Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230362e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3230362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          EAJiYCaMCJUEbe/9/7hYjh0raeGvw74p6l0qdgnbCmA=
Subject key identifier:   D3:79:4E:1A:D6:BA:6B:4A:BB:75:2F:5D:68:1F:90:C6:0A:98:CA:7D
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       7DD3E185F65BCBE2F2DAD66BB654988547F5C1FE
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230362e302f32342d3234203d3e20383334.roa
Signing time:             Wed 17 May 2023 11:00:06 +0000
ROA not before:           Wed 17 May 2023 10:55:06 +0000
ROA not after:            Wed 15 May 2024 11:00:06 +0000
asID:                     834
IP address blocks:        93.127.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d3:e1:85:f6:5b:cb:e2:f2:da:d6:6b:b6:54:98:85:47:f5:c1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: May 17 10:55:06 2023 GMT
            Not After : May 15 11:00:06 2024 GMT
        Subject: CN=D3794E1AD6BA6B4ABB752F5D681F90C60A98CA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:9a:ca:ce:79:c5:d6:72:6a:53:f2:55:04:
                    f9:1a:f3:34:ea:2c:f0:3e:86:cd:ab:8f:0a:23:ba:
                    7e:bf:67:cf:af:0e:82:bb:25:84:82:22:2d:3f:63:
                    e8:eb:1b:53:56:af:fb:8b:2c:fc:cf:17:a4:8d:cb:
                    a3:f8:0c:51:b1:8d:c4:b4:34:7a:7b:96:51:bc:a5:
                    3d:8e:5d:50:08:51:4f:b8:e9:d3:f3:f6:41:e3:9d:
                    df:88:02:ed:83:bc:96:66:ec:47:dc:d4:8f:2f:3e:
                    1f:87:6e:f4:6f:2b:1b:39:03:b1:0f:8c:50:15:cd:
                    5f:7c:e5:a0:8b:f8:d2:d4:2a:eb:af:13:8e:fa:b0:
                    2b:1c:cd:e1:02:c6:2e:07:44:00:f9:f3:ba:e5:0f:
                    07:1e:36:89:3e:26:fb:23:85:57:2f:79:5d:ca:0c:
                    0c:b4:0c:b6:27:0e:26:70:d5:7e:11:5e:5d:97:71:
                    6f:3d:4a:47:70:26:f1:ca:0d:be:6f:36:8d:d1:dc:
                    a6:8d:e8:78:18:86:21:c2:9d:97:6b:4d:d7:7d:b1:
                    78:c1:ac:d0:b4:e0:f5:bb:aa:d0:77:9d:c7:9f:fd:
                    f3:14:07:93:0c:62:a7:f6:cc:36:4a:70:90:39:e6:
                    03:2f:5a:22:ea:3a:a1:1d:4f:59:57:7c:05:a9:ac:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:79:4E:1A:D6:BA:6B:4A:BB:75:2F:5D:68:1F:90:C6:0A:98:CA:7D
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:9f:49:f5:82:6a:3d:dd:33:bc:4c:6a:9e:79:72:a2:79:
         d7:82:91:03:24:f4:2e:bc:04:11:1c:78:32:c4:01:59:06:5f:
         92:e5:72:a1:c4:ec:2f:32:29:06:f3:1d:5c:3e:1b:ea:e7:16:
         bd:b3:3c:e6:5e:67:e6:f5:a6:b1:2e:07:c5:2b:20:a4:3e:13:
         27:95:19:b5:a0:3f:28:84:83:48:66:3f:52:ef:dc:19:1e:91:
         d3:2b:38:28:4f:60:d8:3f:e4:a1:a3:35:5f:23:20:a5:63:32:
         9b:96:fb:f2:a1:eb:38:04:cb:15:0e:c3:07:8a:d9:45:de:48:
         52:1c:50:e8:79:89:ba:06:1e:3c:1e:44:13:d6:61:8d:7f:58:
         58:ab:26:23:33:d0:89:1e:cf:04:f8:8f:c1:03:fa:9f:50:ae:
         c5:9d:bf:8e:3c:63:a7:18:7d:3c:59:a6:80:f3:dd:0d:5d:3b:
         e1:e6:a8:16:8e:d0:ef:ed:32:2b:90:f5:fc:5b:fc:b6:d2:38:
         0c:79:0a:dd:d3:4a:5f:4d:c0:02:b8:0e:cd:d0:11:65:9c:1f:
         7f:03:ca:cd:ee:da:70:48:b3:5a:42:ac:0b:97:46:c0:31:8d:
         a2:58:d4:e7:23:62:dc:0e:aa:f7:f2:0c:b0:5c:aa:0a:ef:47:
         18:fa:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:10 2025 by rpki-client