Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136312e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3136312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          iCe78W2TS2KcqigYuuNKrqao1ZgQ/uRrAXXw2o8XNoM=
Subject key identifier:   0E:BA:55:F5:5F:1C:AB:05:24:F5:E5:11:AE:92:02:9A:7C:19:77:79
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       1B6F81339C8BC7BC159BF9ABB879328D0101B5BB
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136312e302f32342d3234203d3e20383334.roa
Signing time:             Tue 11 Apr 2023 07:30:02 +0000
ROA not before:           Tue 11 Apr 2023 07:25:02 +0000
ROA not after:            Tue 09 Apr 2024 07:30:02 +0000
asID:                     834
IP address blocks:        93.127.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6f:81:33:9c:8b:c7:bc:15:9b:f9:ab:b8:79:32:8d:01:01:b5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr 11 07:25:02 2023 GMT
            Not After : Apr  9 07:30:02 2024 GMT
        Subject: CN=0EBA55F55F1CAB0524F5E511AE92029A7C197779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:82:c1:72:d0:fc:f8:01:57:0d:cc:ed:5e:
                    96:41:54:b1:97:90:85:a0:0a:9c:26:77:2f:6c:70:
                    88:35:45:76:48:7b:b2:fe:b8:75:1f:82:2b:d4:f1:
                    ca:82:8c:a4:d2:fa:b2:c9:44:de:56:5d:25:5f:80:
                    bb:82:d9:5c:d7:00:45:ba:ee:d2:d5:51:79:7b:6a:
                    c6:20:46:c6:fe:1b:07:61:90:00:50:48:98:fc:30:
                    55:7a:df:af:f2:c3:67:14:44:60:09:7b:17:89:46:
                    7e:a9:25:62:ba:ab:43:1a:2c:62:f8:b2:bc:2a:f5:
                    24:cb:9e:7a:0f:48:3a:6d:cc:c7:4f:f1:1c:ff:a6:
                    a4:7f:0e:a8:bf:68:41:88:2d:6a:90:af:29:44:42:
                    41:f7:73:db:1d:5d:ad:74:1d:0b:19:1f:c9:5a:5a:
                    60:48:06:ab:4b:47:59:08:0a:f4:5b:e1:39:8e:de:
                    55:b7:1c:02:da:cd:12:c6:c5:5a:c6:a2:ae:7f:32:
                    ad:67:50:95:2a:50:5e:52:e1:4f:dc:b8:08:3c:91:
                    62:71:b0:77:24:f7:a4:e4:85:7d:d3:2d:9f:06:06:
                    71:b7:ca:41:ed:e9:7b:24:9c:09:54:70:be:1c:fc:
                    df:94:5e:49:2f:00:1b:b2:67:79:86:3b:4a:e6:49:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BA:55:F5:5F:1C:AB:05:24:F5:E5:11:AE:92:02:9A:7C:19:77:79
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:b1:fd:28:fd:12:9f:de:f7:e0:73:36:07:df:86:68:05:51:
         ef:3c:fc:22:5b:f3:42:4a:b0:f3:f9:7b:b0:ff:a9:e7:a1:32:
         48:8c:da:26:2f:40:75:90:5d:ce:f4:8c:7c:2c:c6:ca:1b:20:
         65:ed:c9:43:ca:03:8a:bb:0d:0a:cb:7f:93:6e:84:99:c4:38:
         87:7d:58:0c:0d:38:62:54:5f:8f:cc:41:b0:d6:8c:f0:fc:08:
         49:0f:e6:64:6f:a9:92:f6:65:0b:2d:c2:35:3a:e3:cf:50:81:
         e6:4b:07:9f:57:aa:16:7a:ed:86:6f:af:33:be:28:46:d1:97:
         11:99:fa:ba:0e:fc:47:fa:14:3b:87:92:54:8e:16:8b:8c:f8:
         15:9e:81:0e:75:15:51:ea:70:5d:8b:07:9f:1c:eb:c2:3d:fd:
         26:30:c1:aa:ed:e2:1d:52:96:ed:43:e9:8a:4b:ed:2a:8f:24:
         a9:cd:6b:61:36:ff:e1:77:30:60:c5:81:b2:d5:dc:5a:b0:65:
         de:10:c3:4f:41:9e:c0:72:7b:cf:63:0b:3e:cb:23:90:16:ff:
         f4:5b:9b:60:1b:0f:76:c4:e8:79:87:6f:7e:20:2a:56:43:9e:
         3b:f0:8a:f9:ba:65:6f:eb:94:09:25:67:89:e6:64:57:c2:0e:
         8d:45:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org