Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34392e302f32342d3234203d3e20323034383433.roa
File:                     37372e33372e34392e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier:          wIDJrwBih5L17W6WmLiBkNLGZ4zDM74qsILel5zmvAw=
Subject key identifier:   57:12:14:8E:21:17:5D:B7:C3:C6:D5:11:44:12:EF:BE:78:2C:86:76
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       6090ED90006199F15C9D47FD9CFD461E8CF0EAA0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34392e302f32342d3234203d3e20323034383433.roa
Signing time:             Mon 03 Jul 2023 18:09:35 +0000
ROA not before:           Mon 03 Jul 2023 18:04:35 +0000
ROA not after:            Mon 01 Jul 2024 18:09:35 +0000
asID:                     204843
IP address blocks:        77.37.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:90:ed:90:00:61:99:f1:5c:9d:47:fd:9c:fd:46:1e:8c:f0:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jul  3 18:04:35 2023 GMT
            Not After : Jul  1 18:09:35 2024 GMT
        Subject: CN=5712148E21175DB7C3C6D5114412EFBE782C8676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:f6:7d:07:68:4a:16:61:f5:a1:3d:6a:24:
                    8f:af:74:0d:bd:60:c8:79:35:c4:e3:67:f7:8c:7c:
                    d3:05:cf:46:cc:e3:35:9d:11:6f:53:88:48:1b:33:
                    c5:6c:b1:a0:79:38:f0:2a:e2:b0:ba:ca:8f:52:2e:
                    a1:ec:b4:c7:66:36:04:e9:82:e4:3f:3f:5b:22:e0:
                    88:02:8b:90:81:87:e6:72:4e:da:3c:f5:a2:0e:a0:
                    0e:92:85:6e:a0:37:09:8a:8a:87:1b:22:fb:6d:ab:
                    00:81:df:bc:df:00:1d:9a:76:f8:1c:b6:da:70:b5:
                    4a:50:79:56:46:37:c2:4e:07:44:23:e9:fb:c3:4b:
                    31:f2:16:92:1e:ad:13:9c:40:95:f3:84:f9:05:ed:
                    93:88:c6:61:e4:09:b1:8b:f1:cd:80:d0:1f:12:60:
                    da:87:04:48:99:bb:be:9a:99:b0:5e:6d:e4:f0:e1:
                    0b:9d:24:50:c4:cb:5c:00:b5:79:d6:91:87:3d:05:
                    c6:69:e6:14:40:23:46:60:f5:16:07:7f:fa:f3:e0:
                    f4:f9:39:90:d2:2a:e3:a3:90:0f:11:39:9b:5f:b4:
                    66:45:38:32:36:17:95:3f:af:93:7c:e0:fe:9b:90:
                    5c:33:76:8b:39:2c:0e:da:73:67:43:b2:48:94:17:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:12:14:8E:21:17:5D:B7:C3:C6:D5:11:44:12:EF:BE:78:2C:86:76
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34392e302f32342d3234203d3e20323034383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:bc:00:ed:27:7f:fa:f8:e5:81:b6:61:26:13:43:20:19:62:
         d4:0e:9a:e5:36:e1:e6:f2:11:1e:39:8a:b5:7c:65:d9:45:71:
         13:33:52:f4:66:69:db:d2:59:da:fa:51:5c:95:45:be:64:60:
         0c:4e:f1:7c:fa:3f:3a:7c:8c:14:dd:78:d9:1e:91:cf:b4:ff:
         7f:68:ac:3a:04:f5:05:76:28:b4:f8:eb:c6:d7:6c:e0:10:e0:
         27:b7:56:94:b4:2e:11:fd:8d:eb:ad:39:72:b8:2d:1f:1c:0a:
         a7:f9:68:94:0b:ce:22:f8:9b:47:a5:da:6d:3c:9d:1a:3f:46:
         96:e6:10:43:9f:45:85:c2:47:fb:6f:96:bf:e4:57:f8:a6:d4:
         8f:fe:28:e3:68:d5:f2:23:1f:7e:a6:61:a6:34:a5:f4:5f:ca:
         5d:13:00:aa:d8:c9:4e:51:03:96:14:bf:b5:99:23:7b:ea:ab:
         88:bc:9f:dc:33:2b:63:32:74:6c:38:7f:3d:18:80:b9:4e:c7:
         04:e9:17:1e:7a:af:4a:fb:87:86:ab:43:d5:e0:55:4b:4b:1e:
         c4:06:d2:0c:20:c0:09:ff:38:fd:88:4e:0d:05:44:d6:4c:82:
         0f:ab:47:93:61:7e:ec:f4:57:ef:4a:74:da:ad:f0:32:07:f2:
         c7:70:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org