Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/3139332e382e3230332e302f32342d3234203d3e203631333137.roa
File:                     3139332e382e3230332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          rwrCjgSkp4Q8eSvctdLjFg3DZK1e+5h13sVma1QR41k=
Subject key identifier:   AE:5F:B3:72:50:EC:C9:84:B4:FC:0A:51:93:08:7B:89:C9:87:B6:5D
Certificate issuer:       /CN=81657b6a579ca306a926b953274e145bb7a36ffc
Certificate serial:       27A437EB2DD9769EB150887C8BCE57A51078021A
Authority key identifier: 81:65:7B:6A:57:9C:A3:06:A9:26:B9:53:27:4E:14:5B:B7:A3:6F:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWV7alecowapJrlTJ04UW7ejb_w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/3139332e382e3230332e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 26 Dec 2022 18:43:53 +0000
ROA not before:           Mon 26 Dec 2022 18:38:53 +0000
ROA not after:            Mon 25 Dec 2023 18:43:53 +0000
asID:                     61317
IP address blocks:        193.8.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a4:37:eb:2d:d9:76:9e:b1:50:88:7c:8b:ce:57:a5:10:78:02:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81657b6a579ca306a926b953274e145bb7a36ffc
        Validity
            Not Before: Dec 26 18:38:53 2022 GMT
            Not After : Dec 25 18:43:53 2023 GMT
        Subject: CN=AE5FB37250ECC984B4FC0A5193087B89C987B65D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:81:ee:c9:75:7d:2b:5f:85:c3:e6:36:64:
                    d1:d8:6e:3e:22:c4:4b:dd:a3:0e:0a:9d:7c:f9:38:
                    16:1d:e4:e7:a8:2a:5c:5b:51:3f:0c:86:2a:15:f3:
                    40:31:2d:41:4b:92:8d:55:aa:ae:01:63:5a:2c:3a:
                    4b:08:49:a0:03:a7:70:e7:45:75:06:73:b5:dc:13:
                    5f:5d:31:fc:d4:da:53:32:dc:55:91:28:e5:63:67:
                    4c:2b:7d:ff:a2:ab:e1:ca:60:3e:ac:15:f3:9d:15:
                    9b:da:e4:69:dd:21:9e:17:8e:e3:92:37:21:98:ef:
                    93:32:53:34:ea:49:4d:23:6f:94:ff:9f:23:f2:3d:
                    e2:01:93:bc:14:3f:39:0e:9a:f7:6e:5e:84:45:e6:
                    20:39:b1:95:74:4a:25:e6:bd:14:bb:af:5c:c8:0d:
                    a5:ca:5b:51:ce:1e:35:7f:65:4c:90:c7:c4:f2:f8:
                    f3:a1:a1:fb:2a:b9:64:e8:8b:38:10:90:c5:0e:47:
                    20:78:93:39:ec:1f:a3:ee:65:3b:93:86:04:ec:2b:
                    ee:ce:2d:4b:97:a2:e6:b7:aa:b0:dc:37:be:a1:56:
                    e7:ee:1e:03:08:7e:7b:99:ad:09:8d:3e:92:90:af:
                    32:2b:f8:7c:f2:5a:f2:57:bc:61:bf:a8:92:61:71:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5F:B3:72:50:EC:C9:84:B4:FC:0A:51:93:08:7B:89:C9:87:B6:5D
            X509v3 Authority Key Identifier:
                keyid:81:65:7B:6A:57:9C:A3:06:A9:26:B9:53:27:4E:14:5B:B7:A3:6F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/81657B6A579CA306A926B953274E145BB7A36FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWV7alecowapJrlTJ04UW7ejb_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/3139332e382e3230332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:29:49:1f:ef:2b:a5:34:05:3e:ea:e0:94:36:29:49:ef:da:
         c8:bc:af:1a:a5:13:f2:94:84:5f:85:aa:0a:41:70:b9:a9:11:
         43:af:4b:86:5d:18:9e:b7:a7:fa:c1:4a:e6:a6:fb:0c:98:57:
         dc:8d:53:15:0d:60:2c:7a:21:3c:69:c8:a7:90:fa:c0:a7:fa:
         10:7a:07:42:7a:7f:f5:39:a7:b7:e4:33:0d:01:44:dd:2d:ac:
         f6:83:13:41:94:f7:74:42:ef:7a:e7:a2:fc:66:6b:6f:0f:0d:
         f8:1a:77:9e:c7:d7:6a:cf:8a:8a:ca:d5:29:63:59:70:33:fc:
         c9:8e:b8:20:2f:e3:29:10:c1:a0:a2:59:67:91:56:27:24:00:
         46:19:a9:54:a8:c1:88:36:8e:56:38:14:24:c3:91:7b:da:3a:
         f1:e6:d5:56:bf:5c:5d:be:9f:9d:b0:9f:2d:af:e5:e3:9a:e8:
         24:71:1e:9d:f1:72:8a:12:75:68:09:7c:c9:37:06:cc:e8:ff:
         36:1d:b4:8a:4d:40:e5:50:8f:b6:9b:1b:c5:ea:a6:78:17:3f:
         7f:6c:12:3f:b8:55:0a:4c:c4:44:b1:55:7e:0e:e2:8f:2d:08:
         71:d8:90:0d:33:a0:cd:38:78:c8:4a:f6:24:cf:99:1a:e2:e4:
         84:e7:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:34 2025 by rpki-client