Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138332e302f32342d3234203d3e20313336373837.roa
File:                     38332e3133362e3138332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          NPDIN1h9+iRYqIYQ0puWDn0MZMOSiTYz2nzLYNP53QQ=
Subject key identifier:   BB:5A:D4:B0:EA:19:F5:57:0E:3B:E9:DC:5A:5D:85:58:7E:59:85:57
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       15F98C33CEE9C7A4D3E5E8B672C08D7F12A6D242
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138332e302f32342d3234203d3e20313336373837.roa
Signing time:             Sun 11 Jun 2023 10:58:48 +0000
ROA not before:           Sun 11 Jun 2023 10:53:48 +0000
ROA not after:            Sun 09 Jun 2024 10:58:48 +0000
asID:                     136787
IP address blocks:        83.136.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f9:8c:33:ce:e9:c7:a4:d3:e5:e8:b6:72:c0:8d:7f:12:a6:d2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Jun 11 10:53:48 2023 GMT
            Not After : Jun  9 10:58:48 2024 GMT
        Subject: CN=BB5AD4B0EA19F5570E3BE9DC5A5D85587E598557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:82:96:25:5b:9b:a9:1e:4d:52:39:23:a1:
                    40:f1:29:cf:0a:55:5f:57:03:39:90:1c:40:05:8f:
                    4f:f2:17:cd:51:9b:5e:bd:e7:f5:9f:ba:db:c3:18:
                    0c:de:2e:b9:6f:86:f0:55:b9:b4:0b:b8:70:41:58:
                    e8:b7:9b:05:8e:3a:27:2c:fa:73:fc:b3:8b:55:bd:
                    31:16:cd:1d:a5:2e:e1:bd:0a:8e:7e:9f:69:d5:15:
                    0e:92:75:52:1f:09:1e:06:ac:dc:bf:b2:fe:06:b3:
                    f2:84:fc:d9:31:59:92:ff:ff:7c:6b:c5:b0:3a:50:
                    d2:fa:ec:d6:b4:01:f3:ae:65:b8:9d:2c:ec:94:e8:
                    1c:96:43:f3:bd:73:0a:ed:a3:c0:42:5e:ad:dd:93:
                    b7:ee:20:5e:f7:a7:20:73:1b:1f:1f:61:36:1b:c7:
                    22:01:39:0a:fe:00:d6:7e:65:26:2a:51:d3:bc:ea:
                    d1:85:9e:15:96:d6:15:ad:1e:00:66:91:74:66:0e:
                    8a:39:1a:77:b9:19:c6:4f:3a:b4:ec:97:d3:96:99:
                    af:a1:97:e6:e3:62:8d:c5:99:06:2c:d2:46:e5:54:
                    f4:84:c5:41:1e:b1:f6:cb:40:b7:a9:5d:61:b5:23:
                    f5:45:c2:1d:56:39:dc:b0:de:c6:61:a3:9e:5e:5a:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5A:D4:B0:EA:19:F5:57:0E:3B:E9:DC:5A:5D:85:58:7E:59:85:57
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138332e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:8a:6a:37:6d:98:f0:e9:3f:7e:7d:29:e1:46:49:b7:14:93:
         a5:9a:54:e2:de:df:bc:0b:bb:ec:67:07:c0:fc:4f:5c:0e:84:
         83:0a:f3:c4:12:33:13:67:25:94:33:a7:7d:c1:a6:74:23:a9:
         4e:c2:dd:da:be:70:2d:bb:f5:b5:64:e0:c9:d2:ac:a6:1b:57:
         07:af:80:51:3c:65:f9:df:ec:49:3a:0f:bd:84:77:15:b1:06:
         40:a1:7f:79:32:f8:4a:b8:e0:38:c2:a7:90:94:3d:6e:6e:ff:
         dc:b5:e1:31:24:9c:6e:d8:3f:71:0f:57:2e:71:12:23:32:6e:
         e8:05:b3:2a:78:ab:31:0b:91:51:a5:95:94:21:95:37:c1:5c:
         ed:38:b1:9b:a0:ba:ec:15:5a:e7:3d:ab:e6:99:e2:f2:01:b6:
         e9:bb:fe:8b:f6:89:67:d0:23:9c:38:31:3f:96:41:79:45:5b:
         08:2b:41:19:d4:4e:f0:a5:62:84:59:e0:68:b2:8e:c0:3c:40:
         3c:ef:f9:04:6b:a0:2b:b8:0c:89:13:da:f2:ae:aa:d3:f5:16:
         14:7f:ec:b4:49:5e:4d:18:6c:01:e1:8f:e0:67:fe:71:10:96:
         22:e0:1b:2f:57:04:15:eb:82:2f:8d:ee:e5:91:e9:bd:16:f1:
         d0:d2:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org