Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136352e302f32342d3234203d3e203630373231.roa
File:                     39332e3132372e3136352e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          Puejcgv3sSe3LJFMjPXVKc57DlxezAGNp4MSV3f9wKA=
Subject key identifier:   00:4E:EB:56:1E:39:C6:10:DE:AB:CE:41:3F:73:D6:E5:44:8E:58:37
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       7B255B659B92792E5F9D2C6DE401F241AC00514B
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136352e302f32342d3234203d3e203630373231.roa
Signing time:             Thu 26 Jan 2023 19:47:43 +0000
ROA not before:           Thu 26 Jan 2023 19:42:43 +0000
ROA not after:            Thu 25 Jan 2024 19:47:43 +0000
asID:                     60721
IP address blocks:        93.127.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:25:5b:65:9b:92:79:2e:5f:9d:2c:6d:e4:01:f2:41:ac:00:51:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 26 19:42:43 2023 GMT
            Not After : Jan 25 19:47:43 2024 GMT
        Subject: CN=004EEB561E39C610DEABCE413F73D6E5448E5837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:07:70:64:51:8d:4b:e2:61:a7:4e:6e:cc:
                    e0:6a:2b:98:01:a2:84:d9:53:ff:99:f1:d4:33:3c:
                    6d:a7:52:30:33:5f:0c:9d:03:df:56:ca:43:94:0a:
                    1f:ec:3f:01:0a:58:58:25:cb:36:37:46:ad:bf:c1:
                    ac:1a:95:42:f9:70:95:af:87:0f:c2:76:85:72:1f:
                    5f:99:d8:38:9e:cb:33:34:52:f9:96:5a:83:35:57:
                    88:6b:45:9e:9a:f0:0b:bf:41:7b:0f:f0:14:d6:b3:
                    9e:db:37:05:a3:8d:04:1a:5b:77:b9:34:4a:55:b9:
                    35:56:12:df:e9:6d:ac:ba:83:88:e5:01:f4:c1:b3:
                    e9:a6:96:71:ad:6c:96:31:93:2d:19:ae:89:3f:e3:
                    44:13:8d:c2:b3:b6:93:b9:76:e5:76:ad:e8:de:8d:
                    e2:71:28:bd:9c:94:a4:d1:5f:ff:b6:6a:1c:c5:fa:
                    8c:74:f8:21:7c:a4:22:99:95:de:10:3c:4c:8d:27:
                    35:37:8b:a5:59:91:24:c9:23:a3:c7:90:23:82:cf:
                    29:08:1f:9d:10:78:b1:00:bc:d3:3a:09:82:e2:d7:
                    09:39:8b:44:01:1d:34:c9:0c:af:8f:20:bd:09:42:
                    b8:5f:e1:b8:d3:61:05:8f:5e:54:08:95:c8:f2:f5:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4E:EB:56:1E:39:C6:10:DE:AB:CE:41:3F:73:D6:E5:44:8E:58:37
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136352e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:91:2d:9a:80:e6:0a:5f:de:ff:f7:f2:0c:cb:cc:83:03:bf:
         3c:a0:8d:34:5c:df:01:cd:ab:d8:9e:19:a6:d9:a7:3d:7b:6c:
         a9:a6:16:d0:9c:47:92:bc:39:1e:02:34:52:69:d5:50:80:de:
         ac:cb:a9:2c:00:55:9d:bb:38:1a:fc:79:72:db:15:28:94:2c:
         5d:37:9a:30:80:d3:33:9b:2b:3e:38:73:56:86:ef:04:cb:db:
         ac:f3:96:ab:64:7d:76:71:71:7b:d8:71:29:16:f1:58:54:a3:
         4e:ed:69:97:bc:a2:d8:08:a8:49:40:8f:6f:ba:f4:17:09:ab:
         95:1d:ce:96:a3:b0:63:84:f1:17:e6:26:f9:aa:00:07:d1:35:
         72:de:98:65:70:5b:03:2a:9d:37:2a:c6:9c:4c:27:4d:03:66:
         04:08:38:9f:e9:23:7d:84:3f:5a:c5:68:18:66:9b:e2:4b:5e:
         7b:21:e8:56:44:9e:44:10:5b:b5:b8:e4:bd:b0:53:26:f3:b0:
         d2:a3:05:48:9f:2c:c8:c2:5b:5b:9b:1b:1e:5a:e2:45:2f:73:
         0d:bd:1f:97:a7:07:5d:12:17:cb:09:39:29:e3:e8:d1:05:ea:
         d2:b2:20:46:ec:c2:41:f6:24:8a:1e:54:9d:4c:01:db:fe:2e:
         5d:05:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:20 2025 by rpki-client