Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231352e302f32342d3234203d3e203439393939.roa
File:                     39332e3132372e3231352e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          T5jAqkwsy+BTn13F5IGlhtq6gBymhQC9YrgsNSjCJZY=
Subject key identifier:   07:84:AC:06:6C:EA:9A:7D:87:F1:03:46:37:44:60:7C:E0:8C:98:84
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       50646449492EA871B7D281D878B0C67072AF0465
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231352e302f32342d3234203d3e203439393939.roa
Signing time:             Wed 15 Mar 2023 18:47:52 +0000
ROA not before:           Wed 15 Mar 2023 18:42:52 +0000
ROA not after:            Wed 13 Mar 2024 18:47:52 +0000
asID:                     49999
IP address blocks:        93.127.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:64:64:49:49:2e:a8:71:b7:d2:81:d8:78:b0:c6:70:72:af:04:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Mar 15 18:42:52 2023 GMT
            Not After : Mar 13 18:47:52 2024 GMT
        Subject: CN=0784AC066CEA9A7D87F103463744607CE08C9884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:5d:ed:9b:5e:a0:b7:60:05:d1:d4:69:82:
                    82:d6:46:1e:50:65:fc:eb:09:55:c8:74:6d:df:81:
                    4e:0a:fe:2c:53:85:67:6a:92:74:f4:1d:05:c2:98:
                    09:ee:60:b4:bc:ec:7a:b3:61:21:a9:f9:c3:83:34:
                    b3:e1:67:7f:fd:36:4e:ce:ed:e6:ae:2e:b5:2b:14:
                    4d:6f:7c:8b:c5:ba:fe:d9:c3:73:52:13:33:0f:fe:
                    29:3b:4d:7c:57:dd:7b:5b:fe:e8:6b:1d:4d:98:ef:
                    c0:de:9b:17:25:07:3f:6a:96:2e:ff:95:38:c7:36:
                    bf:56:18:ac:d2:08:e6:f6:d2:5d:97:20:7b:fa:4b:
                    9d:4f:46:e0:0b:49:55:85:56:35:4b:e4:40:11:13:
                    69:7b:5f:84:ce:1b:2e:0a:8e:a3:7e:4d:89:19:81:
                    08:1b:7b:b7:fd:1e:91:c0:fd:6b:53:a3:9e:5b:7e:
                    ec:42:69:f1:0b:29:dd:2e:be:66:16:4e:e6:29:5f:
                    c5:06:36:2a:91:bf:f8:53:fb:69:73:45:c8:6a:3d:
                    d2:73:de:69:79:7a:36:29:0e:16:92:0b:04:55:3d:
                    01:44:ee:88:49:c5:34:c5:60:11:2b:8e:4d:07:ee:
                    de:59:c4:67:4e:a1:43:67:08:34:3b:5a:c9:13:b5:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:84:AC:06:6C:EA:9A:7D:87:F1:03:46:37:44:60:7C:E0:8C:98:84
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231352e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:61:04:6b:9b:14:70:ff:5d:41:78:0d:a1:cf:ad:72:9c:69:
         b8:f7:08:fe:62:cb:e9:c5:ea:ce:de:29:7e:e2:67:c7:b0:88:
         25:e3:e9:72:26:5a:a1:b2:58:14:c4:06:ee:eb:29:62:da:df:
         fa:2a:e1:7c:97:11:cc:21:52:c4:03:2a:45:81:32:bb:1d:24:
         87:84:4c:02:e7:bb:5b:e2:06:a6:ca:91:7c:7f:27:53:ec:9f:
         31:cf:f7:b5:b3:c1:72:2b:db:16:71:9f:2c:71:3d:6e:4c:c0:
         9c:87:90:7f:37:46:93:9f:bf:ac:d0:32:fa:6e:a5:13:49:ff:
         42:2b:89:01:2d:97:7f:89:bb:d0:58:2d:8e:1b:e5:91:4e:bc:
         e0:bb:da:6d:01:bf:06:d1:d1:4f:82:d3:da:02:a4:5d:b4:03:
         10:4e:48:8b:a3:57:03:87:a9:7f:82:7b:0f:62:c5:01:77:d2:
         f2:fc:18:3e:8c:f8:4c:88:d3:b2:3c:db:64:c6:a5:2c:aa:03:
         d1:79:43:a2:5a:c9:14:94:16:dc:79:8a:8d:39:30:d7:d3:5e:
         04:68:47:b4:bb:c6:41:3a:4a:63:d9:af:99:58:93:9a:45:d4:
         64:12:53:81:7d:ea:92:c5:52:c2:2c:33:47:f0:16:d3:b4:c1:
         b6:7d:63:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org