Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
File:                     3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          oDllO+yKU1jytCroTEDlEGne11+gsJDExSwxwStYZhk=
Subject key identifier:   EF:EF:13:78:CD:E2:20:75:ED:63:5E:39:B3:8D:C5:11:51:8B:5D:68
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       6FC65E8AA058728E72A89E8B0F1ECD60CD8EC686
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
Signing time:             Mon 27 Mar 2023 08:27:25 +0000
ROA not before:           Mon 27 Mar 2023 08:22:25 +0000
ROA not after:            Mon 25 Mar 2024 08:27:25 +0000
asID:                     204170
IP address blocks:        185.182.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c6:5e:8a:a0:58:72:8e:72:a8:9e:8b:0f:1e:cd:60:cd:8e:c6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:25 2023 GMT
            Not After : Mar 25 08:27:25 2024 GMT
        Subject: CN=EFEF1378CDE22075ED635E39B38DC511518B5D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:85:df:f7:53:ba:fe:9f:71:9a:bb:e7:73:
                    25:30:da:77:8a:c1:78:28:fc:6b:d8:b3:2f:32:03:
                    3b:08:09:1a:88:31:58:aa:02:cc:93:a5:64:f4:1b:
                    0b:de:b8:0a:57:f3:ac:47:47:c1:24:1a:fc:fd:1a:
                    2d:94:3d:3a:9f:e7:94:9f:9d:ea:c5:3f:05:d0:72:
                    dc:af:a0:b1:ab:4c:48:d3:0c:d3:7a:50:da:1a:ba:
                    e2:9b:37:2c:9b:33:e3:f9:86:6f:88:b5:30:73:35:
                    3f:a8:41:b9:a8:06:1a:0e:cd:c3:b3:31:f8:e9:91:
                    9f:f1:d9:74:7a:c1:df:8b:cf:51:2c:b1:b4:14:2f:
                    d9:d8:e8:ee:30:21:f5:86:a0:c8:29:e2:ad:2d:e9:
                    64:a4:98:44:79:ac:28:f9:20:d2:95:da:d5:97:6d:
                    8e:86:98:79:2c:73:64:21:56:d1:df:6b:b5:8f:f2:
                    0e:ed:6b:76:ca:f1:8c:e0:f1:4d:76:de:7d:9a:73:
                    7d:fe:4d:b8:d4:38:44:71:41:80:cc:eb:d8:39:95:
                    cf:e6:ed:63:2f:03:32:66:4d:31:2a:ab:11:8e:25:
                    63:8c:40:25:0a:86:d5:bf:91:b0:45:09:1b:4f:b6:
                    b7:38:8e:3a:4f:16:c3:39:1d:57:f1:80:30:12:82:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EF:13:78:CD:E2:20:75:ED:63:5E:39:B3:8D:C5:11:51:8B:5D:68
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:21:a1:d7:9d:99:fb:c1:7b:4c:d4:57:33:d9:dd:9f:79:8a:
         75:49:29:21:d7:df:43:09:f9:23:4e:2e:d9:97:40:e4:7a:2d:
         0a:6a:b5:b6:15:0d:76:1c:b1:b4:08:d2:aa:d8:cd:f0:4d:dd:
         97:1a:b9:08:c2:56:8b:4b:57:d7:a3:d5:f7:d5:4e:35:39:92:
         b8:d5:bd:78:f0:fc:0a:ef:27:31:1d:7b:2e:19:72:fa:34:de:
         f6:92:d2:b7:42:83:42:d2:f4:a4:4e:d7:38:eb:1f:c0:57:e1:
         6d:78:7a:46:b1:78:63:78:e8:07:22:62:3c:41:b5:8d:fa:55:
         9b:af:5c:f6:ec:c6:79:74:1f:71:74:59:17:be:6a:e3:36:ec:
         16:c9:db:03:55:82:f6:58:6e:c5:6a:ac:d3:ca:15:21:f0:39:
         39:3d:6d:d3:12:b8:c9:a3:d0:c3:eb:53:81:83:27:84:08:81:
         c2:be:9a:55:2f:3b:60:d7:59:2f:86:15:4d:30:5a:3d:30:0c:
         17:6f:65:fa:3c:b6:ac:32:84:dc:a2:1a:30:3b:6f:e5:8f:9b:
         b4:b1:5c:aa:81:8b:76:7d:32:df:27:85:21:bb:6f:28:45:1c:
         b4:8c:49:f7:71:cd:68:7b:b6:a4:07:a4:b7:f4:39:fe:1e:fb:
         8f:0d:32:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:18 2023 by rpki-client on console-fra.rpki-client.org