Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130382e302f32322d3232203d3e2038383933.roa
File:                     37372e33372e3130382e302f32322d3232203d3e2038383933.roa (raw, json)
Hash identifier:          VGLk10cBFjRMQAJ1dSUmSNjjSqcMn2XR/ZMPhhrmLEs=
Subject key identifier:   41:08:FD:6A:6B:B1:38:B1:D6:2B:CF:76:0E:B4:5F:5B:BB:CA:4A:F0
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       55A8C5DF6108ED5A6C6B876A0EB17CE6A85F0C0D
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130382e302f32322d3232203d3e2038383933.roa
Signing time:             Fri 20 Jan 2023 06:26:11 +0000
ROA not before:           Fri 20 Jan 2023 06:21:11 +0000
ROA not after:            Fri 19 Jan 2024 06:26:11 +0000
asID:                     8893
IP address blocks:        77.37.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a8:c5:df:61:08:ed:5a:6c:6b:87:6a:0e:b1:7c:e6:a8:5f:0c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:11 2023 GMT
            Not After : Jan 19 06:26:11 2024 GMT
        Subject: CN=4108FD6A6BB138B1D62BCF760EB45F5BBBCA4AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:93:b2:90:ce:a3:b7:53:94:10:ed:98:1c:b5:
                    fc:65:fe:90:a6:53:8f:c6:0b:c1:52:c1:2b:f1:94:
                    f1:a8:31:ee:c4:d3:c6:7e:76:0c:64:b6:a1:45:78:
                    df:fc:7f:1c:b5:71:87:2a:ba:3b:d6:9c:97:b2:b7:
                    8f:0e:4f:2b:a6:d9:5f:72:61:e7:79:d9:d1:eb:c5:
                    dc:ec:60:5f:7b:8d:84:50:b1:ae:cb:0c:dd:15:96:
                    f8:2c:5f:58:b5:34:b6:73:90:31:44:a5:40:86:c1:
                    3d:a9:46:70:ea:ef:cb:1e:a5:58:36:1c:a7:28:d0:
                    f0:38:b6:0e:ec:7f:b7:35:43:00:17:30:fc:0b:4c:
                    f4:cf:39:b0:94:95:5c:99:0d:54:8b:31:18:9f:f9:
                    26:d4:e8:e8:9e:26:7e:58:cb:13:cc:86:9c:64:c8:
                    27:b8:f8:af:b6:d5:38:17:6f:47:08:5c:c9:ab:db:
                    9e:21:29:99:44:d7:c2:ca:cd:2b:46:94:08:6c:91:
                    09:66:ac:ec:c8:10:6c:22:56:99:01:1b:2a:7c:54:
                    dd:e0:b5:af:f0:1b:33:8b:e4:f0:44:45:df:e1:ae:
                    0f:ef:b2:8f:eb:b2:5d:85:84:49:77:01:4c:24:16:
                    91:4a:f2:82:74:53:2d:f9:1f:f3:f3:c5:5e:15:ec:
                    d4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:08:FD:6A:6B:B1:38:B1:D6:2B:CF:76:0E:B4:5F:5B:BB:CA:4A:F0
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130382e302f32322d3232203d3e2038383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:82:2c:31:fe:14:1d:92:87:3f:95:48:c6:18:62:04:3a:6a:
         7f:99:76:fc:ec:e4:c9:fa:68:16:e7:6e:84:11:b5:db:dc:fc:
         4e:fb:5f:e9:64:b2:11:80:dc:0f:87:c9:27:9b:89:0e:fd:5e:
         33:c7:ef:48:8e:7c:7f:66:a1:20:96:8c:30:c1:09:c2:8a:c3:
         a8:49:01:ea:ef:ce:3a:af:4f:d1:96:05:7c:5c:10:18:c5:b0:
         f9:03:e1:e1:fb:cb:8c:3c:7f:0a:13:57:75:43:48:51:be:ab:
         92:bc:af:0c:60:21:13:53:52:1e:c7:b9:ea:3f:5a:4d:6e:2e:
         67:df:85:f1:dd:63:85:1e:2b:20:c8:e6:df:fa:18:26:01:95:
         a7:af:f7:3b:4a:42:7e:6f:00:d1:31:14:d6:58:e0:7c:7a:fe:
         ee:b7:8d:28:e2:ae:1b:8c:5a:4e:e4:f7:2a:54:9a:de:65:53:
         82:94:f8:ff:51:e0:8e:12:6d:06:9f:a1:be:ca:67:3a:10:d8:
         56:00:6a:a9:0e:18:8d:2d:33:75:df:0b:93:2d:bf:f7:9b:1f:
         85:4c:27:83:c3:d2:ff:f3:c5:26:e1:ff:01:b2:08:c1:52:81:
         8c:ee:25:a5:b1:71:a8:0f:ce:06:60:61:fe:61:91:00:61:fe:
         9c:41:b2:eb
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUVajF32EI7Vpsa4dqDrF85qhfDA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAxMjAwNjIxMTFaFw0yNDAxMTkwNjI2MTFaMDMxMTAvBgNV
BAMTKDQxMDhGRDZBNkJCMTM4QjFENjJCQ0Y3NjBFQjQ1RjVCQkJDQTRBRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgk7KQzqO3U5QQ7Zgctfxl/pCm
U4/GC8FSwSvxlPGoMe7E08Z+dgxktqFFeN/8fxy1cYcqujvWnJeyt48OTyum2V9y
Yed52dHrxdzsYF97jYRQsa7LDN0VlvgsX1i1NLZzkDFEpUCGwT2pRnDq78sepVg2
HKco0PA4tg7sf7c1QwAXMPwLTPTPObCUlVyZDVSLMRif+SbU6OieJn5YyxPMhpxk
yCe4+K+21TgXb0cIXMmr254hKZlE18LKzStGlAhskQlmrOzIEGwiVpkBGyp8VN3g
ta/wGzOL5PBERd/hrg/vso/rsl2FhEl3AUwkFpFK8oJ0Uy35H/PzxV4V7NSdAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUQQj9amuxOLHWK892DrRfW7vKSvAwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzczNzJlMzMzNzJlMzEzMDM4
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzgzODM5MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJNJWww
DQYJKoZIhvcNAQELBQADggEBAJeCLDH+FB2Shz+VSMYYYgQ6an+Zdvzs5Mn6aBbn
boQRtdvc/E77X+lkshGA3A+HySebiQ79XjPH70iOfH9moSCWjDDBCcKKw6hJAerv
zjqvT9GWBXxcEBjFsPkD4eH7y4w8fwoTV3VDSFG+q5K8rwxgIRNTUh7Hueo/Wk1u
LmffhfHdY4UeKyDI5t/6GCYBlaev9ztKQn5vANExFNZY4Hx6/u63jSjirhuMWk7k
9ypUmt5lU4KU+P9R4I4SbQafob7KZzoQ2FYAaqkOGI0tM3XfC5Mtv/ebH4VMJ4PD
0v/zxSbh/wGyCMFSgYzuJaWxcagPzgZgYf5hkQBh/pxBsus=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org