Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          ysVCJW8FXa96Cwlm7QscCl/CWx+Fwia726uE/roMxn4=
Subject key identifier:   55:4E:69:7C:44:97:1C:B0:79:97:6B:28:0C:C3:BF:17:0B:E3:B2:84
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       43409771BEF8A8AC57EB4E504CC67907CC2AD44D
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa
Signing time:             Mon 27 Mar 2023 08:27:24 +0000
ROA not before:           Mon 27 Mar 2023 08:22:24 +0000
ROA not after:            Mon 25 Mar 2024 08:27:24 +0000
asID:                     136787
IP address blocks:        185.202.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:40:97:71:be:f8:a8:ac:57:eb:4e:50:4c:c6:79:07:cc:2a:d4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:24 2023 GMT
            Not After : Mar 25 08:27:24 2024 GMT
        Subject: CN=554E697C44971CB079976B280CC3BF170BE3B284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:e8:18:dd:96:dd:89:b1:f6:74:57:13:26:
                    c8:8c:85:dc:4b:14:2d:4d:74:0b:1f:95:3e:7f:1e:
                    38:ff:fc:9e:ae:7e:45:d3:ca:e2:71:60:47:ac:a8:
                    7c:62:cd:f6:57:5c:3e:ed:79:c8:07:ac:45:a4:58:
                    34:a7:09:ce:eb:24:49:3d:68:56:87:6f:fc:67:b3:
                    4e:45:89:f3:e6:23:68:c9:05:ad:13:5f:ec:38:8d:
                    df:e3:e4:a5:64:ad:0a:0d:69:46:a9:a1:0d:9b:9d:
                    ea:4d:24:ed:58:e1:e3:06:36:e7:48:20:12:6a:c7:
                    46:d9:fd:25:4c:d6:85:92:fb:21:2e:52:8f:78:f8:
                    e1:8e:93:8f:99:47:4e:4a:0e:c4:18:54:b6:86:e8:
                    8b:ff:bf:43:1a:3d:4a:78:96:11:14:a0:d6:1d:2e:
                    3a:52:cd:bb:6b:05:0a:9e:dc:ae:4a:ef:d0:51:7d:
                    5d:1f:7f:73:c6:11:27:68:2a:51:8e:31:6e:66:7b:
                    a5:2c:fc:e5:a7:fa:07:a8:83:43:31:1e:0c:1f:25:
                    ab:e5:58:42:08:df:1d:06:7e:04:96:30:de:a0:64:
                    11:9b:1e:02:46:db:27:2b:3e:56:85:2e:23:30:8d:
                    f4:48:68:ab:28:e7:cb:9c:c4:c6:ce:24:5c:64:4a:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4E:69:7C:44:97:1C:B0:79:97:6B:28:0C:C3:BF:17:0B:E3:B2:84
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:e9:ee:7b:93:2e:ce:6d:54:62:f2:c6:7e:8c:9f:14:27:54:
         99:5d:78:02:a7:c5:79:b7:9a:7f:85:16:7e:20:2c:2e:ab:7c:
         ec:65:d8:66:01:e1:57:6e:58:6d:92:d1:ce:cb:63:a0:f1:0c:
         68:19:ba:34:92:20:d0:35:d3:7c:94:d3:90:4a:5f:32:19:6d:
         14:b2:a3:c7:dd:35:ca:b8:5c:d7:a6:16:2a:83:97:bf:28:68:
         5a:4d:0a:3c:0a:e0:e9:cb:03:22:45:51:fb:2c:cb:21:53:bc:
         79:79:d5:0a:4f:d7:29:96:4e:ab:7a:5c:2e:9b:4c:f5:81:a7:
         0e:57:b9:3d:77:4e:cf:f6:33:ed:88:66:22:83:ad:5d:45:37:
         59:d2:ff:3c:53:35:9e:54:d3:af:24:50:c0:3d:5d:fa:11:16:
         21:5d:57:87:70:36:22:3b:0f:b3:75:18:32:dd:83:98:b1:c4:
         9f:f2:1a:cc:3d:db:b2:93:64:52:70:6a:18:d6:6b:ea:b6:28:
         7c:52:e9:09:6f:ab:63:54:36:06:a0:85:1c:4a:b5:59:ad:45:
         55:9a:06:0a:dd:3b:3c:c9:e8:3a:84:69:b7:9d:8c:b8:f1:6a:
         b8:ff:40:b7:e3:36:57:2b:ab:d1:76:94:ad:13:00:28:4a:8c:
         26:b9:24:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org