Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230362e302f32342d3234203d3e203535313534.roa
File:                     39332e3132372e3230362e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          xl5Kv7HjZqJj7ymmxbY5Rl7KwELCMYFXq6tm1yexDj8=
Subject key identifier:   1A:32:5E:32:B0:3E:DC:58:FC:FB:C5:3A:F3:C0:D6:62:77:86:41:C4
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       4E98522D72078B72057453FB01E666DE9EF2087B
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230362e302f32342d3234203d3e203535313534.roa
Signing time:             Wed 12 Apr 2023 13:24:36 +0000
ROA not before:           Wed 12 Apr 2023 13:19:36 +0000
ROA not after:            Wed 10 Apr 2024 13:24:36 +0000
asID:                     55154
IP address blocks:        93.127.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:98:52:2d:72:07:8b:72:05:74:53:fb:01:e6:66:de:9e:f2:08:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr 12 13:19:36 2023 GMT
            Not After : Apr 10 13:24:36 2024 GMT
        Subject: CN=1A325E32B03EDC58FCFBC53AF3C0D662778641C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:92:c4:38:41:46:12:30:9e:51:d9:c9:c8:28:
                    8d:1c:79:66:b9:93:74:74:f6:36:e3:dc:56:77:7c:
                    92:a3:24:8d:f2:14:99:59:f2:18:fe:51:94:52:57:
                    4e:72:d7:64:af:0d:17:74:d7:89:e9:95:64:2f:c9:
                    b4:3c:1b:48:88:5e:c0:b8:26:e1:83:a4:cf:d1:60:
                    9d:26:ac:9b:7e:f3:e5:0b:ee:2b:87:f2:c0:02:86:
                    99:4f:dc:3f:6e:a6:7c:2f:ec:d7:11:88:e3:ec:24:
                    98:6d:1b:cd:f3:48:f5:4d:2f:d8:f0:2b:36:b7:ee:
                    e8:0d:19:15:2b:1b:22:cb:41:68:4b:d9:0a:c3:b8:
                    bc:72:ff:34:b2:6c:72:45:67:5c:db:78:a3:5a:cf:
                    18:86:0d:5b:ae:df:b5:ff:15:3f:05:40:1b:37:b2:
                    82:27:f9:f7:e8:c6:32:6a:51:7d:1c:d8:44:51:be:
                    1d:fe:77:6a:60:e1:6a:2f:76:ff:e5:7e:77:b0:62:
                    d4:82:38:fa:3c:73:f3:52:21:79:49:57:13:8a:37:
                    af:84:f6:f2:a8:16:f9:a2:2b:0e:0a:aa:4d:b3:30:
                    01:82:fd:9e:0e:f5:49:0a:54:1d:fa:d2:f9:8b:4a:
                    d4:85:4f:6a:82:59:fb:60:3d:31:5b:06:6e:bc:38:
                    83:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:32:5E:32:B0:3E:DC:58:FC:FB:C5:3A:F3:C0:D6:62:77:86:41:C4
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230362e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:56:e8:f9:88:43:f6:48:a2:78:df:ec:ce:b2:ae:ac:f6:4c:
         c6:48:f2:b1:c0:e2:08:6e:61:4a:31:b7:58:80:2d:3b:98:53:
         43:ee:18:9a:c7:38:07:df:c2:db:9d:d5:8c:ac:9b:48:34:f1:
         8e:44:30:88:8f:3c:18:51:99:ec:ff:21:e4:69:5d:34:aa:0c:
         82:c1:60:81:62:9a:c7:09:62:7f:8c:41:79:bd:ba:95:0d:ee:
         25:54:73:b7:a9:8f:13:a4:a9:a1:e6:c2:ac:7a:37:89:f6:d0:
         53:8f:bc:7a:50:d6:55:3f:14:5c:8e:a3:99:7d:50:81:31:ad:
         5c:fc:1a:e7:21:43:d0:1d:75:4e:4a:71:ad:37:8a:cc:dc:39:
         1e:fe:68:e3:97:58:39:1d:73:7c:5d:af:f4:25:e0:e5:17:d6:
         d0:3c:13:f0:5f:59:e1:5c:f3:ea:35:d2:ac:30:65:65:e4:aa:
         73:e0:9e:dc:c8:75:bf:fa:b4:a9:de:0d:a5:6d:7c:df:19:5e:
         77:92:b2:73:31:7f:0d:c3:c5:d7:0e:1a:d1:48:12:40:64:9e:
         3e:ea:45:f0:8c:42:05:e0:47:10:06:91:60:2c:f7:60:62:56:
         df:94:82:3a:c8:57:db:24:90:96:87:54:07:87:93:23:97:9c:
         97:59:f6:a0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTphSLXIHi3IFdFP7AeZm3p7yCHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA0MTIxMzE5MzZaFw0yNDA0MTAxMzI0MzZaMDMxMTAvBgNV
BAMTKDFBMzI1RTMyQjAzRURDNThGQ0ZCQzUzQUYzQzBENjYyNzc4NjQxQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhksQ4QUYSMJ5R2cnIKI0ceWa5
k3R09jbj3FZ3fJKjJI3yFJlZ8hj+UZRSV05y12SvDRd014nplWQvybQ8G0iIXsC4
JuGDpM/RYJ0mrJt+8+UL7iuH8sAChplP3D9upnwv7NcRiOPsJJhtG83zSPVNL9jw
Kza37ugNGRUrGyLLQWhL2QrDuLxy/zSybHJFZ1zbeKNazxiGDVuu37X/FT8FQBs3
soIn+ffoxjJqUX0c2ERRvh3+d2pg4Wovdv/lfnewYtSCOPo8c/NSIXlJVxOKN6+E
9vKoFvmiKw4Kqk2zMAGC/Z4O9UkKVB360vmLStSFT2qCWftgPTFbBm68OIM1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUGjJeMrA+3Fj8+8U688DWYneGQcQwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMjMw
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM1MzEzNTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XX/OMA0GCSqGSIb3DQEBCwUAA4IBAQAVVuj5iEP2SKJ43+zOsq6s9kzGSPKxwOII
bmFKMbdYgC07mFND7hiaxzgH38LbndWMrJtINPGORDCIjzwYUZns/yHkaV00qgyC
wWCBYprHCWJ/jEF5vbqVDe4lVHO3qY8TpKmh5sKsejeJ9tBTj7x6UNZVPxRcjqOZ
fVCBMa1c/BrnIUPQHXVOSnGtN4rM3Dke/mjjl1g5HXN8Xa/0JeDlF9bQPBPwX1nh
XPPqNdKsMGVl5Kpz4J7cyHW/+rSp3g2lbXzfGV53krJzMX8Nw8XXDhrRSBJAZJ4+
6kXwjEIF4EcQBpFgLPdgYlbflII6yFfbJJCWh1QHh5Mjl5yXWfag
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org