Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138312e302f32342d3234203d3e20323033333830.roa
File:                     3138352e3138332e3138312e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier:          nxogjc/ej/Fm0ezOTyId5JsblDu9q0xxUEPEGJlXYDE=
Subject key identifier:   3D:94:1D:70:15:8F:6A:2B:E7:41:DF:3C:1B:99:06:93:64:6D:0B:51
Certificate issuer:       /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial:       55E36AF42CA9D4722445E1CD6D6CD13FA6A9A33B
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138312e302f32342d3234203d3e20323033333830.roa
Signing time:             Mon 30 Dec 2024 15:41:19 +0000
ROA not before:           Mon 30 Dec 2024 15:36:19 +0000
ROA not after:            Mon 29 Dec 2025 15:41:19 +0000
asID:                     203380
IP address blocks:        185.183.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e3:6a:f4:2c:a9:d4:72:24:45:e1:cd:6d:6c:d1:3f:a6:a9:a3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
        Validity
            Not Before: Dec 30 15:36:19 2024 GMT
            Not After : Dec 29 15:41:19 2025 GMT
        Subject: CN=3D941D70158F6A2BE741DF3C1B990693646D0B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:c5:af:4b:ad:ee:99:79:d2:e5:f2:6d:2d:
                    14:ea:ab:47:ef:4f:31:48:df:03:6d:17:f1:30:47:
                    e1:a9:12:23:6f:e5:a1:58:b5:c1:14:59:2e:f7:04:
                    f0:6d:17:3a:20:9f:4f:0b:59:b0:9f:54:c2:6b:a6:
                    6d:f6:95:eb:70:92:89:ca:95:4e:a2:d8:5f:3b:d0:
                    8a:8a:0f:1b:11:32:41:05:b0:fd:e3:87:35:5b:d8:
                    8d:1a:f7:26:8b:94:a3:cf:43:24:02:21:97:0e:cd:
                    e9:35:00:40:75:3a:b8:66:48:a6:51:50:8a:02:44:
                    c4:17:44:2a:cb:31:c7:92:b8:7c:a6:59:74:cf:81:
                    50:f3:86:51:87:84:8f:16:39:43:cf:06:e7:24:7e:
                    9c:64:ea:bd:23:40:bb:e6:80:c3:61:a0:1a:e7:74:
                    8b:92:a5:90:fd:ab:14:86:77:38:1e:2d:a2:26:90:
                    cd:04:a6:bc:19:ec:98:66:0d:26:9e:6c:1a:fd:4b:
                    a3:e6:f5:c8:fb:25:06:07:84:7b:96:ca:27:25:e6:
                    ee:a6:fb:b3:9a:3e:5a:25:e3:74:72:25:ba:cd:aa:
                    40:1c:98:8b:54:cb:f4:5d:17:7c:e0:f7:70:5c:43:
                    1f:c8:23:d0:78:2e:53:58:65:ef:14:c3:e6:78:b5:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:94:1D:70:15:8F:6A:2B:E7:41:DF:3C:1B:99:06:93:64:6D:0B:51
            X509v3 Authority Key Identifier:
                keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138312e302f32342d3234203d3e20323033333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e9:e7:55:53:d3:49:bc:1d:74:35:0c:52:de:a5:9c:b0:14:
         1a:69:5e:37:69:b0:f7:ee:af:d3:ca:3e:ea:30:85:5b:f0:78:
         42:58:a6:f1:2a:a1:66:70:64:45:49:1a:d1:c5:32:99:df:01:
         90:ce:a4:2f:db:8e:51:95:bd:2b:74:00:2e:7c:8b:b7:08:bf:
         45:f9:7b:e2:f7:f3:8c:a7:a7:b6:23:c2:ad:a5:51:62:19:56:
         b6:4d:f1:62:36:be:40:75:2e:da:80:02:3b:9c:71:b8:01:2b:
         12:70:e1:d3:5b:a0:34:9e:02:9f:dd:5b:5a:52:8e:68:23:b6:
         e1:1a:e6:d2:4c:47:d6:8b:66:47:36:f9:9c:81:7e:04:ad:5a:
         03:fa:9b:5f:23:de:13:0b:67:67:a4:50:e0:62:47:50:ad:ba:
         c5:da:ba:77:60:84:6e:da:37:a9:6e:28:e1:fc:4d:31:c8:4e:
         c8:ed:b0:53:d6:08:2f:f1:eb:87:eb:87:8d:84:ec:f6:89:a9:
         2c:56:69:a0:99:a3:a1:80:c1:d8:6b:01:f5:29:c5:08:fc:61:
         d5:8d:30:8b:fd:33:03:04:53:5c:f4:f0:5a:6a:d7:25:f0:d3:
         a4:40:34:39:f5:09:55:6c:1f:c9:49:80:9e:12:d4:8b:94:f5:
         8a:2d:f0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:54:34 2025 by rpki-client