Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138302e302f32342d3234203d3e203439393939.roa
File:                     39332e3132372e3138302e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          LAaSkwtiFmSe4JjfajEehgDXyXVhjBriCYvxKvHET9k=
Subject key identifier:   7C:16:01:B4:22:3B:D4:7B:E0:31:51:4E:76:41:46:53:50:AE:FE:18
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       5A32E2B95D791A29C8F64B9A4B17ACCADE0C26A0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138302e302f32342d3234203d3e203439393939.roa
Signing time:             Thu 30 Mar 2023 16:41:33 +0000
ROA not before:           Thu 30 Mar 2023 16:36:33 +0000
ROA not after:            Thu 28 Mar 2024 16:41:33 +0000
asID:                     49999
IP address blocks:        93.127.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:32:e2:b9:5d:79:1a:29:c8:f6:4b:9a:4b:17:ac:ca:de:0c:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Mar 30 16:36:33 2023 GMT
            Not After : Mar 28 16:41:33 2024 GMT
        Subject: CN=7C1601B4223BD47BE031514E7641465350AEFE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:05:7c:cd:29:07:69:c5:21:18:88:47:cd:
                    d0:4c:20:04:c7:53:fa:a8:74:87:71:5c:4f:f8:77:
                    f8:6d:2c:8c:eb:3a:48:34:e0:85:4b:0e:bb:c3:a7:
                    ef:be:1e:31:05:cc:11:ac:29:d1:65:1e:34:41:74:
                    3d:5d:77:a2:24:ae:07:1f:96:68:cf:87:ce:dd:85:
                    f5:6b:11:68:50:5b:e7:2e:d1:7e:f8:58:50:dc:3c:
                    84:79:3c:01:3a:24:d8:ee:88:22:a6:8b:91:59:b9:
                    0b:91:32:9a:8a:8c:68:fb:e8:66:69:e4:79:78:9c:
                    92:81:8b:1e:3d:9d:d2:9a:2f:0f:07:f0:2a:f5:fe:
                    c9:28:d8:c9:6b:25:4a:62:ca:be:4f:63:8a:6c:06:
                    bc:35:01:d6:7c:15:b4:99:9d:6f:70:b0:a7:f0:34:
                    d5:df:f3:ad:e5:9f:05:d2:0a:96:52:f1:68:d0:fc:
                    80:de:7a:6e:e4:f8:c1:7e:df:06:73:ff:94:66:dc:
                    e2:03:e1:91:fb:01:28:f8:9f:f9:67:28:d1:37:fc:
                    ed:5c:04:b3:46:ba:f2:1b:bf:39:b1:30:44:db:f2:
                    5c:ca:8b:73:16:29:6f:ba:b1:a3:3c:14:84:28:4b:
                    25:87:20:91:cd:a7:c1:cd:5c:62:3f:1a:72:d8:09:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:01:B4:22:3B:D4:7B:E0:31:51:4E:76:41:46:53:50:AE:FE:18
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138302e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:4d:0a:a9:16:d1:d6:b4:8e:4c:9d:46:13:53:ec:f4:2f:
         7e:e7:2e:c4:89:eb:6c:94:0b:16:72:b7:0f:b0:72:15:0d:7b:
         20:f5:f8:56:ff:bc:dd:80:06:e3:ed:fd:e7:3f:23:42:d8:93:
         38:4e:ba:64:67:f0:d7:8d:da:ce:a2:dc:58:25:4a:33:a1:78:
         7c:ab:ee:c5:ff:dc:d8:d8:e2:a5:cb:8e:fc:d5:37:e7:9d:5c:
         ef:0d:35:e9:03:b1:e2:69:f3:78:aa:64:06:82:66:d5:a8:47:
         23:dc:13:a2:eb:05:a7:4d:a9:f9:c6:e3:e8:35:a6:e4:3c:42:
         cb:57:82:21:b1:77:0d:f2:13:e9:84:be:1d:ec:35:a2:55:66:
         77:e9:9e:61:1c:95:2b:61:ec:ad:dc:59:a7:e6:04:24:27:07:
         7d:9b:30:c0:b3:65:cc:db:f4:c4:73:87:4f:cf:dc:e4:35:06:
         b1:b1:76:97:30:d3:11:cb:da:33:66:b7:85:37:ba:42:ba:5b:
         3f:12:03:23:00:f1:97:48:f7:be:23:87:18:25:9c:e2:20:81:
         87:cc:73:85:69:8b:44:38:b0:97:1f:ea:65:27:f0:c1:dd:13:
         d4:32:7f:e7:9e:a7:3d:03:d2:ff:b1:cd:74:c1:05:30:69:b0:
         70:3c:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org