Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231362e302f32342d3234203d3e203537383434.roa
File:                     39332e3132372e3231362e302f32342d3234203d3e203537383434.roa (raw, json)
Hash identifier:          gXWBFBuhxUbb+9uHrso51fwvt9YKVRfVw4+QcRdzCro=
Subject key identifier:   FE:5A:55:5D:FC:A4:A2:E4:AE:88:41:1F:98:A4:E2:CA:60:7E:D6:18
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       5C6B16CD3EA99281E7D5EDCF6E4DEBC42480B1BB
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231362e302f32342d3234203d3e203537383434.roa
Signing time:             Mon 05 Jun 2023 16:03:22 +0000
ROA not before:           Mon 05 Jun 2023 15:58:22 +0000
ROA not after:            Mon 03 Jun 2024 16:03:22 +0000
asID:                     57844
IP address blocks:        93.127.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6b:16:cd:3e:a9:92:81:e7:d5:ed:cf:6e:4d:eb:c4:24:80:b1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jun  5 15:58:22 2023 GMT
            Not After : Jun  3 16:03:22 2024 GMT
        Subject: CN=FE5A555DFCA4A2E4AE88411F98A4E2CA607ED618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:ab:ae:b6:b6:c7:03:7d:d8:05:ea:7c:92:
                    d0:3a:2c:38:b6:4a:a8:8a:8b:11:f3:d5:6d:22:58:
                    19:28:39:b2:40:0b:aa:2c:83:d9:cb:a2:36:9c:fb:
                    b9:59:1a:30:77:bb:94:b6:ed:94:ce:ad:dd:15:37:
                    97:8d:d6:a0:7d:2c:7f:26:6f:5b:f0:de:29:cb:f1:
                    7d:c7:87:16:ca:3d:79:93:fd:b9:1f:24:d0:8e:e6:
                    de:60:af:5f:32:fe:10:c6:47:cf:d1:e5:c6:fd:56:
                    a9:d1:af:f8:94:fe:fe:07:b8:3e:3a:bd:33:f6:f5:
                    5d:41:14:00:95:92:63:e7:ea:c5:57:f7:84:fb:09:
                    9c:33:8d:68:cd:e9:ea:ec:c9:65:9f:8d:6d:06:2b:
                    28:82:09:96:41:d7:3b:fd:b1:ed:32:f0:8c:a8:0b:
                    3a:7e:b3:55:03:a5:d4:da:7a:f5:7e:b8:e5:3b:9d:
                    d8:85:75:06:6a:74:1e:53:8e:3c:16:3d:2b:cb:ca:
                    76:05:9b:f5:9e:c4:5a:52:02:94:e5:d1:0f:ad:fe:
                    36:d7:42:e2:6d:0a:0b:48:11:93:8c:49:34:3f:91:
                    44:33:3c:57:f9:43:e3:7d:60:9a:3f:76:fc:55:b3:
                    ea:b0:af:70:b3:7a:38:0f:10:f6:89:ae:3b:07:db:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5A:55:5D:FC:A4:A2:E4:AE:88:41:1F:98:A4:E2:CA:60:7E:D6:18
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231362e302f32342d3234203d3e203537383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:11:03:80:20:04:ae:06:07:8b:28:bf:1a:e4:4c:a9:b7:22:
         23:13:bd:8e:a2:c0:cb:27:3a:63:45:db:30:04:d3:89:d1:c1:
         33:1f:52:37:18:e6:ce:ed:38:a5:44:ff:dd:0b:ca:5a:a9:a7:
         f7:de:09:a4:30:4e:4a:58:df:d3:5d:36:a5:7f:7a:55:4c:d8:
         a9:4d:d7:f2:81:5a:a9:da:21:36:f7:b5:8d:85:b9:65:f3:63:
         83:f1:97:e1:f7:ad:b6:92:fb:7d:ce:42:03:ec:6f:ec:24:6c:
         a2:73:73:5b:63:ca:69:57:79:64:a5:a5:57:13:3c:d5:6d:a2:
         8d:8b:e1:c5:5d:2c:cd:05:f8:93:1a:4b:55:01:7e:62:9d:be:
         34:90:d3:4f:f9:13:a3:d0:b4:3c:20:b4:80:ed:1e:d7:0b:f5:
         5a:28:d2:2c:c2:3d:f8:ef:79:c8:7b:44:07:26:b1:a1:88:bf:
         d5:35:6b:c0:cf:a0:33:dd:d9:d1:b8:79:45:9a:fe:68:32:62:
         78:a6:bd:8e:74:36:cf:8d:bc:53:e9:13:cd:f8:14:c6:f6:12:
         be:19:ab:e4:8d:67:58:73:45:38:a7:13:56:de:19:eb:01:28:
         d3:d1:01:8a:66:25:64:e0:2e:51:84:b7:16:b1:d2:73:21:44:
         df:ea:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org