Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa
File:                     3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          wHc24ldXFueAue8SmGaTgy1TGz9c4XYDM6WT2I8du10=
Subject key identifier:   B1:C1:18:8F:E5:60:39:4B:30:A4:65:7A:9A:78:33:86:4D:10:B9:65
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       5F9639B20B89C967F8BA95F5CA326040B68752CC
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa
Signing time:             Mon 27 Mar 2023 08:27:20 +0000
ROA not before:           Mon 27 Mar 2023 08:22:20 +0000
ROA not after:            Mon 25 Mar 2024 08:27:20 +0000
asID:                     201341
IP address blocks:        185.237.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:96:39:b2:0b:89:c9:67:f8:ba:95:f5:ca:32:60:40:b6:87:52:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:20 2023 GMT
            Not After : Mar 25 08:27:20 2024 GMT
        Subject: CN=B1C1188FE560394B30A4657A9A7833864D10B965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:47:e0:ed:d7:42:1b:6b:ce:55:85:b4:1f:3d:
                    40:81:63:80:69:6d:49:30:f3:83:fe:c9:3b:5b:5e:
                    ad:bc:01:9e:27:c5:a1:e9:cd:c9:a9:c4:14:5b:a2:
                    8e:e1:6d:de:32:97:a7:2e:7d:9e:18:3d:da:cc:00:
                    65:b3:6e:24:0f:a5:ea:8e:7b:55:51:75:25:7a:07:
                    1a:f3:fc:e6:10:f4:ba:47:9c:53:38:df:67:d9:ab:
                    80:40:31:40:1f:ac:ec:0e:6f:78:7d:df:3d:d1:4a:
                    a6:83:61:51:06:4e:2a:c6:3e:5e:1d:7f:50:4f:fc:
                    11:c4:68:e6:65:d6:2e:07:dd:e8:aa:b3:a0:df:9e:
                    40:10:76:70:f1:04:a0:8f:1a:17:3c:89:c2:b3:99:
                    3d:9e:b0:e4:20:25:94:2f:60:29:f8:31:94:a8:f7:
                    33:4b:04:98:16:4d:1e:be:a6:e2:fc:6a:a7:f5:f4:
                    b8:57:c1:fa:02:59:66:f9:53:2d:31:ad:b2:9a:2e:
                    8c:d3:de:6d:ee:cd:a4:80:9d:7c:52:74:da:a3:df:
                    d5:5c:b4:d4:0a:bb:2d:f6:37:25:af:4d:0e:3f:e8:
                    ce:aa:81:83:46:7a:69:e1:d3:6d:64:b3:ab:15:97:
                    9a:c0:b8:58:21:38:57:6d:b0:60:21:b3:8d:4f:f3:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C1:18:8F:E5:60:39:4B:30:A4:65:7A:9A:78:33:86:4D:10:B9:65
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:08:61:01:9b:9f:8a:a4:7d:ef:d3:01:d2:eb:63:34:01:f1:
         85:91:31:fc:a9:e9:99:4c:02:ba:85:57:a2:bf:66:06:89:91:
         71:05:fd:fa:9b:4d:d1:76:c0:1b:1d:20:a9:c7:cc:8b:7a:2a:
         05:97:38:94:4f:0e:1a:3f:5b:aa:65:89:d5:99:0b:68:8f:af:
         b9:ec:05:0c:b9:cc:b6:1c:7f:0c:88:fb:5a:60:9f:98:f3:8f:
         99:cd:13:5d:78:86:9a:6a:a0:12:7d:a4:f1:73:be:2d:54:bc:
         28:56:6a:33:b5:d2:62:f6:7e:e6:18:4c:53:d6:71:66:bf:71:
         0f:54:02:a4:d1:39:73:08:88:ad:14:9d:7b:d8:44:6e:cd:e9:
         ae:bd:50:6a:e8:29:11:5c:c6:56:69:e8:cc:73:e8:73:b5:1e:
         91:9e:70:46:9e:d9:e3:10:45:67:37:24:3a:2f:94:80:25:1c:
         d8:1b:12:21:95:4b:d0:ec:a2:a4:88:e1:73:97:31:87:76:ef:
         23:69:30:39:5d:6b:d9:83:87:ad:ec:cc:41:02:a2:66:97:eb:
         38:c5:b6:68:15:ab:b5:6d:4f:71:45:e8:cd:6a:0e:1c:48:7b:
         aa:e0:48:a3:cd:96:01:ec:26:b5:74:ce:8b:97:9c:4a:88:a1:
         91:44:ac:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org