Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3138352e33342e3130312e302f32342d3234203d3e20323131313636.roa
File:                     3138352e33342e3130312e302f32342d3234203d3e20323131313636.roa (raw, json)
Hash identifier:          S2DGRivQ0JFBG5sMaBGaAnVpxy7F6uY39aNCFA77+UQ=
Subject key identifier:   A7:1A:8A:8E:9C:7D:DB:93:92:66:F8:DB:58:93:3F:C6:73:82:EA:E7
Certificate issuer:       /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial:       229C04F635F9C6D8BB3D827AE6A482B83901E9FB
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3138352e33342e3130312e302f32342d3234203d3e20323131313636.roa
Signing time:             Mon 18 Dec 2023 00:28:45 +0000
ROA not before:           Mon 18 Dec 2023 00:23:45 +0000
ROA not after:            Mon 16 Dec 2024 00:28:45 +0000
asID:                     211166
IP address blocks:        185.34.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9c:04:f6:35:f9:c6:d8:bb:3d:82:7a:e6:a4:82:b8:39:01:e9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
        Validity
            Not Before: Dec 18 00:23:45 2023 GMT
            Not After : Dec 16 00:28:45 2024 GMT
        Subject: CN=A71A8A8E9C7DDB939266F8DB58933FC67382EAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6e:34:16:08:77:87:b8:f5:e5:db:f6:f7:e5:
                    d8:03:a6:cf:9b:50:5e:88:6e:60:a6:c4:48:e9:26:
                    97:36:38:fe:bc:7a:e0:58:8e:62:97:f3:7c:c9:15:
                    12:2d:60:87:35:0d:46:39:0f:54:7c:80:1e:a5:fe:
                    f7:1a:da:e8:e1:3c:e5:5c:de:a5:92:09:28:2e:a1:
                    27:c6:0f:39:14:ab:f9:6f:8a:29:dd:05:1d:b7:fc:
                    35:af:0a:a6:f5:98:7c:29:a5:88:69:64:51:16:1b:
                    45:be:0b:5e:9c:12:07:47:6f:5e:76:05:7a:01:87:
                    fa:16:7d:4f:f4:19:b7:b4:6a:61:d6:58:3b:aa:e2:
                    35:63:35:97:8a:b2:a5:ee:8d:c3:19:a8:94:1a:cf:
                    56:bf:64:1f:28:a0:3e:d9:91:72:5a:19:de:e7:37:
                    a7:68:1f:f1:c1:a5:bd:da:d7:c3:2e:46:ba:33:fa:
                    e5:58:0d:84:c0:d7:dc:c6:d8:57:18:22:e1:78:48:
                    22:5e:8e:a5:33:5e:7d:98:e6:a3:c9:8c:3e:43:0c:
                    db:79:a4:f9:cd:40:0b:a6:61:e7:d8:69:6e:89:1b:
                    44:f7:26:71:a9:f2:24:a1:75:3f:59:a2:c4:ea:87:
                    3a:4f:88:2a:6d:9f:d8:a9:74:94:73:b0:6d:0e:5c:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1A:8A:8E:9C:7D:DB:93:92:66:F8:DB:58:93:3F:C6:73:82:EA:E7
            X509v3 Authority Key Identifier:
                keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3138352e33342e3130312e302f32342d3234203d3e20323131313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.34.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:a0:ad:4b:92:c2:61:ff:1a:e9:1f:8f:6b:fe:54:b6:5b:9e:
         10:88:d9:55:5c:1a:b8:39:54:d6:47:c8:66:b0:c2:64:24:c5:
         ef:76:9b:f0:5f:97:97:e7:d1:fc:0e:27:3b:f4:9a:c7:49:03:
         25:f9:b6:8d:8a:a2:07:8b:28:07:5c:28:53:7d:f8:f2:ad:83:
         a0:79:b2:27:f0:db:f1:17:82:37:ea:23:07:1f:b4:76:0d:8b:
         8b:1f:31:28:96:fe:b8:d8:a6:27:33:4e:f9:ee:a8:99:8d:1e:
         80:5e:8f:53:8a:3a:da:a3:a0:ea:69:95:28:25:6e:42:53:6e:
         1e:5b:f6:e2:6f:c7:f9:52:f3:a1:ed:be:1c:a2:9f:21:5c:66:
         f0:01:ff:7d:74:d4:ad:fa:e0:8c:9a:36:a4:bb:b4:bd:43:2a:
         fd:7f:6a:37:bc:6b:db:05:c2:31:f5:ea:7a:c5:75:98:33:b7:
         30:16:b0:04:09:8d:96:92:9b:d4:d6:2e:7f:24:9d:50:51:82:
         fd:46:01:30:ae:c8:99:74:78:a3:b9:d8:4d:b4:b3:36:f9:95:
         b1:56:9c:12:81:78:37:3e:5a:09:95:ee:b8:73:03:b3:f0:d2:
         73:ed:32:ba:5b:90:7c:14:33:69:dc:6a:a5:d6:ac:a1:5a:1e:
         cc:3b:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org