Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137312e302f32342d3234203d3e20313337343039.roa
File:                     39332e3132372e3137312e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier:          mVwp2WMf84JMce/BqhIZVkm2Du7CmQwmP/iOAPZyTMc=
Subject key identifier:   00:A0:46:2F:C0:0F:27:1B:40:33:37:49:8A:3D:CD:56:EC:4E:BE:6D
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       0EC195500FBC032819F5E8CEEF28BDDEE95CEFB6
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137312e302f32342d3234203d3e20313337343039.roa
Signing time:             Thu 06 Apr 2023 11:33:01 +0000
ROA not before:           Thu 06 Apr 2023 11:28:01 +0000
ROA not after:            Thu 04 Apr 2024 11:33:01 +0000
asID:                     137409
IP address blocks:        93.127.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c1:95:50:0f:bc:03:28:19:f5:e8:ce:ef:28:bd:de:e9:5c:ef:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr  6 11:28:01 2023 GMT
            Not After : Apr  4 11:33:01 2024 GMT
        Subject: CN=00A0462FC00F271B403337498A3DCD56EC4EBE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:19:04:f9:46:a9:6c:00:da:49:69:55:d3:2b:
                    f8:f0:2a:23:00:2e:70:ca:8c:92:8c:83:9f:97:db:
                    c4:2a:71:61:09:83:87:06:3f:5f:3d:dd:d0:e9:78:
                    fa:05:2d:93:59:f2:29:b2:2b:dd:e4:4a:ae:3f:9e:
                    12:a9:9b:8f:cc:ac:54:40:d4:19:9c:93:e4:eb:94:
                    df:94:e3:94:42:f4:d9:1e:9e:71:5f:d8:7e:95:3d:
                    66:e0:4d:4b:97:79:a3:2c:9c:a8:cd:88:de:0d:df:
                    be:71:b4:50:25:30:62:62:44:92:00:f3:cc:e7:bd:
                    55:21:1e:98:4e:a1:34:ee:cb:5c:67:03:4c:0b:45:
                    64:f1:db:e7:13:0a:ed:b0:7c:44:b0:b4:51:87:91:
                    42:83:a0:cc:63:ad:d6:75:d7:f8:45:71:b6:f6:1e:
                    cd:15:c3:f9:a7:38:4f:84:b5:65:af:db:95:f7:17:
                    64:33:89:30:05:88:f6:d5:bb:0f:5e:70:41:1f:82:
                    ef:0e:13:45:dc:87:1b:44:2c:1a:ca:e9:e4:a1:a7:
                    ea:c5:23:f7:50:3f:aa:ec:d8:d8:52:e0:83:a6:58:
                    8d:d2:63:af:c2:74:4a:2e:3f:b1:52:fb:4c:cd:ef:
                    1c:22:9a:b4:2b:89:ee:94:5d:2c:bf:60:f8:cf:81:
                    56:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A0:46:2F:C0:0F:27:1B:40:33:37:49:8A:3D:CD:56:EC:4E:BE:6D
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137312e302f32342d3234203d3e20313337343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:6a:c1:83:74:4b:c1:54:54:3d:4e:84:14:92:08:d3:cc:b1:
         de:a7:6f:c1:3d:cf:ab:15:c0:88:fa:c8:9c:89:27:37:a4:92:
         94:19:1f:c0:25:f5:3b:78:2a:3c:55:43:90:f5:45:27:ac:48:
         63:09:b8:1f:4f:ca:36:7a:14:ca:c8:78:87:91:f6:1d:fd:19:
         bf:46:43:60:dd:e1:39:3a:4c:60:15:b6:84:d3:a7:6e:15:6b:
         5c:37:ba:bd:1b:42:6f:ac:be:80:95:3d:2c:15:31:7e:ca:86:
         99:ea:e4:9d:36:8f:fa:0e:a8:9b:2a:f3:6f:8c:be:3a:54:ca:
         b1:da:ba:05:db:e3:74:20:d2:3a:98:06:87:e8:72:c0:f5:46:
         de:73:17:67:c2:1c:f5:15:54:6b:b3:16:41:14:54:77:f3:00:
         cd:44:91:e9:1e:1f:96:fd:99:78:00:5c:3f:35:e6:4c:99:26:
         3e:0f:c4:e3:1b:9f:71:8e:79:23:2b:41:cd:20:ae:71:dc:e2:
         80:8c:dd:39:b3:95:ab:95:a2:50:06:8f:20:0c:90:92:b5:1c:
         35:c8:e9:2e:c0:1a:e9:fc:64:e1:cd:69:59:25:18:6b:c6:3e:
         b7:82:d1:c5:79:2e:fe:05:6c:46:af:c6:58:38:5c:3b:87:44:
         17:88:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org