Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134312e302f32342d3234203d3e20313437303439.roa
File:                     3138352e3231392e3134312e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          5GeX9F2iBUG/er0590KGpddiDRO6P4LNfTYGrfE5fVQ=
Subject key identifier:   C7:9D:90:64:5E:66:59:D1:B0:81:6A:38:C1:20:39:6C:69:D4:48:DD
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       523F78F498F43E06821FCE74A3CD79B581A7F2FB
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134312e302f32342d3234203d3e20313437303439.roa
Signing time:             Mon 17 Apr 2023 06:35:51 +0000
ROA not before:           Mon 17 Apr 2023 06:30:51 +0000
ROA not after:            Mon 15 Apr 2024 06:35:51 +0000
asID:                     147049
IP address blocks:        185.219.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3f:78:f4:98:f4:3e:06:82:1f:ce:74:a3:cd:79:b5:81:a7:f2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Apr 17 06:30:51 2023 GMT
            Not After : Apr 15 06:35:51 2024 GMT
        Subject: CN=C79D90645E6659D1B0816A38C120396C69D448DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:25:22:e2:eb:56:e1:64:dc:ec:79:d5:fe:
                    10:3f:49:b6:44:6c:17:1d:86:e4:2d:e8:3d:41:22:
                    91:bc:51:c0:55:3e:62:eb:49:d8:ef:8e:93:6f:14:
                    57:c6:4d:59:ee:b0:f1:b0:0b:8e:11:08:fb:6b:65:
                    ac:da:7b:52:ac:1e:98:50:c6:0e:44:6c:bc:c0:d4:
                    c6:cc:6f:ac:57:74:e8:81:1e:8a:6e:21:e1:50:e4:
                    7c:f0:b6:1f:46:2d:58:1e:f4:75:a8:d4:a5:8d:86:
                    77:e5:5d:88:13:b7:2d:ba:39:f6:21:76:8b:89:5b:
                    90:a5:80:e9:4b:75:05:b1:cb:99:cf:95:f7:ad:9c:
                    4a:96:f6:b0:b0:cb:bb:ef:58:86:ce:eb:55:28:21:
                    1e:8a:e4:7f:a3:10:c5:32:9a:12:9f:d1:5e:c7:50:
                    eb:dc:d8:08:34:9d:1f:98:10:4a:02:4b:27:28:9a:
                    0b:e5:c4:66:78:85:7f:31:ae:47:2a:d3:ff:04:07:
                    b1:b4:72:59:c6:90:b0:c7:54:7c:e5:10:c8:08:56:
                    83:92:89:8c:92:e6:67:07:45:8a:21:8b:91:e4:59:
                    df:df:e0:22:be:f1:aa:b8:1e:97:71:7d:5a:46:44:
                    88:ca:58:83:b4:1f:7a:44:e3:21:fc:06:47:6d:50:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9D:90:64:5E:66:59:D1:B0:81:6A:38:C1:20:39:6C:69:D4:48:DD
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134312e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c8:a7:b6:a6:59:9e:22:96:ea:6a:d9:cf:f3:47:cd:af:f8:
         40:26:28:e5:9c:64:74:66:e5:e4:a3:d1:be:17:46:07:b6:9f:
         12:ae:9a:01:76:14:4f:bf:b0:96:c8:7e:d3:a6:dd:c2:e0:86:
         36:65:cc:cc:e5:03:98:81:ee:d5:82:43:21:e3:5d:60:77:42:
         a7:f9:5f:2e:2c:2c:24:af:b4:1f:17:49:ba:61:c6:43:23:05:
         1b:f3:90:43:6a:38:62:34:dc:ad:0d:af:0b:7c:74:51:79:3c:
         5a:28:dc:30:e9:81:be:43:72:94:b5:61:aa:15:8d:f7:52:5e:
         44:ff:06:ce:15:39:6f:97:b1:ce:7e:a5:cd:16:74:d5:5e:3e:
         61:dd:2f:c3:2c:c7:34:75:72:23:e2:ef:d1:24:4e:db:bf:71:
         ba:e0:19:22:e8:03:a0:90:79:fc:cd:e2:26:40:09:65:3f:9b:
         73:db:c3:8c:a1:d9:03:66:01:da:e6:96:e8:69:cb:1e:ee:66:
         27:0a:be:8c:4a:47:33:6f:b0:70:d4:1b:4b:d4:7e:37:f3:83:
         42:ba:2a:f9:0f:bc:8e:eb:f8:1f:23:8a:99:f4:38:af:31:86:
         cc:57:e1:27:b2:82:af:ab:0b:b7:e7:76:1d:a0:61:6a:74:1e:
         3c:4f:f7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org