Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35372e302f32342d3234203d3e20323034383433.roa
File:                     37372e33372e35372e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier:          Fr/lLQf4cepCtwYdlj2gPllCL5xkCCYLZWIiXnv4fMo=
Subject key identifier:   1E:1C:4D:A2:55:88:36:C8:C3:CD:01:2B:6E:FA:67:33:00:DE:C8:63
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       1AABCAD89AD634DD3D3ADDBD02B7F29D32B344FE
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35372e302f32342d3234203d3e20323034383433.roa
Signing time:             Wed 21 Jun 2023 08:05:49 +0000
ROA not before:           Wed 21 Jun 2023 08:00:49 +0000
ROA not after:            Wed 19 Jun 2024 08:05:49 +0000
asID:                     204843
IP address blocks:        77.37.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ab:ca:d8:9a:d6:34:dd:3d:3a:dd:bd:02:b7:f2:9d:32:b3:44:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jun 21 08:00:49 2023 GMT
            Not After : Jun 19 08:05:49 2024 GMT
        Subject: CN=1E1C4DA2558836C8C3CD012B6EFA673300DEC863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:e7:ab:1f:a3:95:94:53:75:fb:3d:9e:8d:
                    4c:05:9e:df:ac:37:69:f4:73:0b:40:36:64:59:73:
                    c1:3d:0e:bb:3b:52:f5:79:25:0a:ea:c0:ec:19:21:
                    20:b2:f9:83:05:fa:b6:09:f2:dc:93:7b:a3:44:92:
                    f1:70:dc:73:e9:28:47:ea:e6:7c:e1:90:ea:12:a0:
                    9c:81:e0:8d:57:01:48:13:bd:07:74:ad:97:87:e0:
                    02:06:65:c0:f6:dd:5d:05:0e:c4:49:1e:5f:33:d0:
                    b9:79:01:a7:25:1b:f1:e0:64:1d:ab:e2:a2:b5:96:
                    a1:b1:f9:75:42:91:7e:3d:13:a3:07:b6:8a:b1:c7:
                    6b:b0:87:5e:53:bc:e2:4e:5e:21:08:40:95:56:09:
                    2e:55:1a:eb:ac:3e:8a:b8:41:f5:8b:d4:af:ea:39:
                    04:84:77:60:91:5f:ff:36:1b:38:0d:63:b4:c6:7a:
                    4f:5a:4e:60:c2:e7:83:e4:9d:f3:00:2e:84:9d:18:
                    c4:56:2a:1d:99:4a:0f:e1:31:7d:cd:1a:4b:93:10:
                    03:db:27:22:a3:cc:a4:d8:df:60:e2:be:6b:9a:1e:
                    40:49:91:66:6c:74:71:4e:ba:d7:44:ef:b9:37:ae:
                    e6:2f:0a:ae:35:b6:d1:dc:ff:a6:b4:84:3d:8c:b8:
                    34:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1C:4D:A2:55:88:36:C8:C3:CD:01:2B:6E:FA:67:33:00:DE:C8:63
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35372e302f32342d3234203d3e20323034383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:25:aa:a2:3b:f6:9f:40:fc:3f:96:dc:32:f5:bb:f0:11:c7:
         dd:f7:20:3b:39:10:c6:d5:82:51:d9:89:43:67:bc:d0:a4:82:
         7b:48:62:ff:60:77:2b:e0:be:62:9b:19:c2:e1:e6:a5:34:18:
         01:af:bc:90:fc:53:59:4e:38:69:4a:dd:ba:8a:cb:19:76:93:
         73:60:70:33:5d:ac:19:b0:93:4b:60:56:98:cf:3c:83:27:4c:
         40:ee:72:e8:50:e7:e6:6c:34:24:0d:2d:ce:c5:6f:be:50:db:
         1e:5d:02:68:7c:90:ec:f3:05:5d:7c:e7:5c:16:46:4c:a1:63:
         2d:3f:53:b0:a4:fe:ba:b9:fe:08:70:25:8b:56:21:ad:c3:3a:
         d2:ec:64:cb:10:f5:fb:26:3d:26:e5:ab:60:14:25:61:df:da:
         57:33:c9:6c:dd:a4:1d:c4:ac:d4:4c:19:92:16:32:01:06:38:
         2a:7b:f6:3e:5f:58:62:68:8b:60:4e:e3:ea:2b:55:d6:67:db:
         9b:1b:7e:0e:c7:24:d0:05:19:7b:e9:9b:93:62:a9:89:f3:8c:
         16:f5:35:92:d6:ae:8e:69:42:47:24:06:9e:09:0f:39:b1:87:
         89:ac:83:31:20:d3:6e:ec:f8:63:ae:a3:2d:c5:89:f6:4c:ae:
         a7:d8:9b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org