Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136362e302f32342d3234203d3e20323132363039.roa
File:                     39332e3132372e3136362e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier:          rLj9g2XPVJkO1xbbtyi3kwIQMcF7vMkWbgcf6n0t+jQ=
Subject key identifier:   72:75:B3:1A:55:96:49:F9:50:4C:7E:EB:19:D9:74:68:80:1B:7E:12
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       245C1E91B97E129D7CF529A31E6623B2E37C5EA8
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136362e302f32342d3234203d3e20323132363039.roa
Signing time:             Fri 20 Jan 2023 06:26:11 +0000
ROA not before:           Fri 20 Jan 2023 06:21:11 +0000
ROA not after:            Fri 19 Jan 2024 06:26:11 +0000
asID:                     212609
IP address blocks:        93.127.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5c:1e:91:b9:7e:12:9d:7c:f5:29:a3:1e:66:23:b2:e3:7c:5e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:11 2023 GMT
            Not After : Jan 19 06:26:11 2024 GMT
        Subject: CN=7275B31A559649F9504C7EEB19D97468801B7E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:79:b9:b1:8c:57:41:13:58:d1:b4:7a:9c:
                    bb:a6:bd:1c:95:36:d8:0d:9f:f8:60:69:b5:b9:b5:
                    87:14:22:1d:47:8a:ff:fb:65:84:45:f1:83:6a:2c:
                    05:ff:5e:ac:ba:b5:63:33:74:37:42:d7:2b:5b:c2:
                    a9:0f:9e:b6:b6:8b:ce:b6:13:37:93:81:dc:6e:69:
                    4b:cd:bc:ca:55:c1:19:0b:25:de:59:94:cf:b9:c8:
                    8d:1e:54:ce:52:de:6b:4b:ed:05:c3:99:5a:ab:05:
                    33:13:50:36:47:cb:ad:ef:84:be:03:f1:9d:81:1b:
                    02:67:f3:71:29:01:56:8e:2f:ee:cd:91:48:0b:96:
                    69:aa:cf:f6:8b:ed:d1:4d:4e:79:bd:22:d5:d0:ea:
                    93:81:4a:54:d1:f8:1e:81:99:18:02:94:fb:b7:c7:
                    8e:31:fc:43:85:25:4e:d0:3d:34:2a:58:f7:6f:12:
                    b9:cb:a4:30:2e:7c:85:10:fa:d4:0d:67:75:89:70:
                    8c:5a:82:be:d4:79:e0:9a:c6:05:22:f0:4c:b8:39:
                    bc:37:22:7e:ec:26:e8:7e:70:ef:32:8b:64:56:ff:
                    9d:a4:30:4f:d2:b6:fd:5b:32:10:ba:db:e7:1b:40:
                    11:2b:00:15:55:b5:38:43:c9:8c:7b:8b:e5:57:69:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:75:B3:1A:55:96:49:F9:50:4C:7E:EB:19:D9:74:68:80:1B:7E:12
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136362e302f32342d3234203d3e20323132363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:b3:6d:eb:8e:2a:6f:29:e7:e9:6d:16:51:47:a2:81:71:9d:
         39:a5:35:ea:9d:c8:55:d2:88:d2:3d:db:f6:31:98:c6:12:4c:
         b4:15:b5:e2:3d:89:0b:74:4f:13:ec:22:84:b1:a5:45:0f:93:
         83:73:95:12:aa:9b:ab:1e:8c:18:4b:43:93:ac:35:18:03:ff:
         87:5a:94:4b:61:97:0c:db:d3:56:0e:49:b4:48:05:0e:40:c3:
         1e:07:b3:ac:39:7f:69:b5:85:d3:90:57:1e:2b:90:a2:60:fb:
         70:68:a4:d4:f7:32:c0:38:26:c3:a3:e3:e0:75:23:e8:45:0c:
         b5:74:28:c7:a3:ee:e8:eb:0a:38:87:cb:3a:f8:ce:cd:59:59:
         f8:33:3f:55:76:7e:92:65:d2:af:c4:da:02:f2:a6:8a:49:5f:
         e2:4b:a9:76:95:f7:d7:34:f6:f6:80:52:99:73:60:60:0e:21:
         e4:d5:25:31:c8:22:78:47:7e:04:f8:5e:4c:96:41:5e:8c:30:
         c4:17:21:0a:0b:01:b1:87:3d:a4:12:23:fc:d0:a4:93:c3:11:
         a7:39:14:ac:39:1b:32:bd:6b:0b:e2:8a:25:2e:f8:1d:e9:f7:
         9e:cc:a9:87:87:96:b5:26:69:57:7c:87:1f:35:f1:b3:8d:37:
         95:d0:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org