Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136352e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3136352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          dNVMlDslRkJBUwBIkpeKhafEvobfirAQNx1rIQkiq3k=
Subject key identifier:   96:9C:06:19:FF:3D:3C:5A:51:5A:80:93:5D:A9:71:E0:D2:B8:76:42
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       1A0B3102FB5A3AEBD6FE9C7916B498C3B0BDAC6D
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 13 Apr 2023 10:00:14 +0000
ROA not before:           Thu 13 Apr 2023 09:55:14 +0000
ROA not after:            Thu 11 Apr 2024 10:00:14 +0000
asID:                     834
IP address blocks:        93.127.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0b:31:02:fb:5a:3a:eb:d6:fe:9c:79:16:b4:98:c3:b0:bd:ac:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr 13 09:55:14 2023 GMT
            Not After : Apr 11 10:00:14 2024 GMT
        Subject: CN=969C0619FF3D3C5A515A80935DA971E0D2B87642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:4a:3e:94:a6:2a:b4:ed:e9:75:b9:23:01:
                    32:ba:2e:c3:dd:1a:a2:50:b6:c4:a7:4a:f0:8f:4b:
                    e6:45:d9:60:89:56:45:7e:64:ae:74:24:ba:d9:fc:
                    12:7d:08:74:18:88:c5:89:75:b4:79:99:83:74:ef:
                    a6:37:c5:ed:35:22:80:0b:fc:c0:c9:6d:cf:57:40:
                    cd:32:f5:7d:23:a5:82:9e:41:19:52:2f:40:19:55:
                    b3:9b:8b:c8:cd:6f:f2:e7:5c:f2:ed:a2:81:55:f8:
                    7a:56:29:b0:8e:70:02:c8:f1:f4:24:47:c7:36:b2:
                    ce:9e:af:d0:e9:d7:3a:39:3f:4c:a2:73:05:21:96:
                    87:98:7a:c1:91:3d:68:b9:a5:16:73:c4:7c:03:2e:
                    26:03:73:07:ec:60:58:bf:b1:d4:70:17:cb:ff:db:
                    f2:4f:41:0f:82:7c:11:fb:a4:96:c0:db:1a:d4:2a:
                    b2:0c:09:e3:c7:4d:2c:e8:f9:30:fb:71:7c:6c:85:
                    cf:e7:09:bc:75:dc:3d:4b:d6:87:4d:b9:a1:16:40:
                    07:5c:1a:39:7f:c6:3a:93:92:ee:50:29:25:94:a5:
                    d2:d8:c2:ae:f4:75:fe:ea:8c:a8:c0:b9:50:af:c3:
                    35:c5:ac:38:60:b8:43:db:cf:cb:0e:b3:ff:b7:11:
                    a7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9C:06:19:FF:3D:3C:5A:51:5A:80:93:5D:A9:71:E0:D2:B8:76:42
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:95:58:7d:bb:ba:8b:b7:cc:ee:d6:ff:32:b7:e3:d7:63:
         ba:64:06:08:fe:9a:57:df:d9:fd:2c:30:5d:c2:3c:48:31:25:
         ec:45:48:15:33:0c:e2:02:74:1b:c1:ac:49:ec:4f:dd:84:d8:
         73:1f:42:ed:9b:de:06:41:f5:c9:d1:6f:0a:e8:07:c5:20:4b:
         7d:24:ac:8d:33:92:a6:4b:36:9f:f3:56:23:12:3e:54:df:b2:
         99:07:74:18:a2:e0:47:00:a4:83:00:99:69:7e:39:ef:cc:cb:
         c3:f1:2c:20:3b:b0:d4:04:2d:b6:98:3d:03:fb:a4:f4:db:60:
         b0:06:c3:67:02:c8:7d:2c:13:c1:8b:95:2e:ac:e4:a5:1f:df:
         3b:79:e4:27:f2:a0:21:1b:36:f9:00:aa:3d:97:6d:b4:5f:46:
         ff:a9:98:20:18:51:7e:af:3f:0a:7a:21:68:5b:3d:bd:73:35:
         fc:a2:96:9d:2f:dd:85:cf:84:e5:5f:c4:68:fd:28:e0:71:e5:
         bc:03:c8:e6:ce:bd:f1:2b:af:13:bf:14:69:23:dd:bf:3c:10:
         8c:5b:91:be:bb:b4:f4:ec:6f:51:ec:67:1b:ac:3e:37:b3:b9:
         69:40:99:52:b1:76:70:92:21:c5:7f:4c:2d:27:37:49:21:ea:
         37:3c:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org