Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa
File:                     3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa (raw, json)
Hash identifier:          SzrUAchWOcR99rGy1Cm0PuwPcK6yJZho+mqR9crrKfk=
Subject key identifier:   F1:BD:74:60:7A:40:1B:2A:23:4B:25:68:5B:FE:36:55:09:0A:2E:7D
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       448DBA051227BB42643C54980D63BB7913AFE858
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa
Signing time:             Mon 27 Mar 2023 08:27:14 +0000
ROA not before:           Mon 27 Mar 2023 08:22:14 +0000
ROA not after:            Mon 25 Mar 2024 08:27:14 +0000
asID:                     213036
IP address blocks:        185.245.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8d:ba:05:12:27:bb:42:64:3c:54:98:0d:63:bb:79:13:af:e8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:14 2023 GMT
            Not After : Mar 25 08:27:14 2024 GMT
        Subject: CN=F1BD74607A401B2A234B25685BFE3655090A2E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:01:09:4c:a9:06:ed:a1:c2:8c:ea:87:88:
                    36:a5:04:78:ca:77:47:a2:78:25:a2:89:f0:ab:4b:
                    c4:5d:73:95:59:ab:0c:ee:e8:00:f0:48:79:60:c9:
                    fa:7b:a0:88:fb:bd:74:c2:20:38:cd:50:cf:c4:c8:
                    f5:b3:63:15:9a:53:a4:33:bc:0d:91:54:f5:c7:6e:
                    6b:a1:0f:8b:95:36:bb:9a:ef:d9:4e:23:84:23:d4:
                    8e:07:af:b6:56:1c:ab:39:07:68:4d:bd:af:c4:19:
                    9b:54:44:ff:3b:b5:39:a5:90:1c:8a:67:e0:69:04:
                    a7:d2:02:77:7f:d2:67:8c:8f:84:c4:8e:fc:3b:02:
                    61:82:48:2b:31:5b:5d:d1:da:a3:0c:6c:d6:7e:e4:
                    68:b6:e4:44:75:28:9e:ea:d1:f6:81:aa:8c:a7:b8:
                    2a:ae:8b:b7:3c:4a:dc:73:4f:52:3f:9d:42:89:56:
                    bb:b5:7a:91:79:43:c9:78:97:ef:17:3f:25:96:7c:
                    7a:34:d6:be:0c:f0:fe:8a:83:e9:25:08:63:0e:0f:
                    f1:0c:1c:b0:21:bf:59:4c:24:3b:12:cd:a7:25:ea:
                    2a:6f:15:fd:e5:87:af:da:2c:4e:a1:55:87:ff:1d:
                    e6:85:c5:3c:e5:99:8e:7a:63:4c:ca:24:5d:f5:4f:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BD:74:60:7A:40:1B:2A:23:4B:25:68:5B:FE:36:55:09:0A:2E:7D
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:62:a0:c0:9e:af:f6:f3:78:19:06:82:43:08:43:4d:e3:5f:
         f0:81:13:aa:15:32:3b:62:64:b5:0e:1f:92:2d:ae:43:45:55:
         dc:be:67:03:35:ef:03:d8:08:28:35:0d:f7:84:f1:e2:af:13:
         69:b2:72:6d:36:94:5b:4c:20:69:b5:11:34:41:f3:90:3c:a1:
         b1:2f:b3:07:e5:7e:42:33:46:ac:cb:8f:b7:9d:8f:fc:2d:d6:
         1e:e6:f2:91:37:33:7b:c2:51:d8:eb:be:f3:2a:49:de:19:dc:
         fd:99:68:f9:0d:5a:52:65:72:e3:0e:33:0b:2d:0c:98:0d:a5:
         80:85:23:64:3a:e8:6c:cc:eb:3b:7a:00:5b:38:e7:37:9b:90:
         61:71:60:d3:2d:0d:4c:ae:85:0b:ca:ba:fd:a3:b7:4a:ab:a5:
         13:c1:88:d0:a7:ea:ba:2d:d2:9b:36:66:4b:4f:4f:d7:4b:7b:
         26:09:cc:e5:ee:73:a5:e7:6d:00:1c:78:94:53:42:fa:44:29:
         9d:28:63:a8:af:ed:ef:df:26:2e:d9:10:66:1e:a4:e6:87:96:
         6b:90:34:74:d0:19:18:8d:97:b5:6e:1f:34:60:16:b3:b0:ab:
         e9:e4:25:3a:f5:1f:8c:5f:2b:46:d0:8c:42:d8:e6:a0:5b:d9:
         91:bf:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org