Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231392e302f32342d3234203d3e203630373231.roa
File:                     39332e3132372e3231392e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          a5Bzcmu2vT+sUo4UOZwxn76ZlxtfcAFHE/X+EwKGWds=
Subject key identifier:   ED:03:11:55:05:D0:25:99:21:B9:FF:15:12:BB:C9:30:A4:93:94:B8
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       5A40DEBA1C2181AD4FFD1D0320DA598676292020
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231392e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 20 Jan 2023 06:26:14 +0000
ROA not before:           Fri 20 Jan 2023 06:21:14 +0000
ROA not after:            Fri 19 Jan 2024 06:26:14 +0000
asID:                     60721
IP address blocks:        93.127.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:40:de:ba:1c:21:81:ad:4f:fd:1d:03:20:da:59:86:76:29:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:14 2023 GMT
            Not After : Jan 19 06:26:14 2024 GMT
        Subject: CN=ED03115505D0259921B9FF1512BBC930A49394B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:86:12:fd:fa:9a:88:7e:44:f1:4c:fd:9c:b4:
                    41:ad:82:41:13:ec:47:98:42:47:02:55:60:43:32:
                    c8:58:e7:8c:75:70:ee:25:88:f8:42:9a:45:d5:4b:
                    c3:05:d8:49:fc:ab:80:e9:c1:85:0f:0e:86:b0:10:
                    79:ab:c0:36:7a:ce:3e:8c:98:ed:2f:35:45:98:f5:
                    de:05:d1:74:25:31:a8:44:d5:a8:b5:31:c5:a3:e8:
                    fb:b8:21:c6:bb:a0:6b:3c:88:fc:45:87:67:17:42:
                    fb:1c:00:2a:8f:1e:61:57:c0:b8:28:ef:9e:41:0c:
                    53:04:f7:57:de:c3:f4:b3:76:ff:eb:65:58:34:9f:
                    4b:3d:ab:fb:25:23:d2:23:df:d5:91:29:8a:72:ab:
                    da:0d:7a:19:bb:89:bf:52:32:ec:1f:80:db:08:4a:
                    21:a8:ab:dd:12:65:6b:2f:45:92:b8:d7:f7:55:e3:
                    ee:76:ac:98:09:56:90:bb:44:56:2a:9d:45:60:a9:
                    18:b4:ec:a6:e8:b8:2a:1e:e5:5f:42:6e:ae:53:33:
                    e3:a3:6c:90:00:8e:a1:08:a0:e7:50:22:a3:95:62:
                    06:c7:22:db:ba:f7:36:06:04:15:9f:f7:83:d1:7b:
                    a5:0b:d7:aa:38:96:82:66:d7:ae:79:06:e5:2a:1e:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:03:11:55:05:D0:25:99:21:B9:FF:15:12:BB:C9:30:A4:93:94:B8
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231392e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:0a:32:15:fd:43:32:12:c9:02:ab:63:30:d0:48:4e:e3:1b:
         66:3d:05:55:b8:71:88:30:d7:cb:c8:79:21:e1:1c:8e:3a:5f:
         ca:54:2a:aa:ad:73:53:5a:4f:6f:50:ae:c4:53:ce:a7:a7:fa:
         75:51:80:1f:62:f7:7a:d3:42:98:18:17:ab:38:f1:f3:39:d0:
         0c:7e:4a:1c:7a:7d:7b:0d:7e:ae:f4:5c:8a:ba:5b:8b:18:78:
         c1:b9:fd:6a:7f:0e:1e:84:a3:c1:5b:aa:d4:d9:21:33:64:d4:
         d4:b1:bc:f3:a8:f0:77:eb:ab:8a:54:54:5d:25:fc:47:48:54:
         94:7a:d5:6f:75:6d:c9:7d:16:24:67:52:50:b1:3f:cd:21:6d:
         92:06:7a:d3:7b:db:35:1c:b9:d6:e6:eb:a3:db:8f:3c:52:3f:
         6b:55:f8:95:ad:b9:65:66:25:41:0d:a7:65:5a:d5:37:ce:fb:
         e9:16:2b:d6:da:0d:5f:29:21:f4:b0:24:8a:f2:6a:06:41:04:
         b6:d0:93:9d:31:8e:d2:0c:75:97:04:70:9a:e0:ce:d0:53:7b:
         4f:b2:0e:3e:1b:ae:85:d5:c5:be:a0:ca:a6:e3:9a:85:c2:e5:
         7d:c6:1c:0e:ea:55:a4:af:54:f2:d3:61:6a:ec:b7:74:14:86:
         46:ca:65:c3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWkDeuhwhga1P/R0DINpZhnYpICAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAxMjAwNjIxMTRaFw0yNDAxMTkwNjI2MTRaMDMxMTAvBgNV
BAMTKEVEMDMxMTU1MDVEMDI1OTkyMUI5RkYxNTEyQkJDOTMwQTQ5Mzk0QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohhL9+pqIfkTxTP2ctEGtgkET
7EeYQkcCVWBDMshY54x1cO4liPhCmkXVS8MF2En8q4DpwYUPDoawEHmrwDZ6zj6M
mO0vNUWY9d4F0XQlMahE1ai1McWj6Pu4Ica7oGs8iPxFh2cXQvscACqPHmFXwLgo
755BDFME91few/Szdv/rZVg0n0s9q/slI9Ij39WRKYpyq9oNehm7ib9SMuwfgNsI
SiGoq90SZWsvRZK41/dV4+52rJgJVpC7RFYqnUVgqRi07KbouCoe5V9Cbq5TM+Oj
bJAAjqEIoOdQIqOVYgbHItu69zYGBBWf94PRe6UL16o4loJm1655BuUqHj/vAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU7QMRVQXQJZkhuf8VErvJMKSTlLgwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMjMx
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzczMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XX/bMA0GCSqGSIb3DQEBCwUAA4IBAQCeCjIV/UMyEskCq2Mw0EhO4xtmPQVVuHGI
MNfLyHkh4RyOOl/KVCqqrXNTWk9vUK7EU86np/p1UYAfYvd600KYGBerOPHzOdAM
fkocen17DX6u9FyKuluLGHjBuf1qfw4ehKPBW6rU2SEzZNTUsbzzqPB366uKVFRd
JfxHSFSUetVvdW3JfRYkZ1JQsT/NIW2SBnrTe9s1HLnW5uuj2488Uj9rVfiVrbll
ZiVBDadlWtU3zvvpFivW2g1fKSH0sCSK8moGQQS20JOdMY7SDHWXBHCa4M7QU3tP
sg4+G66F1cW+oMqm45qFwuV9xhwO6lWkr1Ty02Fq7Ld0FIZGymXD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org