Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231352e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3231352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ksY/fsQNfjiPVMyqVTyCMRIIYCn/EOEXD26T3qW20E0=
Subject key identifier:   C6:6F:9D:D4:BE:64:8D:A6:3E:A5:7D:E3:9C:ED:1B:CF:D4:61:31:79
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       1643E6E44D8ABF2F709B8D917C336755151B38C3
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 15 Jun 2023 00:00:07 +0000
ROA not before:           Wed 14 Jun 2023 23:55:07 +0000
ROA not after:            Thu 13 Jun 2024 00:00:07 +0000
asID:                     834
IP address blocks:        93.127.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:43:e6:e4:4d:8a:bf:2f:70:9b:8d:91:7c:33:67:55:15:1b:38:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jun 14 23:55:07 2023 GMT
            Not After : Jun 13 00:00:07 2024 GMT
        Subject: CN=C66F9DD4BE648DA63EA57DE39CED1BCFD4613179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:9e:ab:38:ae:f1:15:fb:51:f4:82:e4:15:
                    9f:7e:2a:17:4d:6a:b3:fd:59:6b:29:55:64:e6:28:
                    4f:a5:1e:c7:e1:2c:a3:7b:a4:68:82:35:1f:b2:5a:
                    38:1d:08:ee:d0:77:0c:64:91:b6:cd:a5:4d:db:4b:
                    8a:c5:3d:43:0e:4c:dc:c5:43:6b:55:db:64:c7:e8:
                    6b:9f:63:7d:a3:28:38:da:bf:42:0c:bf:d3:42:6c:
                    e0:21:77:fe:75:2a:70:56:ef:d8:4d:78:d2:f6:a2:
                    f3:a4:48:da:5f:ce:16:91:d8:63:69:90:90:e5:6f:
                    44:95:8b:27:94:69:f0:4f:cc:7b:3b:31:ba:33:0f:
                    c2:7c:5f:39:b1:58:ed:04:98:2b:51:03:4d:1d:ef:
                    93:87:a2:5a:d9:6d:9a:49:3f:17:35:a4:35:58:29:
                    0e:83:2b:ab:02:7e:9d:48:39:b7:d9:29:ec:90:1b:
                    2b:45:7e:a7:9a:8f:55:ba:12:db:38:83:67:8a:46:
                    f9:da:ec:36:76:32:b5:a5:d2:14:ca:5d:8b:c0:cc:
                    5f:04:ac:35:ff:07:c9:5c:2b:c3:f3:30:72:ba:fe:
                    3c:fc:49:12:94:35:cf:1f:91:bf:96:67:a3:2f:0f:
                    08:e6:10:8f:80:e4:d7:ab:e2:9b:21:5c:55:31:0e:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6F:9D:D4:BE:64:8D:A6:3E:A5:7D:E3:9C:ED:1B:CF:D4:61:31:79
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:59:c7:15:33:2a:82:7c:36:7c:d5:75:9d:61:ab:d4:ad:db:
         fa:a4:b2:c4:8e:9f:ac:de:67:34:2f:1b:6a:0e:a0:bb:45:62:
         91:59:13:34:81:10:6b:92:32:81:c5:e3:ca:17:ed:b7:b4:2d:
         90:c3:0b:98:8c:ee:18:b0:6f:fa:4f:5f:f5:35:22:c3:60:78:
         18:82:fa:1e:14:3e:17:ed:36:59:63:d9:11:d9:0a:8b:5d:de:
         e5:fc:a5:de:bb:12:d1:65:ad:b1:bb:d6:ad:31:f8:9e:57:6f:
         b0:a5:cc:c8:ea:37:85:6a:05:0e:25:34:bc:f2:df:a1:a9:b8:
         50:80:70:4f:f5:2e:52:39:c3:13:d0:e4:c8:b9:b1:2f:4e:8a:
         3d:8c:88:98:df:d7:f4:b0:15:2f:42:f7:67:4d:12:86:27:9a:
         c8:d6:50:de:7e:25:c6:9d:c4:85:6b:a5:ab:3a:c4:dd:ce:ef:
         eb:cc:5f:bd:10:a2:15:80:92:54:c8:f8:b5:b8:f4:b0:69:7b:
         10:73:54:db:ba:58:ac:6b:f2:3b:66:00:57:bb:26:87:5e:c3:
         3d:eb:d3:62:6a:89:7e:a8:5c:33:05:26:1a:2a:4c:ca:97:74:
         a0:54:6d:d5:30:f8:30:d3:54:60:df:63:64:80:1d:5c:fe:f4:
         7f:e2:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:29 2025 by rpki-client