Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20313939343135.roa
File:                     3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (raw, json)
Hash identifier:          Pj3RR3td0yNm1QOeg5LragFKYjC/rqVSM8KV2N8Hv4A=
Subject key identifier:   AB:74:79:E5:10:D2:80:6E:4D:29:B3:9F:37:3D:55:CF:09:0A:28:3B
Certificate issuer:       /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial:       29A734CB1E5EF4EF881AF9D0B7DC08D94153FEB6
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20313939343135.roa
Signing time:             Mon 24 Mar 2025 19:00:27 +0000
ROA not before:           Mon 24 Mar 2025 18:55:27 +0000
ROA not after:            Mon 23 Mar 2026 19:00:27 +0000
asID:                     199415
IP address blocks:        193.246.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a7:34:cb:1e:5e:f4:ef:88:1a:f9:d0:b7:dc:08:d9:41:53:fe:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
        Validity
            Not Before: Mar 24 18:55:27 2025 GMT
            Not After : Mar 23 19:00:27 2026 GMT
        Subject: CN=AB7479E510D2806E4D29B39F373D55CF090A283B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:4f:25:00:4f:ac:48:81:2e:0f:4a:f4:d2:
                    24:12:bc:9e:e4:2a:5f:fa:99:da:77:40:ab:02:a6:
                    7d:cb:1d:28:d5:38:77:04:c2:37:d6:4b:f5:d7:22:
                    36:77:2c:c2:b1:2d:52:f0:e2:28:7d:62:fc:0e:66:
                    3d:80:33:93:b0:19:ed:96:0f:b1:cd:33:32:21:f8:
                    a2:db:28:59:ec:f1:7b:e2:db:b6:6d:16:6c:06:d0:
                    06:c3:95:fe:54:0c:ed:e4:a2:39:84:b1:5a:e2:4d:
                    a8:71:cf:e3:4b:f6:1f:a8:32:da:db:cb:85:be:3c:
                    82:93:0c:a6:2b:2a:74:ec:12:82:fb:a4:3c:11:fb:
                    8f:3c:8e:6e:95:c4:d7:59:0f:0d:e4:75:85:6a:69:
                    db:3e:73:32:ab:21:6a:22:b9:9e:6b:6e:23:05:d7:
                    ff:60:00:0f:32:3d:b3:8c:87:8a:0b:e5:cf:5b:1a:
                    07:ad:58:84:25:00:cb:17:81:c1:60:8b:72:8c:5c:
                    bf:cb:cb:d2:2d:ed:91:3e:cb:c9:68:9e:79:21:04:
                    23:1f:5e:85:94:b4:6f:a2:7b:c9:00:6b:68:4c:2b:
                    f4:cf:34:1a:e0:9d:42:e9:c0:d5:37:ad:95:bb:eb:
                    f3:9c:44:05:5a:a3:fb:d5:4a:d2:d3:01:18:d0:f6:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:74:79:E5:10:D2:80:6E:4D:29:B3:9F:37:3D:55:CF:09:0A:28:3B
            X509v3 Authority Key Identifier:
                keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20313939343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:8f:2a:3a:70:62:52:39:e8:4d:22:a2:c7:bb:e5:85:9d:
         18:8d:b4:d6:a3:7a:57:c5:f8:b4:39:17:c3:9e:75:1e:82:9b:
         7d:c1:ff:89:9a:8d:91:54:f4:d6:f2:ac:0a:5d:0b:30:a7:b2:
         63:81:ce:e7:f0:f7:6e:00:f3:5f:92:13:e7:3a:46:6b:78:42:
         87:29:26:54:6f:e4:26:00:b4:63:d9:1d:ff:f3:83:de:c2:e6:
         12:de:31:26:08:ce:1e:dc:b2:04:16:70:fc:31:16:43:4b:74:
         6e:eb:a8:e4:d3:89:0c:9c:02:07:8d:ea:43:a6:48:45:22:05:
         5e:8f:ad:e9:e1:dc:66:1f:85:53:b5:bb:1f:41:34:e2:7c:63:
         f5:11:c2:d1:f5:d4:0d:3b:3d:be:88:00:d2:0c:51:72:d7:24:
         4e:a1:97:cb:9b:c5:38:b5:c6:f7:d3:82:00:7d:44:2d:43:3d:
         85:dc:52:8d:9e:10:c2:53:d9:04:84:5a:5d:d2:76:9d:99:a7:
         79:6f:f9:51:18:e4:97:9b:9d:22:11:05:5b:32:d5:d2:ee:4b:
         ea:10:4e:6f:c4:45:80:88:e5:2a:14:6e:5a:cf:d3:38:6b:a5:
         bc:07:f7:ee:83:92:99:a2:79:74:46:37:96:61:14:67:c5:b6:
         b2:2f:f3:a8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUKac0yx5e9O+IGvnQt9wI2UFT/rYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi
NDk0YTdiZjAeFw0yNTAzMjQxODU1MjdaFw0yNjAzMjMxOTAwMjdaMDMxMTAvBgNV
BAMTKEFCNzQ3OUU1MTBEMjgwNkU0RDI5QjM5RjM3M0Q1NUNGMDkwQTI4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ik8lAE+sSIEuD0r00iQSvJ7k
Kl/6mdp3QKsCpn3LHSjVOHcEwjfWS/XXIjZ3LMKxLVLw4ih9YvwOZj2AM5OwGe2W
D7HNMzIh+KLbKFns8Xvi27ZtFmwG0AbDlf5UDO3kojmEsVriTahxz+NL9h+oMtrb
y4W+PIKTDKYrKnTsEoL7pDwR+488jm6VxNdZDw3kdYVqads+czKrIWoiuZ5rbiMF
1/9gAA8yPbOMh4oL5c9bGgetWIQlAMsXgcFgi3KMXL/Ly9It7ZE+y8lonnkhBCMf
XoWUtG+ie8kAa2hMK/TPNBrgnULpwNU3rZW76/OcRAVao/vVStLTARjQ9uwnAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUq3R55RDSgG5NKbOfNz1VzwkKKDswHwYDVR0j
BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0
ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT
VXA3OC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEt
YTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0ZjI4LzAvMzEzOTMzMmUzMjM0MzYyZTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM5MzQzMTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wfYFMA0GCSqGSIb3DQEBCwUAA4IBAQAcSI8qOnBiUjnoTSKix7vlhZ0YjbTWo3pX
xfi0ORfDnnUegpt9wf+Jmo2RVPTW8qwKXQswp7Jjgc7n8PduAPNfkhPnOkZreEKH
KSZUb+QmALRj2R3/84PewuYS3jEmCM4e3LIEFnD8MRZDS3Ru66jk04kMnAIHjepD
pkhFIgVej63p4dxmH4VTtbsfQTTifGP1EcLR9dQNOz2+iADSDFFy1yROoZfLm8U4
tcb304IAfUQtQz2F3FKNnhDCU9kEhFpd0nadmad5b/lRGOSXm50iEQVbMtXS7kvq
EE5vxEWAiOUqFG5az9M4a6W8B/fug5KZonl0RjeWYRRnxbayL/Oo
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net