Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          vNIFSxFH6xShrzg1i7OcaMAgq1PELkL4/LPP9y9dKhU=
Subject key identifier:   FB:57:BA:99:3F:7D:BF:20:B7:C8:55:C1:B7:15:CB:EB:34:57:2D:89
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       24B1C60BB55FCC03B3E8F9C479B3BB2C56EEF714
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa
Signing time:             Mon 27 Mar 2023 08:27:25 +0000
ROA not before:           Mon 27 Mar 2023 08:22:25 +0000
ROA not after:            Mon 25 Mar 2024 08:27:25 +0000
asID:                     136787
IP address blocks:        185.222.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b1:c6:0b:b5:5f:cc:03:b3:e8:f9:c4:79:b3:bb:2c:56:ee:f7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:25 2023 GMT
            Not After : Mar 25 08:27:25 2024 GMT
        Subject: CN=FB57BA993F7DBF20B7C855C1B715CBEB34572D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:ae:34:cf:29:87:18:ca:a3:ae:3f:c0:05:
                    0e:f0:0b:15:03:f5:3b:e0:05:ba:b6:9f:2d:f6:95:
                    e8:79:b9:2c:5a:9f:6f:24:e8:b0:10:f9:ba:6a:ba:
                    68:6f:34:58:ff:57:79:35:ed:ff:56:b3:ae:c8:6a:
                    42:67:e2:b3:cb:81:a6:d4:ce:da:b4:7b:06:14:14:
                    b2:ca:61:e0:c0:26:1a:5d:76:a8:3d:27:c6:25:d0:
                    f0:62:95:fa:27:41:6a:4a:15:66:67:81:e4:53:15:
                    a1:58:e8:f7:f2:75:4e:1c:7e:29:c5:03:29:4a:f4:
                    32:0d:1e:56:e0:3d:dd:2a:8e:78:fa:d3:cb:fa:b3:
                    62:f9:da:06:36:b0:1e:28:6a:7e:af:1b:52:a9:1e:
                    5b:85:e3:12:fe:bd:c5:de:f2:83:3d:cb:1f:35:09:
                    70:8f:1e:3c:9a:ff:92:3a:52:41:92:03:3b:40:48:
                    ee:7f:70:9c:eb:93:aa:5f:7d:66:62:7a:4b:e1:ce:
                    be:63:2d:7f:3a:b9:dc:3e:0c:0f:88:5d:95:36:aa:
                    9d:8c:7e:20:e1:04:d1:30:95:6f:c6:5e:bc:5c:1b:
                    8e:32:9f:cb:8b:fb:13:66:cd:54:36:42:5f:10:80:
                    2e:a8:41:16:72:d4:5e:0c:79:02:2f:0b:d4:c1:8c:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:57:BA:99:3F:7D:BF:20:B7:C8:55:C1:B7:15:CB:EB:34:57:2D:89
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:0a:69:78:99:55:4d:86:a2:78:a0:e1:12:5c:7d:7e:d2:
         96:68:53:c4:e0:66:c6:53:c9:25:9b:91:0e:63:be:23:d1:ea:
         63:b9:11:d3:98:d9:33:97:a6:ea:ea:b5:be:02:5a:00:64:e5:
         08:8a:87:5f:4e:18:03:a5:7b:75:4f:d2:f5:e7:5d:3f:63:de:
         b7:ab:f6:34:64:30:14:62:39:4e:c3:3b:18:62:db:61:d6:87:
         87:77:27:b8:a8:dd:67:5b:a4:ed:3c:d3:c9:60:5e:7d:ea:83:
         17:cb:5e:38:4e:b4:3a:57:16:67:86:a6:de:03:07:a5:a0:a1:
         49:ab:ea:e9:e6:b0:99:c3:9b:18:8e:0d:9d:8b:b8:03:7b:1f:
         26:4a:d0:54:8f:0b:39:95:3e:e9:ad:c8:7e:28:5d:6f:9c:8c:
         ec:0d:89:0f:c5:4c:34:78:b0:92:d9:3b:62:7f:ab:56:5e:b9:
         2e:41:0f:42:ec:c9:9f:9e:9c:20:eb:19:e8:4a:75:07:69:07:
         79:9d:34:a1:7e:39:1b:d0:ee:75:40:60:e9:63:1b:52:b8:13:
         e7:c2:d3:4c:80:f2:6a:94:75:5a:83:e5:8d:81:20:fc:c5:ca:
         21:dc:6a:d6:3e:4c:9a:e6:9c:ec:f9:8b:01:73:d5:c3:ad:54:
         5b:46:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org