Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136302e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3136302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          IRHG/XZHhTnbK/QyWFk/dTO+8Z9uf781nZLivhtqaOs=
Subject key identifier:   2B:78:8D:2A:EA:E9:57:E4:A9:0E:F2:DA:71:04:D5:7A:26:F5:97:5F
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       2DED0E5689DCD06780B05BEEC4ABD43744753F5E
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136302e302f32342d3234203d3e20383334.roa
Signing time:             Mon 15 May 2023 07:00:03 +0000
ROA not before:           Mon 15 May 2023 06:55:03 +0000
ROA not after:            Mon 13 May 2024 07:00:03 +0000
asID:                     834
IP address blocks:        93.127.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ed:0e:56:89:dc:d0:67:80:b0:5b:ee:c4:ab:d4:37:44:75:3f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: May 15 06:55:03 2023 GMT
            Not After : May 13 07:00:03 2024 GMT
        Subject: CN=2B788D2AEAE957E4A90EF2DA7104D57A26F5975F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1a:77:49:67:60:2c:28:e8:03:6e:69:97:58:
                    fb:0c:31:b5:b0:f5:6f:e7:1a:6e:59:0f:7b:49:b4:
                    1a:2f:ef:b7:cb:73:ae:18:e5:fd:b3:5b:7e:ed:fb:
                    0d:af:02:9e:c6:28:24:be:c4:5f:5e:06:ee:07:fc:
                    0b:7f:30:2e:a3:ac:56:f9:8f:c5:93:1d:14:14:5f:
                    b6:42:5f:01:60:6e:76:a8:5f:8d:ea:f7:85:f3:72:
                    0c:45:b3:33:5e:b8:c1:54:b0:4d:b2:bd:59:59:e2:
                    bd:3e:ec:86:6e:8a:bc:cf:b5:0b:a3:cd:90:db:6f:
                    75:eb:5b:92:43:d0:ca:11:d5:60:97:28:48:62:3d:
                    35:98:fc:76:4d:21:d6:24:4d:1a:1f:5c:2c:5b:87:
                    8d:f7:31:de:8c:72:7d:01:e5:fe:4e:93:41:1b:2e:
                    8a:f6:2b:dc:cc:2d:7a:63:3c:73:f7:d0:91:67:42:
                    fc:a7:95:58:f1:d8:41:23:2b:68:48:10:11:37:6d:
                    4a:4d:78:1b:0d:5e:5f:76:a9:c2:08:fc:18:85:c5:
                    1b:71:35:93:3c:7b:24:e3:6e:46:5a:bb:8c:1e:07:
                    ab:12:c8:4f:e8:4d:f0:d4:b6:35:9b:ad:cd:8b:93:
                    02:b8:90:bb:78:f0:e9:26:d2:a8:1b:ce:fb:41:90:
                    88:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:78:8D:2A:EA:E9:57:E4:A9:0E:F2:DA:71:04:D5:7A:26:F5:97:5F
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:7e:8e:1f:d0:7e:bc:e8:3b:f7:87:ca:50:72:41:ed:2f:e3:
         e2:13:d1:17:ee:62:a7:d0:2c:ef:b9:6c:f8:65:0a:10:be:61:
         38:0c:ac:c1:77:3e:bc:10:81:b1:77:a9:55:b7:8c:eb:7d:c0:
         20:a6:c5:2d:2f:18:af:71:58:a5:99:83:0f:09:f8:3b:6e:97:
         1b:ac:b6:e0:74:b2:ad:a2:1e:1c:47:66:27:74:5d:2c:01:24:
         4c:1e:4e:d3:9d:e2:3b:87:f3:ca:6f:68:53:3e:a2:a6:6e:ac:
         51:64:e7:fc:89:34:7b:ae:ae:25:a5:30:9d:4a:b4:9f:5f:db:
         58:85:e0:63:1f:5c:6f:d9:49:c3:fa:f4:b7:91:70:9b:31:e1:
         ed:98:4e:4c:88:fa:80:a7:47:2f:d7:6a:8b:66:4b:66:c3:f8:
         2a:18:dd:96:4e:7d:17:7d:13:36:81:ef:47:4c:da:4c:c9:69:
         0d:c5:cd:e1:cf:2a:2a:25:73:68:7b:d9:fc:e0:23:98:8a:e5:
         56:81:46:d7:34:02:4c:0c:d6:05:4d:c6:b3:33:f1:3c:6f:f8:
         28:b8:54:e1:03:7b:58:ee:4d:0a:02:a3:15:8b:4b:2f:3c:c2:
         d2:53:a9:56:de:d8:6c:ae:de:cf:37:83:14:6d:18:9d:37:b8:
         e0:15:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:56 2025 by rpki-client