Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136352e302f32342d3234203d3e20323135373237.roa
File:                     3139332e3234362e3136352e302f32342d3234203d3e20323135373237.roa (raw, json)
Hash identifier:          aw5pn739eAKrSl+xbtL810U9IQFaT71XPGqQtu/KSH8=
Subject key identifier:   0C:C0:60:E1:C9:6E:61:3A:C6:74:21:67:C2:E6:16:BC:5F:6A:05:E1
Certificate issuer:       /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial:       1FE7CF51601ACFC08C3C03BBC0C5E612FF0A1B44
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136352e302f32342d3234203d3e20323135373237.roa
Signing time:             Sun 15 Dec 2024 16:53:48 +0000
ROA not before:           Sun 15 Dec 2024 16:48:48 +0000
ROA not after:            Sun 14 Dec 2025 16:53:48 +0000
asID:                     215727
IP address blocks:        193.246.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e7:cf:51:60:1a:cf:c0:8c:3c:03:bb:c0:c5:e6:12:ff:0a:1b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
        Validity
            Not Before: Dec 15 16:48:48 2024 GMT
            Not After : Dec 14 16:53:48 2025 GMT
        Subject: CN=0CC060E1C96E613AC6742167C2E616BC5F6A05E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:57:13:ab:c1:c7:53:80:5a:4e:2e:3e:00:
                    51:6b:18:87:4d:66:78:a5:ec:fa:30:8b:77:e5:90:
                    2a:69:5b:4e:a9:64:29:9f:d2:5e:31:b4:ae:43:f3:
                    05:be:f7:95:3b:a4:82:cf:16:d4:97:dd:e5:f7:43:
                    27:d6:ad:0d:08:6d:8e:58:12:bd:f5:9a:13:a4:9b:
                    0e:85:58:22:30:dc:38:7e:a4:f4:56:65:d1:fd:7f:
                    ef:52:a5:4b:1a:1f:0f:93:c2:86:3f:aa:36:63:12:
                    96:e3:77:53:9e:dc:d6:62:c6:37:44:89:37:fe:d8:
                    1d:5a:e0:cf:35:cc:61:90:97:72:dd:f8:28:fb:dd:
                    7f:00:eb:db:22:25:e7:3a:76:28:33:b7:ff:6f:bc:
                    89:c4:41:ce:66:26:11:3f:97:12:5c:31:d1:1e:59:
                    ab:02:9f:42:d0:32:b9:f0:22:e0:c5:bb:51:02:fe:
                    ce:b8:e7:97:75:94:4a:bb:14:60:01:f9:be:97:28:
                    54:0e:6b:b8:70:98:12:75:2f:87:ce:4a:03:01:a2:
                    31:22:9a:ec:f9:23:08:2b:07:ad:92:73:fc:d9:cb:
                    2b:f8:31:01:b1:52:2b:66:af:36:51:80:7c:b3:8f:
                    6b:2d:78:34:fe:0a:58:0e:75:28:9f:34:8e:f4:fa:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C0:60:E1:C9:6E:61:3A:C6:74:21:67:C2:E6:16:BC:5F:6A:05:E1
            X509v3 Authority Key Identifier:
                keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136352e302f32342d3234203d3e20323135373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:0b:9e:59:12:f9:a4:93:8a:5b:e8:ce:d9:3b:e2:0a:9f:
         e1:33:86:5c:38:39:8b:7a:b8:83:ea:b5:72:32:e9:53:98:13:
         8d:f8:07:97:3f:79:6e:67:9a:00:53:0a:04:98:43:7c:21:7e:
         a9:3d:0e:6f:6b:1d:35:a7:71:36:33:db:31:21:a6:61:00:51:
         9a:58:e9:71:ad:cc:a4:73:af:0f:fa:47:30:10:71:03:82:6d:
         4e:00:a1:b0:73:89:8f:c5:72:c3:4b:a4:54:be:08:07:3d:2b:
         bf:88:53:a6:9c:2f:01:90:81:6a:6f:be:23:ea:c1:e2:db:32:
         37:d3:8e:79:ce:96:82:0e:e8:a8:ea:0c:cf:6a:5b:a1:fd:e8:
         aa:87:b5:bb:48:e3:4a:5e:df:6a:2f:5e:7c:83:a4:2c:54:41:
         ee:28:49:b8:f3:46:9a:25:db:fe:a3:f1:52:75:cc:02:64:16:
         83:62:ed:97:f5:96:e6:1b:64:3a:22:25:2e:de:8e:80:7c:86:
         4c:f6:f3:1b:9c:b8:d7:0f:24:d1:5b:0f:cb:01:e0:80:03:c8:
         e0:85:5c:b1:3e:ef:20:ba:d3:27:9d:0e:f9:ba:41:ba:d6:fe:
         e6:a5:f6:c1:8b:c3:b7:62:e0:f8:0c:59:d6:a6:bc:3b:21:19:
         6b:60:87:ee
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUH+fPUWAaz8CMPAO7wMXmEv8KG0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDEyMTUxNjQ4NDhaFw0yNTEyMTQxNjUzNDhaMDMxMTAvBgNV
BAMTKDBDQzA2MEUxQzk2RTYxM0FDNjc0MjE2N0MyRTYxNkJDNUY2QTA1RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKVcTq8HHU4BaTi4+AFFrGIdN
Znil7Powi3flkCppW06pZCmf0l4xtK5D8wW+95U7pILPFtSX3eX3QyfWrQ0IbY5Y
Er31mhOkmw6FWCIw3Dh+pPRWZdH9f+9SpUsaHw+TwoY/qjZjEpbjd1Oe3NZixjdE
iTf+2B1a4M81zGGQl3Ld+Cj73X8A69siJec6digzt/9vvInEQc5mJhE/lxJcMdEe
WasCn0LQMrnwIuDFu1EC/s6455d1lEq7FGAB+b6XKFQOa7hwmBJ1L4fOSgMBojEi
muz5IwgrB62Sc/zZyyv4MQGxUitmrzZRgHyzj2steDT+ClgOdSifNI70+jEFAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUDMBg4cluYTrGdCFnwuYWvF9qBeEwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzOTMzMmUzMjM0MzYyZTMx
MzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTM3MzIzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMH2pTANBgkqhkiG9w0BAQsFAAOCAQEARfkLnlkS+aSTilvoztk74gqf4TOG
XDg5i3q4g+q1cjLpU5gTjfgHlz95bmeaAFMKBJhDfCF+qT0Ob2sdNadxNjPbMSGm
YQBRmljpca3MpHOvD/pHMBBxA4JtTgChsHOJj8Vyw0ukVL4IBz0rv4hTppwvAZCB
am++I+rB4tsyN9OOec6Wgg7oqOoMz2pbof3oqoe1u0jjSl7fai9efIOkLFRB7ihJ
uPNGmiXb/qPxUnXMAmQWg2Ltl/WW5htkOiIlLt6OgHyGTPbzG5y41w8k0VsPywHg
gAPI4IVcsT7vILrTJ50O+bpButb+5qX2wYvDt2Lg+AxZ1qa8OyEZa2CH7g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:19:48 2025 by rpki-client