Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138372e302f32342d3234203d3e203439393939.roa
File:                     39332e3132372e3138372e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          MhMEEnVd0Od9hkhEMmwSloEGoIyIyKaLswkRD7T9F04=
Subject key identifier:   E1:96:26:AB:D4:BC:10:99:16:92:90:62:F3:36:C8:14:B6:2B:9B:10
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       5D9196EFABE14CE61DD70D70AE6FDCDAF0958E59
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138372e302f32342d3234203d3e203439393939.roa
Signing time:             Fri 20 Jan 2023 06:26:12 +0000
ROA not before:           Fri 20 Jan 2023 06:21:12 +0000
ROA not after:            Fri 19 Jan 2024 06:26:12 +0000
asID:                     49999
IP address blocks:        93.127.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:91:96:ef:ab:e1:4c:e6:1d:d7:0d:70:ae:6f:dc:da:f0:95:8e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:12 2023 GMT
            Not After : Jan 19 06:26:12 2024 GMT
        Subject: CN=E19626ABD4BC109916929062F336C814B62B9B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:45:f5:f2:68:75:da:55:49:6b:3c:aa:d7:
                    4d:d9:21:bf:7a:c4:40:ec:e9:e2:69:83:26:b3:81:
                    ce:b1:ea:99:ac:20:36:c7:17:b5:9e:06:89:71:de:
                    d0:59:e4:8f:82:a8:12:b1:df:f7:c0:91:a3:e8:ea:
                    e7:68:24:0c:1e:d0:d4:c2:76:c6:fa:47:61:1e:96:
                    43:fa:f5:5e:04:30:ee:19:1c:7e:08:af:e4:a9:b2:
                    31:ec:51:18:78:ec:a2:99:c6:53:35:b4:c2:87:ba:
                    6e:4c:63:55:43:64:4a:2a:1b:10:e7:18:1f:a9:2b:
                    c1:b4:1f:d2:0d:3e:03:9a:69:d7:64:02:1e:e6:d9:
                    81:ae:06:1c:34:09:df:0c:c0:65:3a:43:4c:1f:c7:
                    8c:e1:d5:b1:cf:32:de:78:e8:d9:64:43:bb:d4:08:
                    72:52:6b:8c:da:ca:7e:b4:2e:dc:a8:ce:a4:39:0a:
                    04:ce:67:4a:4c:ee:2c:30:7d:aa:b2:48:2e:b4:6f:
                    1e:50:ed:fe:45:cd:5a:fd:5e:fd:47:a6:45:2d:65:
                    d5:30:1b:5b:a8:98:43:b3:84:02:91:58:da:c2:fe:
                    f6:0e:2c:13:20:ba:87:fa:b6:58:09:3c:87:a1:7e:
                    5b:2a:82:bf:21:eb:36:f0:3f:3c:82:ac:5d:9f:da:
                    68:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:96:26:AB:D4:BC:10:99:16:92:90:62:F3:36:C8:14:B6:2B:9B:10
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138372e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:9c:40:8a:43:48:a7:bf:54:d3:73:ae:12:9e:9c:6c:11:a3:
         9c:b7:b0:c7:86:0d:14:74:4d:50:bc:41:b9:e2:4c:2a:b3:4c:
         9e:fa:96:8a:97:37:9e:f7:95:3a:4f:53:88:22:fb:84:ed:0a:
         27:11:a0:20:4e:ed:99:12:7f:47:34:03:31:09:6a:b9:bd:3f:
         45:ee:ea:41:f0:87:3b:a9:a0:31:6a:3b:ea:98:49:d0:49:97:
         31:d9:5e:ad:a8:12:62:31:54:d1:6a:24:16:d0:1f:8d:73:66:
         c3:cf:bf:f2:45:35:02:39:62:de:98:c1:29:a0:dc:83:34:16:
         01:be:20:9d:f4:58:f2:36:7c:c3:fd:e2:d9:4d:e8:ce:fc:61:
         5d:00:7b:38:7a:42:99:63:f2:5d:cf:d7:30:0d:e4:2d:48:3f:
         b8:d9:cc:1c:f7:58:b2:6b:9b:28:25:3e:04:e3:aa:7f:34:48:
         36:4d:8d:4b:92:84:88:b9:bb:95:0d:af:1b:27:ba:7b:95:8c:
         f6:a9:32:a7:2b:0f:a2:f0:35:dc:5a:37:51:7e:63:6d:c0:f1:
         99:8e:c7:ff:f8:45:3d:f3:e3:a3:be:e8:db:a0:87:ed:ac:ba:
         07:c2:db:95:68:3e:34:71:c3:13:21:54:d1:72:43:51:fe:42:
         4b:16:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org