Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          IeynPfwd3+yrIkOzvVKGJb3kOCV6M/PMwl2pY6qI2Zs=
Subject key identifier:   6C:15:F5:0F:C2:07:B6:08:60:E3:B0:27:DE:1A:7A:BA:FD:35:62:19
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       7D7C7E825A16E717257F7C3C9EE568E7046341A5
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa
Signing time:             Mon 27 Mar 2023 08:27:11 +0000
ROA not before:           Mon 27 Mar 2023 08:22:11 +0000
ROA not after:            Mon 25 Mar 2024 08:27:11 +0000
asID:                     136787
IP address blocks:        185.202.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7c:7e:82:5a:16:e7:17:25:7f:7c:3c:9e:e5:68:e7:04:63:41:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:11 2023 GMT
            Not After : Mar 25 08:27:11 2024 GMT
        Subject: CN=6C15F50FC207B60860E3B027DE1A7ABAFD356219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:76:e1:bc:7c:37:7a:98:a4:88:85:63:e2:
                    7d:e9:b7:9f:22:75:d9:11:e4:66:9a:d2:45:d5:a4:
                    e7:f1:6d:1c:f7:b2:be:6b:ad:84:ed:29:1c:e5:ba:
                    a4:b1:9c:6e:df:a1:4e:d7:b0:dd:4c:f8:02:35:0c:
                    94:8b:d2:41:68:99:8d:12:2c:dd:28:8a:ab:0e:ec:
                    eb:21:5e:d0:9b:f6:6a:04:4e:fa:a9:7f:4a:00:5b:
                    72:39:95:e1:d9:06:d6:74:43:55:03:47:2c:c7:2e:
                    ee:a2:84:b1:9f:6b:12:0e:38:a5:56:c9:78:64:d7:
                    ac:ba:b5:f1:44:19:26:6f:a3:8a:63:67:eb:c7:4c:
                    e9:11:ec:26:95:e3:bf:bb:c6:87:1b:51:dd:4b:21:
                    96:ed:2d:69:77:83:bd:68:a1:a4:cb:62:19:65:19:
                    dd:75:10:31:00:9a:59:6a:c5:b7:db:4f:30:f3:24:
                    c7:89:c4:d0:11:60:e4:41:f2:a1:f1:3a:d1:6b:80:
                    00:7f:24:0d:4b:eb:12:54:3f:c9:e0:73:5c:bb:5e:
                    10:ba:01:5e:30:1d:91:42:30:35:66:d9:56:44:fa:
                    f6:d3:60:f2:ba:7b:3c:07:0b:44:85:0f:0a:a6:8a:
                    c4:88:ab:28:da:5b:de:ff:f7:91:5b:b0:3c:41:60:
                    4d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:15:F5:0F:C2:07:B6:08:60:E3:B0:27:DE:1A:7A:BA:FD:35:62:19
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d9:11:b6:05:43:54:5f:bd:f8:b8:69:f3:ec:ac:39:03:d2:
         a0:ce:8c:24:27:46:ff:9e:0a:38:61:9f:0f:10:ff:d9:e3:df:
         19:e6:52:a6:19:8c:0c:56:2a:80:70:8d:8b:fc:19:5b:29:ea:
         ca:ca:2c:4a:62:03:f2:2b:32:0a:f5:d3:89:e0:b9:1a:1a:d9:
         78:9f:cd:f2:8b:a4:c5:59:42:bf:05:99:4e:b1:52:c3:77:90:
         af:5f:f4:c7:79:5c:9a:28:49:71:cb:2b:2f:5b:61:e5:ba:5d:
         86:a6:30:27:a3:bc:4f:35:25:c5:d1:48:ed:d9:55:cf:f5:ae:
         6d:bb:7b:4e:75:05:e7:cd:79:35:89:c8:ed:36:75:b3:88:ff:
         a2:35:4e:6d:2e:72:8c:b6:8b:45:e6:4a:77:c4:ea:7b:50:1c:
         a2:9e:52:da:a4:42:1f:8f:e0:34:6a:99:d2:70:cb:65:0a:23:
         eb:62:b2:f2:c5:04:a6:38:b5:63:f4:f1:86:c0:04:bc:3d:1c:
         fc:d1:af:31:59:78:f9:d8:d5:bd:22:28:36:46:5e:1c:99:fc:
         97:8c:b6:f9:ea:ed:3b:4c:bd:9e:90:d3:e0:33:6a:ec:38:fb:
         d8:b9:a1:cd:e8:5d:e4:59:d3:03:d4:85:10:d9:d6:a2:9b:d9:
         f7:b9:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org