Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e382e302f32332d3332203d3e203531313637.roa
File:                     3138352e3138322e382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          7TxsiSno1B6p4pfc+viljpLWI8MaZHkZZdHxPkGxopc=
Subject key identifier:   A8:F3:88:80:E5:B6:1C:3F:70:10:8B:29:E3:35:50:7B:7E:E1:E7:DD
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       4F1B2513392A2766915445712FC18D26B0DCC771
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e382e302f32332d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:23 +0000
ROA not before:           Mon 27 Mar 2023 08:22:23 +0000
ROA not after:            Mon 25 Mar 2024 08:27:23 +0000
asID:                     51167
IP address blocks:        185.182.8.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1b:25:13:39:2a:27:66:91:54:45:71:2f:c1:8d:26:b0:dc:c7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:23 2023 GMT
            Not After : Mar 25 08:27:23 2024 GMT
        Subject: CN=A8F38880E5B61C3F70108B29E335507B7EE1E7DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:bb:17:d8:3e:b2:b6:bb:19:ed:fb:c1:f7:
                    22:8f:fc:91:32:af:07:0b:2e:cf:dd:1a:84:07:17:
                    ec:0e:d2:22:ee:8c:56:00:9b:4f:f0:be:53:8d:ca:
                    92:1c:00:c6:86:c2:9c:11:ba:1e:83:d2:21:79:54:
                    e2:92:da:9b:9d:cb:f6:e5:29:1c:22:36:d4:fc:73:
                    76:a3:61:02:37:62:84:4c:04:62:e1:5a:94:08:f8:
                    8a:00:b5:3e:01:db:94:73:69:b6:77:5c:7b:e0:13:
                    a1:66:2c:25:1f:a4:49:41:b9:09:cf:a4:0b:21:71:
                    41:8c:a0:11:44:52:1c:f2:8b:7b:2f:a5:d8:15:ee:
                    b9:9a:28:e8:6d:e0:27:ba:93:53:34:80:85:8b:3a:
                    42:dd:28:01:8c:4a:a4:4b:25:a3:9d:28:c3:5b:30:
                    4b:06:01:49:33:d7:c9:2c:ad:dd:3b:2e:c2:7e:12:
                    55:35:62:b5:dd:da:48:41:4c:8d:11:b1:ed:d3:2b:
                    39:2e:0a:7c:65:1c:b0:ab:95:5b:d3:35:5f:a2:32:
                    44:2d:9a:c1:2b:70:37:c9:cb:28:d4:f0:94:5d:23:
                    88:99:24:96:6c:f7:28:74:6d:f4:74:cf:8d:31:19:
                    4a:b9:30:73:08:3a:a4:44:49:52:e8:06:3a:98:0d:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F3:88:80:E5:B6:1C:3F:70:10:8B:29:E3:35:50:7B:7E:E1:E7:DD
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e382e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:b4:e1:e3:e2:41:59:f4:ee:e1:43:88:ea:d7:c1:d5:1f:b5:
         1b:af:95:0c:a6:9d:ed:2b:e6:b4:aa:e6:22:f9:88:04:98:83:
         13:74:57:eb:af:a8:35:3c:32:cb:c0:54:c8:1f:7e:4e:6c:0d:
         37:44:6e:90:6a:c7:5a:db:a5:1c:02:01:0e:b7:f0:56:da:29:
         61:a3:60:b1:b9:30:ae:e4:11:cf:40:8d:ad:49:32:f8:92:92:
         99:8f:7c:50:d4:2a:0e:89:10:ba:b7:9a:b5:60:ac:01:90:71:
         1d:c5:a0:70:83:e1:6d:8d:e7:89:0f:05:7f:60:84:e8:82:74:
         4e:98:8a:cf:ca:0c:21:d1:91:33:d7:2d:49:e3:e4:ad:a2:72:
         ae:f7:ee:e4:8b:90:47:b7:0d:8f:57:03:08:16:10:e4:d0:d0:
         e1:a6:ff:79:63:68:c2:11:49:f9:41:21:71:87:06:aa:5b:4d:
         7d:47:07:cf:b8:c7:bb:66:e9:e1:98:4f:8f:41:55:4f:6e:20:
         0f:a2:53:42:f5:63:f8:36:11:b3:79:f7:15:d0:e2:d4:1d:ea:
         fa:a4:95:5d:48:c3:ec:75:06:16:43:34:47:57:1c:ad:19:e5:
         d1:63:56:b5:39:ac:6e:6e:bc:db:e6:ce:61:a6:ee:8c:21:79:
         54:fa:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org