Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa
File:                     3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          4o4nwN1ogM4jMW/YuFmQhjgC1MT9r4woOJPHZHfj/tc=
Subject key identifier:   7D:D6:A4:E2:3A:58:08:7D:CD:FD:7D:76:0D:BB:D6:37:79:09:A7:27
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       0A1DBB82FAF4DA06CA20C78114AB8CF513FB5CB0
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 27 Mar 2023 08:27:23 +0000
ROA not before:           Mon 27 Mar 2023 08:22:23 +0000
ROA not after:            Mon 25 Mar 2024 08:27:23 +0000
asID:                     61317
IP address blocks:        185.187.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1d:bb:82:fa:f4:da:06:ca:20:c7:81:14:ab:8c:f5:13:fb:5c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:23 2023 GMT
            Not After : Mar 25 08:27:23 2024 GMT
        Subject: CN=7DD6A4E23A58087DCDFD7D760DBBD6377909A727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:6a:f0:0b:a6:6f:75:fc:52:f3:5b:a0:8b:
                    bf:04:4e:27:a4:09:6f:4a:fa:ed:05:9b:ea:50:a1:
                    ba:f0:2f:5d:4d:39:f8:5a:94:39:f6:bd:7d:2e:7b:
                    29:1a:0e:68:49:24:cc:ee:f9:c8:ed:65:1d:58:50:
                    d6:ce:bc:6d:36:6a:74:64:29:5e:62:a8:68:d0:97:
                    41:10:98:a2:ec:18:90:ab:24:90:5d:54:7e:c4:4d:
                    5e:f5:19:d6:21:ab:0d:7c:02:22:fa:c2:2c:9a:de:
                    18:11:35:e1:98:71:35:c8:44:23:be:d3:00:6f:9a:
                    bf:c0:93:d7:5b:c1:86:45:3d:72:c5:f3:f7:30:14:
                    87:99:67:72:95:72:b3:98:42:7a:0e:96:82:1b:d2:
                    a8:d5:60:c7:c8:08:a2:32:8d:af:cd:06:6e:0a:8a:
                    e0:92:6b:48:7d:7e:ad:9d:d1:80:51:a7:b1:bd:2a:
                    54:c5:4b:f3:9d:57:82:ab:f7:59:aa:81:95:d6:4f:
                    8e:a2:0e:24:35:39:c3:ff:e3:d5:7a:44:ca:a6:21:
                    43:d6:66:7e:d6:59:80:be:3e:67:d9:f1:a9:84:d1:
                    1b:f0:00:9c:df:6c:1b:84:d8:72:88:17:1e:c0:22:
                    ec:e5:84:83:81:f0:e8:77:d8:2b:e0:44:a5:f7:6d:
                    f8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D6:A4:E2:3A:58:08:7D:CD:FD:7D:76:0D:BB:D6:37:79:09:A7:27
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:5e:5f:d7:23:ac:d5:e0:e2:1a:82:70:57:1b:83:99:06:03:
         ab:e7:46:dd:bc:97:8a:8b:99:8d:53:f5:9c:b9:8c:22:35:0f:
         e4:7d:bc:95:85:ef:d1:bd:79:6f:6d:84:8e:de:1b:92:41:ab:
         2f:cd:b1:70:25:cf:3f:2e:05:cc:26:60:53:84:15:14:29:0d:
         bd:28:70:e4:4f:94:49:fa:40:37:df:a9:45:18:59:65:74:ed:
         65:35:24:a8:04:b4:bb:1d:e7:79:c2:a4:71:29:aa:e0:a5:9a:
         55:8a:3c:6d:ea:5f:ac:a1:7d:84:85:13:49:92:9e:2c:9f:70:
         48:e8:3b:10:8a:83:8f:c2:be:20:4c:ea:1b:eb:24:c0:96:48:
         56:76:4c:5f:a6:69:4f:4a:1e:82:a9:e4:f3:0f:0d:38:bc:ea:
         dc:4d:bd:1f:57:b6:b3:2b:aa:86:b4:29:62:92:3f:9c:34:7b:
         b6:64:02:a0:1c:79:1d:14:81:d2:12:c7:09:e4:6a:a4:3b:cc:
         49:b2:14:74:42:5e:e5:53:3b:aa:17:21:d1:a6:08:8c:8a:f1:
         04:88:60:56:a2:e3:84:2d:3e:43:28:31:3a:8a:e3:77:09:dd:
         2f:7f:61:a0:56:91:38:dc:43:66:0f:0e:a2:da:85:ee:1b:71:
         e9:12:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:18 2023 by rpki-client on console-fra.rpki-client.org