Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31372e302f32342d3234203d3e20323039313831.roa
File:                     39332e39322e31372e302f32342d3234203d3e20323039313831.roa (raw, json)
Hash identifier:          8SK0BTKV0RkC6E1YatzJVtTaQaxgK5YsTasdfJo6q3g=
Subject key identifier:   C8:F2:64:62:31:18:3A:27:72:4A:D6:95:74:D4:9F:A7:2A:78:E9:5E
Certificate issuer:       /CN=7a7a3a519711f6f3d9bb6f4b95008c532104d350
Certificate serial:       7F011EFB57076755CBC211FE3DB0476879B27E9D
Authority key identifier: 7A:7A:3A:51:97:11:F6:F3:D9:BB:6F:4B:95:00:8C:53:21:04:D3:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eno6UZcR9vPZu29LlQCMUyEE01A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31372e302f32342d3234203d3e20323039313831.roa
Signing time:             Wed 26 Apr 2023 14:08:19 +0000
ROA not before:           Wed 26 Apr 2023 14:03:19 +0000
ROA not after:            Wed 24 Apr 2024 14:08:19 +0000
asID:                     209181
IP address blocks:        93.92.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:01:1e:fb:57:07:67:55:cb:c2:11:fe:3d:b0:47:68:79:b2:7e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7a3a519711f6f3d9bb6f4b95008c532104d350
        Validity
            Not Before: Apr 26 14:03:19 2023 GMT
            Not After : Apr 24 14:08:19 2024 GMT
        Subject: CN=C8F2646231183A27724AD69574D49FA72A78E95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:47:43:10:d5:2c:a8:06:c1:8f:ee:d6:da:
                    7e:a1:62:14:a9:16:b6:59:09:38:5a:76:4e:01:26:
                    32:93:4f:f5:52:73:57:e8:8e:6d:9c:38:b6:8a:53:
                    b6:33:da:53:84:f8:87:51:e5:80:9a:cf:42:63:6b:
                    43:51:b4:51:13:61:98:1e:a5:83:d8:71:37:39:c9:
                    98:5f:78:6d:48:24:7c:93:70:8d:37:60:ff:99:69:
                    b0:3d:b9:51:73:cd:86:0e:8d:05:a5:1e:07:0e:8e:
                    3d:db:96:4c:1a:d0:c3:e0:9c:1d:5e:15:01:3c:c1:
                    3b:3d:7a:0f:fe:95:33:72:2b:9e:10:37:72:88:a6:
                    83:21:4d:1c:15:79:5c:d7:a8:f4:98:6c:35:bb:2e:
                    26:9a:25:93:49:ff:b2:26:5d:4d:1e:ad:db:05:08:
                    44:68:72:f8:38:30:ce:2b:66:79:3b:d7:cb:c0:42:
                    ef:c9:11:33:51:72:84:4a:94:d0:e5:cf:8a:0b:5e:
                    ae:e0:19:f6:a6:f4:0b:a9:11:e9:8b:d9:04:cc:a7:
                    82:a2:a8:7c:12:52:32:fc:43:53:71:b5:b9:df:b8:
                    32:80:6b:73:d5:82:53:29:1f:1c:9a:3a:f0:2a:8b:
                    7e:02:7e:a9:cf:98:a5:26:aa:2a:c7:50:09:34:1d:
                    5f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F2:64:62:31:18:3A:27:72:4A:D6:95:74:D4:9F:A7:2A:78:E9:5E
            X509v3 Authority Key Identifier:
                keyid:7A:7A:3A:51:97:11:F6:F3:D9:BB:6F:4B:95:00:8C:53:21:04:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/7A7A3A519711F6F3D9BB6F4B95008C532104D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eno6UZcR9vPZu29LlQCMUyEE01A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31372e302f32342d3234203d3e20323039313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:f5:88:c7:36:10:05:4d:50:dd:4d:32:00:62:11:80:70:91:
         c3:3c:53:98:33:79:fa:d6:31:5b:ac:94:fb:6b:2c:5e:e7:00:
         3b:db:1d:3c:53:0d:0b:54:df:c2:0b:9f:e7:08:f5:22:ff:46:
         2b:02:18:54:6c:9e:9d:c3:f0:6c:64:39:5a:00:64:0e:64:ca:
         c2:d8:2a:d6:99:fb:95:73:50:20:f3:93:85:9f:d6:6e:83:59:
         15:21:9c:fd:eb:d8:c9:a8:73:ec:89:80:3b:4b:ab:9d:37:52:
         d1:b5:55:c0:77:9a:70:56:df:c8:39:c5:70:fd:12:97:25:1a:
         62:44:9c:23:50:8a:84:7c:f5:2c:05:c3:c9:9a:3c:65:6a:74:
         01:80:fa:40:bf:19:a2:f2:52:95:49:d0:38:18:45:33:4a:49:
         85:3c:97:67:4d:9b:b8:52:4f:ea:ec:be:a2:5a:48:6f:91:d9:
         12:d9:b6:76:8f:93:df:4e:f0:bb:40:6f:a1:ad:7e:80:0a:24:
         77:83:04:51:4c:d3:07:58:39:bc:54:2d:bf:6d:b3:84:c3:17:
         cd:5d:73:bf:f3:51:59:c2:d7:52:82:bc:dd:4d:3c:33:11:70:
         1b:81:58:92:f9:d9:a7:5d:dd:9a:6e:e7:6c:c8:06:5c:74:d1:
         cd:e1:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:47 2025 by rpki-client