Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231372e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          NZKaIk5DUZTwrIybC0tGQYH+FeMa3STUBjyNg8ohYVM=
Subject key identifier:   6E:76:94:8F:39:D4:82:70:8E:0A:B8:33:43:76:68:89:D9:D2:2B:82
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       26C53B419161AF3DF0C0ED721C70F2543AD9CA7B
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231372e302f32342d3234203d3e20383334.roa
Signing time:             Fri 31 Mar 2023 00:00:18 +0000
ROA not before:           Thu 30 Mar 2023 23:55:18 +0000
ROA not after:            Fri 29 Mar 2024 00:00:18 +0000
asID:                     834
IP address blocks:        93.127.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c5:3b:41:91:61:af:3d:f0:c0:ed:72:1c:70:f2:54:3a:d9:ca:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Mar 30 23:55:18 2023 GMT
            Not After : Mar 29 00:00:18 2024 GMT
        Subject: CN=6E76948F39D482708E0AB83343766889D9D22B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:11:75:94:37:70:14:5a:bc:1b:61:e5:4d:27:
                    c8:8b:c8:dd:3b:97:79:48:e6:b5:43:9c:fb:ae:6a:
                    f9:07:fd:8b:e0:d8:f3:4b:e2:02:c5:7c:57:71:a1:
                    f9:ce:0d:f9:34:9e:da:23:62:5d:47:f2:85:f5:4f:
                    3f:72:23:78:11:e6:2c:ba:f2:54:e1:a6:f3:ba:49:
                    35:44:4e:1b:aa:5b:b6:d9:3e:e4:2b:bd:28:4b:8a:
                    cd:0a:c4:22:f2:4f:1d:36:f7:f0:cd:b2:15:4a:fa:
                    00:a3:4f:d3:6f:d5:ff:1a:47:8b:e6:33:44:96:33:
                    af:3b:8c:97:9a:0e:a6:9e:0f:6e:e2:e0:b8:69:16:
                    a1:4b:c0:04:50:de:ec:b6:2c:90:f7:9d:0a:fc:0a:
                    7d:c0:72:f0:18:fa:b6:73:8a:ac:b6:2a:07:67:6f:
                    8f:ae:94:6a:a8:67:13:c2:ec:15:e8:3c:dd:aa:56:
                    ff:f3:4e:ac:11:40:a4:57:0a:b4:ed:1e:4d:3d:86:
                    a5:08:c5:18:53:15:ca:a7:8b:e9:7c:95:aa:69:68:
                    a3:da:07:2b:28:eb:4d:a6:3d:44:82:95:4a:a1:31:
                    e1:6e:87:4c:51:f5:e0:e1:33:46:b2:d8:d7:28:ce:
                    2a:ac:f1:8c:a9:96:b4:2d:27:64:71:9c:b1:f7:80:
                    2e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:76:94:8F:39:D4:82:70:8E:0A:B8:33:43:76:68:89:D9:D2:2B:82
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:93:b6:07:5c:18:5d:26:70:eb:7e:43:f8:70:71:c8:00:
         34:82:0b:ea:dc:ad:2b:2b:2d:9c:41:3f:f9:2f:61:9d:5e:db:
         22:01:79:87:31:29:18:d8:a1:f4:3b:4b:5d:95:1e:f2:f8:d7:
         74:12:26:da:ce:ca:0e:7a:1a:81:e1:c2:57:37:8f:9f:39:c0:
         b0:30:56:b4:a5:71:53:75:30:10:da:20:db:3e:07:87:62:68:
         48:0a:e7:05:45:5d:5e:5e:1c:91:2a:fc:cd:b7:76:75:5f:df:
         c5:ee:c8:65:43:75:23:ae:94:0c:f6:b9:f0:71:75:a9:4b:ea:
         1d:2c:f5:5f:cd:db:f4:89:2f:b4:a1:ba:16:35:ad:88:af:24:
         1f:f6:2d:53:aa:0d:63:72:65:55:eb:df:5d:0e:10:80:79:ed:
         fb:9e:70:bd:b0:ac:df:69:52:a0:37:25:76:bd:71:43:ef:02:
         8d:33:c3:05:a6:3f:ed:8a:b9:25:df:36:3b:4b:60:b8:10:22:
         a1:79:92:ee:a8:a6:f6:0b:e9:7a:fc:fd:b7:db:e8:a1:56:d7:
         e1:32:e8:ee:4f:ea:9d:c9:b1:bb:29:0b:72:cd:41:00:d8:f9:
         d7:97:1e:fe:55:6f:c7:9e:a0:80:b8:e6:ee:6e:66:88:b5:7d:
         96:f4:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:33 2025 by rpki-client