Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136322e302f32342d3234203d3e203433343331.roa
File:                     39332e3132372e3136322e302f32342d3234203d3e203433343331.roa (raw, json)
Hash identifier:          LUWn7K5jfqKZsHU8c0viqaZevVKoiYxjIcwx6oaJ6Ws=
Subject key identifier:   CE:83:45:7B:F8:81:91:1D:EA:E1:5B:9B:96:4A:25:F7:1E:CA:37:21
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       31F294C73102F125AFA409A43798C05BFACC8C32
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136322e302f32342d3234203d3e203433343331.roa
Signing time:             Thu 02 Mar 2023 11:53:58 +0000
ROA not before:           Thu 02 Mar 2023 11:48:58 +0000
ROA not after:            Thu 29 Feb 2024 11:53:58 +0000
asID:                     43431
IP address blocks:        93.127.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f2:94:c7:31:02:f1:25:af:a4:09:a4:37:98:c0:5b:fa:cc:8c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Mar  2 11:48:58 2023 GMT
            Not After : Feb 29 11:53:58 2024 GMT
        Subject: CN=CE83457BF881911DEAE15B9B964A25F71ECA3721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:d3:e4:7f:4a:94:ea:e8:73:13:65:87:8d:
                    9e:c6:a2:66:0e:41:24:81:37:fe:12:ac:22:9a:72:
                    5d:b9:ab:83:3a:2f:ef:59:49:37:5d:31:91:1e:a9:
                    09:b3:7a:5a:e4:d8:e2:30:c7:65:86:c2:c4:94:e4:
                    c2:04:f9:65:79:1f:56:ff:b6:17:a1:fc:e7:28:6f:
                    b2:2c:2b:5d:d3:97:3c:5d:28:69:43:5c:f7:dc:a0:
                    18:b1:f9:c4:b4:02:f3:a6:9a:0b:7f:67:9e:3b:b6:
                    75:71:9b:4d:b1:b3:e8:e9:48:e1:3a:2e:eb:8d:e0:
                    dc:6b:16:16:3d:f0:65:c6:e9:a0:70:ad:16:9f:45:
                    67:db:dd:3b:c4:c6:3e:a7:c9:76:5c:e0:2c:ad:65:
                    72:fe:c8:05:0f:f7:e2:4b:eb:c0:1c:68:1b:ef:b8:
                    8b:9b:d7:1c:bf:19:32:24:b9:d8:c1:4f:1f:74:28:
                    61:5f:b3:62:ed:e7:69:89:5b:83:d9:d7:1e:7a:53:
                    33:8e:8b:20:5e:d9:48:5a:23:03:3c:e4:20:77:b3:
                    07:17:a0:51:aa:4e:71:12:40:39:ab:da:28:2a:6b:
                    2e:f9:7e:bc:18:49:19:5e:77:f4:9b:07:3a:7f:a6:
                    2e:1c:32:19:b0:ef:1d:cd:bf:51:2a:f6:71:cc:46:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:83:45:7B:F8:81:91:1D:EA:E1:5B:9B:96:4A:25:F7:1E:CA:37:21
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136322e302f32342d3234203d3e203433343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:29:48:6d:fe:df:dd:a2:ce:84:20:72:59:e1:9c:64:ed:
         e8:f2:b9:0e:6f:e8:e7:1e:06:f4:77:10:e6:ec:0a:54:30:44:
         36:9c:97:0f:28:28:4b:62:e2:2f:b5:8b:31:f2:43:13:a1:87:
         5b:44:aa:d7:b3:d8:f1:b0:99:3d:a3:81:4b:53:d4:af:d6:6c:
         d8:91:fa:5a:80:60:e9:e8:e2:e6:51:06:c2:f1:c9:c9:ce:3a:
         31:93:36:89:f0:8c:76:a1:c3:a7:50:03:9a:37:0a:7f:c5:90:
         e8:92:2b:f7:1f:07:c3:9f:c6:8e:71:e8:52:1e:89:0a:60:1a:
         83:70:32:ae:41:ed:ac:1a:b9:0d:38:d8:86:bc:18:8f:49:9e:
         d1:ae:f6:27:43:fc:8f:0a:66:4b:55:f7:0a:52:5a:58:af:45:
         34:bd:5e:0c:10:60:a1:92:86:eb:cc:4a:f6:06:49:d4:66:bc:
         7c:d8:3b:c1:0f:6d:90:ca:0b:88:ce:5d:de:2e:b8:1e:fb:29:
         f2:8c:f2:e4:07:3c:c2:8f:a2:8b:7d:d1:3e:1e:d9:9c:08:d7:
         f6:f1:b1:01:fc:b0:34:ee:44:45:f8:89:fe:99:2f:01:9f:81:
         b7:44:6a:99:d7:ac:e2:fe:22:a7:20:78:fe:10:bb:b4:b0:5b:
         56:c7:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org