Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137302e302f32332d3234203d3e203133323133.roa
File:                     39332e3132372e3137302e302f32332d3234203d3e203133323133.roa (raw, json)
Hash identifier:          mxnFZRGMV/agRuOQTxmxun3EDUlNsrW4B/eopK40/6c=
Subject key identifier:   A8:58:D9:64:BD:7D:A5:25:60:53:EC:BD:D0:D9:EB:E7:CE:FB:9B:7A
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       4524831BFB56E7CAE54038A3A148C45EC9CDE137
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137302e302f32332d3234203d3e203133323133.roa
Signing time:             Tue 05 Sep 2023 08:02:22 +0000
ROA not before:           Tue 05 Sep 2023 07:57:22 +0000
ROA not after:            Tue 03 Sep 2024 08:02:22 +0000
asID:                     13213
IP address blocks:        93.127.170.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:24:83:1b:fb:56:e7:ca:e5:40:38:a3:a1:48:c4:5e:c9:cd:e1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Sep  5 07:57:22 2023 GMT
            Not After : Sep  3 08:02:22 2024 GMT
        Subject: CN=A858D964BD7DA5256053ECBDD0D9EBE7CEFB9B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:f8:93:17:35:35:a4:3b:75:02:6b:90:f9:
                    bd:e8:ea:c8:6b:82:9d:fc:54:d7:09:2f:c1:d7:2f:
                    71:dc:db:c9:bb:da:20:26:5e:3d:9b:74:b4:85:ab:
                    ec:6c:88:cc:75:1c:57:7a:50:db:d9:a7:0c:c3:24:
                    7a:7e:7d:cd:cc:6c:df:7e:f0:ce:62:0b:5f:fe:bc:
                    08:c7:85:1a:8f:5b:be:af:14:d3:66:7b:56:a6:2d:
                    00:87:f7:76:f4:82:50:6b:0a:4d:6a:1a:8d:6e:c3:
                    a5:44:36:25:83:ac:3b:8c:2b:0e:a2:5e:0c:42:a5:
                    7c:bc:d2:86:ae:b5:c9:48:78:88:4a:0d:b9:da:b8:
                    99:9c:37:45:a9:5e:5d:c6:40:b0:d8:d1:db:26:41:
                    8e:b3:89:36:52:a7:09:39:b5:d2:5c:5f:3c:d7:4e:
                    b1:bf:41:3c:56:38:6e:58:61:84:bd:dd:13:dd:a0:
                    24:13:8b:e1:38:10:f1:c0:8b:2b:7a:fe:1c:38:c6:
                    91:f8:52:fe:ad:77:ec:fe:80:b3:4d:c7:bd:67:4d:
                    44:70:cf:08:c0:b6:3e:b5:bf:cb:15:6e:14:09:a0:
                    c7:de:a6:c6:63:20:f2:5d:4d:d5:30:fb:df:ac:5e:
                    26:d2:f0:ec:79:d6:6b:8d:c8:92:8b:55:0a:b8:63:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:58:D9:64:BD:7D:A5:25:60:53:EC:BD:D0:D9:EB:E7:CE:FB:9B:7A
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137302e302f32332d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:69:66:21:27:aa:f7:06:48:bf:bf:38:86:37:47:01:5a:5c:
         69:29:d0:da:13:cf:71:24:a3:44:ab:9f:e2:96:82:a4:41:95:
         4a:e9:b3:ae:d7:9b:2c:3d:b7:df:13:ca:94:8d:85:87:56:e0:
         d1:8d:db:3f:9e:f8:a8:d1:50:cd:cc:6e:ce:3d:dd:5a:80:45:
         45:6c:53:97:4f:2d:cc:49:52:ab:d5:d1:fc:45:05:39:a7:5b:
         3f:58:48:a8:3b:e1:6d:95:ff:9a:80:3f:cf:df:49:1c:76:b6:
         48:f0:53:30:25:31:3f:1b:d6:f2:42:cc:f6:78:74:c6:d4:b9:
         94:fe:f6:f5:4d:a1:c9:75:88:34:0a:14:16:9c:55:99:4c:1d:
         46:e6:cd:8a:e9:fb:92:07:1b:b2:47:13:b5:7f:48:93:18:24:
         9f:80:77:97:a8:03:d8:95:26:46:cd:b4:1a:ef:94:50:6b:2b:
         30:be:ce:ad:16:98:cb:c9:5d:d3:dc:7f:41:4c:d5:4e:25:d0:
         8d:bf:d1:8f:ee:a8:19:a0:dc:ff:29:8d:f8:1a:11:a0:99:d3:
         46:c9:03:16:53:8f:e7:70:09:3e:11:2c:a4:75:e3:0d:26:67:
         d1:f8:dc:cd:66:73:a6:00:87:45:a6:bf:54:a7:7e:db:8e:51:
         ab:44:2a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org