Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230322e302f32342d3234203d3e203630373231.roa
File:                     39332e3132372e3230322e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          P6YKwvKC4lJOEkPC78/ufz8c4/hxdNrCdPcKc7BZhUA=
Subject key identifier:   93:62:97:B0:D3:5F:B8:37:D5:3C:DB:8D:E9:99:7D:E3:D1:29:B3:79
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       4458878EDB904658E671F66E604BAA3E1A74BC27
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230322e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 27 Jan 2023 20:19:56 +0000
ROA not before:           Fri 27 Jan 2023 20:14:56 +0000
ROA not after:            Fri 26 Jan 2024 20:19:56 +0000
asID:                     60721
IP address blocks:        93.127.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:58:87:8e:db:90:46:58:e6:71:f6:6e:60:4b:aa:3e:1a:74:bc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 27 20:14:56 2023 GMT
            Not After : Jan 26 20:19:56 2024 GMT
        Subject: CN=936297B0D35FB837D53CDB8DE9997DE3D129B379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:55:17:02:0d:31:12:30:1a:e3:44:5e:63:
                    18:d0:9d:b7:a5:eb:31:4f:40:87:69:61:3c:79:23:
                    f9:96:8d:9c:4e:bd:57:41:6d:71:47:fe:f7:0d:b5:
                    2e:99:37:ad:93:6e:6e:93:d6:43:ff:76:b3:58:b2:
                    fd:89:53:c6:04:68:5f:54:ca:e6:f6:fd:1a:33:5a:
                    b6:9b:23:55:80:41:01:b2:74:7a:cf:d3:0b:3a:78:
                    48:98:e5:5e:d2:d5:ae:bf:3e:e2:ce:72:a2:89:2b:
                    a5:79:04:03:81:a3:6c:85:cc:9a:d9:d2:2d:73:e3:
                    d8:fb:24:a6:0a:7f:ec:3e:6d:7d:f6:ef:5e:ae:4a:
                    4c:96:4e:eb:d7:31:d1:fa:59:1c:04:be:ec:af:34:
                    01:85:80:ed:ab:82:82:00:34:67:31:27:44:5d:de:
                    ba:da:0d:09:2d:98:f0:61:48:65:08:17:33:b6:0d:
                    3a:b1:89:cf:b1:50:9b:99:9b:e6:fb:c5:4c:ee:3c:
                    2d:cf:cb:4e:43:da:fa:fd:ff:7b:a1:47:e8:82:16:
                    77:3f:94:9e:3b:58:f1:77:d6:3a:fe:4b:d3:f9:3b:
                    4c:5c:7d:4d:f5:0f:1b:e0:f6:61:9d:5d:62:06:b8:
                    e5:32:b1:1a:0e:b9:0f:8e:33:c6:c8:61:c6:dc:df:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:62:97:B0:D3:5F:B8:37:D5:3C:DB:8D:E9:99:7D:E3:D1:29:B3:79
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230322e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:2d:cb:58:d0:25:82:aa:3d:5f:8d:27:0a:ad:44:02:d3:4f:
         43:15:0a:9a:2d:0b:20:cd:2f:86:31:84:0c:97:2b:00:a1:3e:
         2c:cc:9c:d2:87:77:0f:bc:d3:10:48:c0:f6:53:c0:a8:65:c4:
         c4:03:f2:5d:87:c9:9c:b8:9f:ea:f9:e3:a9:52:60:52:1d:91:
         7e:d1:c4:b8:ca:66:2b:89:07:4d:5f:d1:9b:a9:0d:37:ae:39:
         e5:4b:cd:f6:68:93:c1:b3:40:5a:d8:b0:6a:c0:64:ef:96:db:
         ca:8f:87:7c:ad:1c:6b:d3:5b:b5:98:f0:bf:e1:e1:9b:17:59:
         03:22:b0:4c:8d:eb:15:bd:f6:ad:2b:42:5c:1b:b1:11:b2:64:
         2f:36:e1:8a:e2:50:02:c3:37:65:fd:8e:b5:ee:74:7a:a3:a3:
         a0:2f:a0:5a:03:86:3a:83:41:90:95:e7:40:b4:2b:89:34:7b:
         9b:97:84:9b:96:95:4e:65:ab:0a:82:08:c9:cc:3c:d4:bc:33:
         dd:ba:85:66:3d:4f:90:1b:6b:22:3e:18:88:c8:74:95:89:cf:
         4a:97:2d:1e:a4:b6:25:fc:de:8e:2e:3e:b1:b0:fc:ed:59:09:
         65:3d:85:13:cd:ba:85:f6:50:2e:75:60:cf:f3:29:0b:0b:83:
         26:48:75:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org