Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139332e302f32342d3234203d3e203630373231.roa
File:                     39332e3132372e3139332e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          r/qj/1pcKRMDVrSAQKddfkjq4z7nVriQ0dZpL3qPdIY=
Subject key identifier:   EF:ED:D7:BC:B0:4B:C2:1F:33:73:B0:DC:E0:D4:80:29:DA:7C:39:3E
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       2A4CB294EE63865F467D6CA83579E5D12E58581F
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139332e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 20 Jan 2023 06:26:13 +0000
ROA not before:           Fri 20 Jan 2023 06:21:13 +0000
ROA not after:            Fri 19 Jan 2024 06:26:13 +0000
asID:                     60721
IP address blocks:        93.127.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4c:b2:94:ee:63:86:5f:46:7d:6c:a8:35:79:e5:d1:2e:58:58:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:13 2023 GMT
            Not After : Jan 19 06:26:13 2024 GMT
        Subject: CN=EFEDD7BCB04BC21F3373B0DCE0D48029DA7C393E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:dd:ea:66:cf:9a:0a:f4:a4:bb:d2:f7:78:
                    6e:cf:c1:2d:d0:4f:63:d1:f8:29:a7:96:36:0b:3a:
                    09:e3:c8:43:7f:b4:06:21:87:c2:11:8a:57:ec:49:
                    88:c7:e3:91:0c:24:ee:1e:4a:54:99:c9:db:de:87:
                    f8:fe:80:fe:1c:03:67:71:33:ac:d1:64:6c:22:32:
                    84:94:9c:17:0d:47:16:32:3d:81:64:ea:fb:bd:47:
                    2a:05:af:65:c8:ea:0c:1c:04:00:b6:d3:55:0e:d3:
                    15:fd:91:37:28:c7:50:c9:4f:eb:b5:1b:2b:22:be:
                    4e:ba:f4:6a:06:95:77:12:f4:b4:92:cd:4c:a4:e5:
                    d6:50:4f:b5:83:f4:71:07:ff:92:5f:22:50:ba:75:
                    4c:ff:59:60:75:20:0d:d9:25:e6:63:70:ea:cd:00:
                    b5:94:66:af:19:c9:9c:84:a6:c8:11:5a:65:4e:79:
                    aa:d3:5d:7e:97:20:fc:83:a9:20:a4:f5:3e:fe:c2:
                    f6:30:a3:41:27:5c:c5:98:af:0b:70:06:1d:37:53:
                    5d:db:53:62:8b:8c:16:9e:43:73:7c:00:17:11:1a:
                    bb:cd:ce:14:17:90:04:21:c3:e1:56:a6:c8:73:6b:
                    f7:89:d7:ef:6f:b5:70:92:05:e3:f6:49:6c:44:1d:
                    4c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:ED:D7:BC:B0:4B:C2:1F:33:73:B0:DC:E0:D4:80:29:DA:7C:39:3E
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139332e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:99:4b:97:33:67:28:f1:86:0c:df:8b:08:ef:58:7c:f9:1b:
         ab:57:b4:56:a7:15:80:ea:8d:95:37:fa:70:e0:9e:7c:00:8c:
         e3:03:e5:14:6e:1a:a8:fb:2a:89:db:d0:d0:9c:0f:56:15:2a:
         ea:64:b8:e2:bb:f2:74:f7:a0:35:49:93:53:9f:c0:38:67:4d:
         1e:14:bc:de:d9:5a:b9:da:64:43:f2:2a:19:57:dc:88:07:17:
         75:95:32:b8:23:2a:21:76:40:10:0f:73:60:f1:25:f1:f9:16:
         54:2d:ae:c2:a9:06:26:88:3a:f1:7b:7d:be:0c:01:e8:6c:1e:
         8f:ed:d9:ee:2a:c9:03:54:05:10:59:9a:1d:1e:00:87:69:b1:
         e1:d2:81:d7:bc:f4:05:01:7f:4e:34:ec:a5:0a:77:dd:f7:a3:
         46:37:9e:7e:68:31:55:c1:a4:fc:72:30:39:e7:25:82:ea:a5:
         b4:97:b0:1c:2e:40:b1:d1:81:58:bb:99:66:50:c9:6b:39:ba:
         b2:f1:24:a6:39:86:93:16:6c:55:41:79:15:91:20:24:b7:2f:
         57:70:87:fb:a0:85:83:91:4d:18:24:1e:33:e7:16:4f:5e:96:
         0e:59:e1:7c:d7:a1:c3:84:36:f9:20:80:89:de:85:be:23:2f:
         e5:b2:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org