Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa
File:                     3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          bKK6FaE7syw0acce7cx+rhKGhkgZbyaaQs2gDCtKoeM=
Subject key identifier:   B0:ED:08:1C:F8:A9:DA:2D:90:9E:68:36:5D:B8:5D:50:D9:81:AC:30
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       4F0C06D66A0FBAD695F82A6DCCFEB005668180EB
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:21 +0000
ROA not before:           Mon 27 Mar 2023 08:22:21 +0000
ROA not after:            Mon 25 Mar 2024 08:27:21 +0000
asID:                     51167
IP address blocks:        185.182.184.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0c:06:d6:6a:0f:ba:d6:95:f8:2a:6d:cc:fe:b0:05:66:81:80:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:21 2023 GMT
            Not After : Mar 25 08:27:21 2024 GMT
        Subject: CN=B0ED081CF8A9DA2D909E68365DB85D50D981AC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2e:1e:60:2b:7d:b8:63:20:67:db:ae:d1:7c:
                    3a:0f:e5:ff:ac:6d:69:ec:65:31:e9:b5:82:63:bf:
                    2b:4f:ee:06:3e:7b:61:b0:56:69:87:2f:3c:69:bc:
                    b0:be:de:46:38:60:e4:34:a0:1b:89:7a:9f:31:dc:
                    6e:e2:1a:ba:42:87:28:d1:18:d6:b0:2f:a8:51:c0:
                    e6:16:8a:c5:73:1d:6f:5e:f6:66:bc:79:4c:0f:8d:
                    59:e8:fe:c2:47:b8:7b:97:92:3e:00:a7:41:96:c4:
                    bf:e4:42:46:5e:de:73:dc:42:e1:3a:90:d7:82:d5:
                    aa:c7:b3:31:22:69:4b:d1:46:85:4a:d7:07:1d:e5:
                    28:7d:11:ed:01:ca:87:98:cf:3f:8d:de:8c:cb:13:
                    3b:40:b9:0d:12:69:c6:9d:70:74:71:25:69:56:fe:
                    5a:0c:12:9d:b6:3a:99:5d:0c:a4:7e:ac:7c:b9:6a:
                    64:6e:be:32:fe:da:2c:21:b2:df:2f:ee:58:fc:7f:
                    05:43:9c:09:ab:ea:ff:ed:95:09:af:ea:2b:91:8a:
                    62:b3:84:dc:04:30:82:df:5c:84:5c:ce:18:42:36:
                    24:08:1f:9b:35:f8:2c:bf:ee:82:56:5f:e7:6c:ef:
                    55:87:b3:5b:07:92:f7:be:8e:a3:17:ef:78:39:62:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:ED:08:1C:F8:A9:DA:2D:90:9E:68:36:5D:B8:5D:50:D9:81:AC:30
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:37:b7:0b:3c:45:04:1a:cb:1f:13:80:3e:3d:05:39:8a:f8:
         c7:7f:b3:70:98:a0:cb:df:7b:22:39:5f:7d:ef:4d:41:8e:ef:
         12:61:57:3f:e7:68:bc:11:6e:f6:1d:b1:8d:7a:42:e0:44:aa:
         58:ca:e2:50:dd:53:2d:97:7f:eb:91:a0:1c:59:2e:a4:14:10:
         e5:68:c2:6f:4a:bb:96:4e:71:7f:a6:cc:08:4c:9b:82:23:6f:
         ab:f6:3c:85:cb:a7:cb:f3:1c:55:85:cf:99:1b:9f:0a:15:2f:
         f8:5f:3b:48:fe:89:ed:56:f1:81:2a:81:de:04:d8:96:b8:b5:
         20:a3:86:6e:04:b0:3b:35:fd:f8:24:3b:42:e4:ae:8c:41:55:
         f5:03:96:0d:fe:77:c4:f1:bc:2f:21:1d:80:60:41:33:3b:1e:
         2e:8d:e7:94:c4:c2:ec:4a:00:97:67:e5:99:53:20:88:ff:09:
         6d:ad:90:fc:d2:60:20:4e:2f:c5:95:47:87:2e:53:0f:a2:52:
         0d:d4:c0:df:65:22:99:b0:52:e5:8a:9f:05:7c:1b:23:2c:95:
         98:91:d4:5a:f3:54:96:e1:93:05:e1:21:62:a0:31:88:72:a0:
         fb:d1:26:4d:42:c0:0d:86:74:c7:d1:6c:d4:e8:23:48:65:4f:
         9a:fd:08:22
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTwwG1moPutaV+CptzP6wBWaBgOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMjFaFw0yNDAzMjUwODI3MjFaMDMxMTAvBgNV
BAMTKEIwRUQwODFDRjhBOURBMkQ5MDlFNjgzNjVEQjg1RDUwRDk4MUFDMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLh5gK324YyBn267RfDoP5f+s
bWnsZTHptYJjvytP7gY+e2GwVmmHLzxpvLC+3kY4YOQ0oBuJep8x3G7iGrpChyjR
GNawL6hRwOYWisVzHW9e9ma8eUwPjVno/sJHuHuXkj4Ap0GWxL/kQkZe3nPcQuE6
kNeC1arHszEiaUvRRoVK1wcd5Sh9Ee0ByoeYzz+N3ozLEztAuQ0SacadcHRxJWlW
/loMEp22OpldDKR+rHy5amRuvjL+2iwhst8v7lj8fwVDnAmr6v/tlQmv6iuRimKz
hNwEMILfXIRczhhCNiQIH5s1+Cy/7oJWX+ds71WHs1sHkve+jqMX73g5YmqZAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUsO0IHPip2i2Qnmg2XbhdUNmBrDAwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMTM4MzIyZTMx
MzgzNDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG5trgwDQYJKoZIhvcNAQELBQADggEBAAU3tws8RQQayx8TgD49BTmK+Md/s3CY
oMvfeyI5X33vTUGO7xJhVz/naLwRbvYdsY16QuBEqljK4lDdUy2Xf+uRoBxZLqQU
EOVowm9Ku5ZOcX+mzAhMm4Ijb6v2PIXLp8vzHFWFz5kbnwoVL/hfO0j+ie1W8YEq
gd4E2Ja4tSCjhm4EsDs1/fgkO0LkroxBVfUDlg3+d8TxvC8hHYBgQTM7Hi6N55TE
wuxKAJdn5ZlTIIj/CW2tkPzSYCBOL8WVR4cuUw+iUg3UwN9lIpmwUuWKnwV8GyMs
lZiR1FrzVJbhkwXhIWKgMYhyoPvRJk1CwA2GdMfRbNToI0hlT5r9CCI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org