Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137382e302f32342d3234203d3e203439393939.roa
File:                     39332e3132372e3137382e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          i6zyH7+55gnHsMwniMADqVQQiVda53r8Rc1PaMlNNLk=
Subject key identifier:   93:23:46:FF:0E:20:CF:5B:94:19:15:E5:EC:A8:B8:82:76:22:7A:91
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       6DE5FCB579245359BFDB944F5672C0CD856268D8
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137382e302f32342d3234203d3e203439393939.roa
Signing time:             Thu 26 Jan 2023 04:31:18 +0000
ROA not before:           Thu 26 Jan 2023 04:26:18 +0000
ROA not after:            Thu 25 Jan 2024 04:31:18 +0000
asID:                     49999
IP address blocks:        93.127.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e5:fc:b5:79:24:53:59:bf:db:94:4f:56:72:c0:cd:85:62:68:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 26 04:26:18 2023 GMT
            Not After : Jan 25 04:31:18 2024 GMT
        Subject: CN=932346FF0E20CF5B941915E5ECA8B88276227A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:c9:0a:48:13:d8:6a:eb:bf:f7:27:cd:43:
                    99:71:f4:ef:e8:b9:35:ae:60:ef:90:0f:2d:4b:e7:
                    a3:ef:51:ca:78:f4:a7:37:90:2d:15:5a:bf:e4:a7:
                    5a:69:71:e3:f3:7d:51:91:13:2d:d7:30:fd:79:04:
                    91:d4:51:2c:41:ae:7f:90:74:19:87:c1:47:6c:c3:
                    77:f1:1a:0d:af:a7:f9:cd:e5:c8:53:90:da:19:43:
                    c0:a2:ba:a1:5b:a4:bd:71:c6:db:d2:58:2c:18:7d:
                    38:16:53:e6:b9:f6:f7:16:96:2b:17:ce:f0:30:89:
                    88:ac:3d:ef:53:f4:b2:b6:e6:75:cd:4f:37:3b:8f:
                    2f:61:91:cd:b9:a3:09:10:db:b1:0e:9e:e3:18:7c:
                    10:d0:b9:67:dc:87:c1:f3:cb:60:ad:78:14:79:a5:
                    c9:79:54:62:d0:c6:8e:84:97:1d:5c:10:56:ed:f9:
                    12:c2:80:74:f2:2c:3a:a9:45:22:ac:72:a2:ba:f3:
                    bf:e4:e0:38:6b:28:4a:2b:38:b6:0c:79:22:b0:d9:
                    91:27:7a:ee:76:0a:86:e4:47:a2:e7:a6:a9:5a:e4:
                    3d:f1:77:7e:c5:87:47:2a:44:9a:3e:c1:d6:72:39:
                    d6:80:5d:ba:b9:f0:8d:28:fc:83:1c:5e:62:46:fa:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:23:46:FF:0E:20:CF:5B:94:19:15:E5:EC:A8:B8:82:76:22:7A:91
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137382e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:bc:1e:b8:fd:8f:2e:ea:ab:89:8e:d8:c4:72:3a:8c:ee:74:
         43:e9:f9:e8:86:7e:3c:fd:d1:f5:43:c0:f4:4f:53:41:98:4b:
         dc:94:3b:20:d7:11:23:64:a7:c5:00:26:63:0e:97:58:da:75:
         71:f2:de:5e:ca:82:a6:fb:93:08:99:86:7e:73:c8:db:ca:74:
         f1:4f:88:cd:9a:3d:a4:fc:f5:c5:a4:ee:09:1f:b2:b5:96:f4:
         ad:22:21:74:9e:98:b9:a6:62:a9:60:bc:7a:1a:89:e7:dd:8a:
         e4:f8:1f:33:09:a9:46:c6:d2:78:1a:7b:3a:83:be:d2:03:8d:
         0a:38:31:5b:0d:85:81:92:fa:2a:97:ad:b4:dc:db:fb:b9:28:
         a5:2f:27:0c:5d:09:be:23:31:fb:e6:98:38:03:7c:8b:0f:af:
         68:88:4d:50:86:40:0a:a0:44:56:8d:6f:b5:87:e4:6b:d3:15:
         19:8e:4e:be:c2:15:24:37:df:8d:97:06:93:ff:dc:f8:e2:86:
         98:7d:02:6f:b0:55:9f:35:5a:16:64:6c:55:88:00:44:e4:08:
         31:d1:16:23:da:de:94:12:fc:42:8d:6e:09:a9:bc:f6:11:c8:
         86:0f:79:c3:a3:d6:52:91:bc:ee:b1:e1:ef:47:e7:4c:c1:0e:
         d7:c3:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org