Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138302e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3138302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          hMcZe4be4JFxZnJx1GIAvOUL/l+YMhDV+ybTB1HYp0o=
Subject key identifier:   F5:F3:80:7C:59:46:A4:1A:3C:65:DE:61:42:16:4A:31:8F:4E:C1:89
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       4120101CA6924865D24FBD2D7DC7713512FC6F53
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138302e302f32342d3234203d3e20383334.roa
Signing time:             Wed 31 May 2023 00:00:21 +0000
ROA not before:           Tue 30 May 2023 23:55:21 +0000
ROA not after:            Wed 29 May 2024 00:00:21 +0000
asID:                     834
IP address blocks:        93.127.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:20:10:1c:a6:92:48:65:d2:4f:bd:2d:7d:c7:71:35:12:fc:6f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: May 30 23:55:21 2023 GMT
            Not After : May 29 00:00:21 2024 GMT
        Subject: CN=F5F3807C5946A41A3C65DE6142164A318F4EC189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:55:3c:31:94:61:e5:1a:90:8c:68:05:56:
                    99:5c:a9:59:56:62:39:b5:3e:3d:a0:f4:00:9b:76:
                    6a:04:c1:00:fe:2b:fe:f6:1c:14:4c:44:b4:14:4e:
                    1a:cb:2c:46:ae:3a:58:12:d6:7a:c5:45:86:4b:4b:
                    43:46:d6:2d:9d:b4:ea:62:1b:48:01:49:ae:18:7f:
                    2a:c4:b4:a6:1c:92:a3:65:7b:f7:e0:37:24:9b:b3:
                    1c:9c:60:4f:21:68:a4:6d:0c:29:2a:c6:78:5c:ec:
                    b0:b0:9a:ff:99:2e:44:b1:35:ae:df:20:64:03:99:
                    b4:98:65:d2:c0:3d:b9:1f:ce:97:91:33:0d:04:97:
                    7f:af:d9:70:2a:0d:85:dd:5f:70:69:16:83:3f:ba:
                    53:d5:ec:17:c5:ec:e1:59:39:fb:b8:15:0f:ae:6a:
                    a5:54:12:c6:fc:59:c1:b8:de:15:60:b4:c7:dc:d0:
                    20:a5:e2:22:ec:6a:8b:30:5b:48:71:f1:67:e2:0e:
                    c1:9e:e0:85:33:c9:bb:3c:00:05:9c:6d:5c:60:d2:
                    64:ae:bd:b5:14:e6:a4:9c:9f:85:f5:8b:0d:d1:45:
                    b5:9a:ae:dc:5b:32:3c:f6:85:08:27:4a:51:6e:dc:
                    f7:2a:15:26:43:27:ec:41:b3:ac:05:d7:be:39:47:
                    4c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F3:80:7C:59:46:A4:1A:3C:65:DE:61:42:16:4A:31:8F:4E:C1:89
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:63:36:f9:74:58:e9:71:53:bd:95:c2:63:f8:e4:99:c2:
         37:5e:1b:2b:cc:3c:72:cd:36:77:35:c9:8a:cf:66:15:65:dd:
         e1:81:b7:48:14:a2:a7:7d:c2:54:93:29:c8:76:05:52:a5:a0:
         b3:92:40:5d:d5:2b:61:d6:10:16:41:2a:49:9f:77:3f:f5:ae:
         8b:10:7c:0e:9e:cb:e8:38:06:ec:99:e5:13:37:ad:41:c5:b9:
         47:64:28:e9:c4:72:1b:00:7b:a5:80:5c:b3:14:bf:7a:95:98:
         70:69:30:e1:28:d9:51:54:d3:ec:2c:ec:e5:9e:20:34:9a:df:
         d1:35:02:b1:60:87:5a:91:2b:11:33:f6:14:80:47:68:00:69:
         2c:56:4f:fe:7e:a8:c1:bd:22:bc:15:6b:a8:cb:57:02:03:52:
         38:00:30:66:63:5a:ba:ed:a8:e8:54:66:8c:f4:15:7a:88:1c:
         4d:48:13:1a:0f:93:ea:dd:ba:df:17:4a:43:34:e0:f8:40:b8:
         78:54:55:0d:28:ac:d0:41:23:a4:70:2c:45:4a:ea:18:b5:f5:
         be:97:2e:8d:dd:57:8b:30:fd:5b:01:56:38:b9:d1:b4:08:54:
         92:07:e6:48:a1:a4:d2:b6:b0:bb:4a:1d:14:61:69:b2:1b:30:
         3c:e7:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org