Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230342e302f32322d3234203d3e20323131353835.roa
File:                     39332e3132372e3230342e302f32322d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          6u471oaP+2FNyOjQYt3STYlxVUnkf4wtDoErifybD3s=
Subject key identifier:   C7:CC:0D:A3:8B:C7:6F:D0:3D:03:B8:50:2C:87:DA:CF:19:D4:11:46
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       36E9A3623CA6DB710B34129C3029A1986AB03BA0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230342e302f32322d3234203d3e20323131353835.roa
Signing time:             Fri 27 Jan 2023 12:12:01 +0000
ROA not before:           Fri 27 Jan 2023 12:07:01 +0000
ROA not after:            Fri 26 Jan 2024 12:12:01 +0000
asID:                     211585
IP address blocks:        93.127.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e9:a3:62:3c:a6:db:71:0b:34:12:9c:30:29:a1:98:6a:b0:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 27 12:07:01 2023 GMT
            Not After : Jan 26 12:12:01 2024 GMT
        Subject: CN=C7CC0DA38BC76FD03D03B8502C87DACF19D41146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:52:00:e2:75:4e:09:26:7e:ab:a9:1d:b0:
                    be:2d:f3:58:83:6f:c9:98:8e:bc:5f:97:69:cf:8a:
                    7d:59:fa:7a:2a:f3:7a:1c:4d:6b:9a:6f:84:d7:1c:
                    c3:8e:87:91:66:20:8b:5c:96:7c:c7:d3:06:9a:e2:
                    44:58:fa:c2:8c:1e:75:b8:8e:43:13:35:ce:48:b3:
                    aa:87:97:c7:8b:09:5d:48:f2:d0:f5:98:48:89:c7:
                    68:db:77:17:47:2a:11:35:df:92:09:2a:4f:70:d9:
                    b6:f8:70:1b:a8:7b:38:60:d6:e1:96:c5:e8:80:b2:
                    9b:85:31:27:42:4a:b2:bf:0d:cb:c9:90:fb:32:6b:
                    4e:17:ec:1d:6e:9f:91:a1:ed:11:f7:ba:1e:c2:22:
                    16:da:ed:61:fe:62:75:5a:a9:18:b2:a3:11:4b:42:
                    b5:67:2d:76:d7:22:e2:21:28:2d:04:2c:44:f3:1a:
                    ee:e9:ab:5d:d0:70:94:4f:e6:bb:0c:67:52:a9:57:
                    46:12:7d:61:5b:2a:ba:9c:9e:eb:1b:6f:bb:e6:11:
                    df:8e:2f:21:c7:8c:4d:12:0b:86:80:e0:f1:34:c0:
                    13:da:f4:5f:86:8c:58:0d:b3:d8:8d:b8:7b:39:ed:
                    7a:69:22:e2:97:60:da:eb:36:62:5d:44:c1:4e:f6:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CC:0D:A3:8B:C7:6F:D0:3D:03:B8:50:2C:87:DA:CF:19:D4:11:46
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230342e302f32322d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:0e:52:04:fa:fc:98:1a:fa:c4:e0:f2:3d:ec:19:a3:18:
         00:e8:a9:16:9c:c4:b3:7c:6f:ec:a8:0d:2c:aa:42:e8:b5:f2:
         86:06:40:d6:5e:0d:35:e9:4b:67:42:b1:8f:75:49:a3:53:30:
         68:8a:d2:d0:a3:64:08:a6:dc:d5:8f:c0:35:51:10:1c:8e:8b:
         76:cf:4f:6a:dd:46:5c:86:3c:82:da:e3:14:c2:22:a8:a4:9a:
         2e:1b:1c:e9:a2:22:23:47:01:f3:a0:f7:fb:84:30:c3:8a:cb:
         aa:25:35:31:c6:54:5d:e7:4c:a2:1d:33:04:14:b9:12:13:24:
         73:38:11:3c:cc:41:65:68:bd:d6:58:7f:f0:c2:53:af:8d:fa:
         c8:9e:53:05:5a:90:d5:55:c3:42:1f:ee:0c:d0:c1:bc:74:e0:
         69:cd:a8:e6:82:f3:51:c4:4c:7b:ac:09:6e:27:a4:f6:0c:70:
         c9:c6:0b:a8:3b:4b:92:13:cb:b7:48:1f:12:29:62:97:6f:5a:
         61:37:86:03:2c:14:ac:c4:eb:90:87:39:dc:41:5a:a2:cd:0c:
         06:75:61:66:93:7b:3f:0e:18:b8:fe:43:14:af:97:23:11:0f:
         a4:ad:99:57:6b:0a:a2:c3:4f:db:98:bb:21:16:d5:f0:29:b3:
         c1:f6:66:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org