:62:d7:99:
         48:c4:73:ca:fb:de:66:10:4f:55:8f:bc:02:aa:e5:cf:bc:37:
         1f:04:9f:cd:a8:34:a8:85:06:49:73:a5:37:08:57:ab:1b:ea:
         bb:a8:b9:8b:11:d8:47:73:ee:cc:6d:30:98:87:77:e8:e2:0e:
         ef:d3:f9:d3:8f:89:8b:fb:2b:b5:25:50:74:b9:d7:33:4f:94:
         b8:6e:b5:91:f2:86:85:b0:ea:35:40:a0:dc:c3:dd:53:eb:2c:
         5e:4c:d9:72:ba:21:5a:d4:c6:05:b2:fb:5d:8d:c5:24:0d:07:
         86:55:76:9b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUHX1zDbLDxJWKrzCtDaMxBL59DjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY3Njg4ZmM5OWNmZjE0ZTBkZjc0MjI3MjBlYTg5Y2Ex
NjM3Nzg5OTAeFw0yMzEyMTgwMDIzMzlaFw0yNDEyMTYwMDI4MzlaMDMxMTAvBgNV
BAMTKDk4NjE4RThFQzBEREYzNDU0RTFBOTNGMEJBMkJGMUVBNjU1MDlGNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08yglQS6Lko6HjPCMuTE4Sg4y
TXcvw8qM9FlmvzZHFWpJjNxNLeM9h16YrNo8Mj1BaaxiBa7al9SPdWpSZXanPDHy
EOqB4YtbOhM4sdOSKqM/vcg+aPhMm25o8kP3Nlv+GCn/q6ieAe5bb+tTQ5IsmkrE
+6v1B45hxfUTe0kEZjjzN4tbX5pStGLvlzW6QtyyRLvexVJIQdzEgQdB40+0Im1Q
1naXbXkVdTDm3zN6J1cBeHSxfhsm/XDPiCUnZMljgOFun6rQpOR5ylC+rHkOvFSy
08mbrqXMhnud1EeyagixXLTr6LMhsavedhwXpcHnhZvhkb0xCsAyZR2WmFXxAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUmGGOjsDd80VOGpPwuivx6mVQn2MwHwYDVR0j
BBgwFoAUVnaI/JnP8U4N90InIOqJyhY3eJkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjkyMzUwNTUtMTkwNC00NGI0LTk5OGItZmYxYzllMzEx
YzQ5LzEvNTY3Njg4RkM5OUNGRjE0RTBERjc0MjI3MjBFQTg5Q0ExNjM3Nzg5OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZuYUlfSm5QOFU0TjkwSW5JT3FKeWhZ
M2VKay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjkyMzUwNTUt
MTkwNC00NGI0LTk5OGItZmYxYzllMzExYzQ5LzEvMzEzNzM2MmUzMTMxMzgyZTMx
MzYzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzAzNDMzMzEzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAbB2ojANBgkqhkiG9w0BAQsFAAOCAQEAlnItWEUmTmxkdHSrhcM/TSpDORYz
yTQB3jhT8GGRZ4I6/qgUNBxwQufb4+rgROlH3Fq3bFfW5oEpZegwtMFPsphKstP9
q/mdaZ6zS1TNv07xNvpIq1YIKO4aLdwpoVVKoQRnlba9pnpsAmPjCIpxaOFrOddY
kOlM1GGKwUsl63XtmQf5AWEvcZC9ijQ0YteZSMRzyvveZhBPVY+8Aqrlz7w3HwSf
zag0qIUGSXOlNwhXqxvqu6i5ixHYR3PuzG0wmId36OIO79P504+Ji/srtSVQdLnX
M0+UuG61kfKGhbDqNUCg3MPdU+ssXkzZcrohWtTGBbL7XY3FJA0HhlV2mw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org