Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232342e302f31392d3139203d3e203632333336.roa
File:                     39332e3132372e3232342e302f31392d3139203d3e203632333336.roa (raw, json)
Hash identifier:          5LUPsOEp7XqrLayspEAOLJuZKmHP5dwR6PbuMbPV4ao=
Subject key identifier:   D4:98:0E:A4:B9:DE:EC:54:A3:FC:66:F8:2E:4C:B1:53:8F:5E:39:16
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       4AED8898C39FD4E66A62C49F6BAABE88A2A63D3D
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232342e302f31392d3139203d3e203632333336.roa
Signing time:             Fri 20 Jan 2023 06:26:14 +0000
ROA not before:           Fri 20 Jan 2023 06:21:14 +0000
ROA not after:            Fri 19 Jan 2024 06:26:14 +0000
asID:                     62336
IP address blocks:        93.127.224.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ed:88:98:c3:9f:d4:e6:6a:62:c4:9f:6b:aa:be:88:a2:a6:3d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:14 2023 GMT
            Not After : Jan 19 06:26:14 2024 GMT
        Subject: CN=D4980EA4B9DEEC54A3FC66F82E4CB1538F5E3916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:75:26:f2:c4:3f:c0:0b:d2:40:cb:4f:b5:26:
                    06:e1:23:eb:4b:f2:5e:df:9a:f2:76:f2:1f:80:05:
                    df:f8:8c:97:90:f7:b1:eb:d3:3f:31:c4:c2:d5:c9:
                    44:53:7e:e3:1c:3c:29:28:42:ac:69:a5:00:cd:46:
                    a5:96:e4:e9:6c:61:67:c2:cb:d7:d5:5d:1e:04:01:
                    b0:6f:de:22:77:0c:e3:18:9b:5a:d4:89:55:a5:7c:
                    64:9b:93:1f:61:b2:4f:6a:b3:a5:90:e7:53:28:8c:
                    1c:ad:2c:59:32:88:54:41:7e:1a:e5:d3:c3:41:b7:
                    6b:50:93:a8:5d:72:c3:13:47:1c:e7:d3:a0:5c:fc:
                    31:a4:0c:01:86:cf:9e:81:9d:1b:9e:96:94:e4:bc:
                    0c:3f:5d:5a:14:0d:ac:05:37:0f:11:96:8c:b5:81:
                    13:29:91:a7:48:57:3f:30:da:66:7c:83:12:6e:85:
                    eb:af:34:46:63:66:10:22:0a:02:24:e2:1c:ab:d3:
                    56:df:f3:c4:02:6b:85:46:02:68:d2:49:44:35:44:
                    80:a0:f5:39:13:6e:05:9c:92:0e:e1:01:b1:ed:52:
                    1f:c8:e0:4a:1e:c5:14:3f:b5:a5:54:c4:68:c9:d7:
                    cb:66:4b:55:2c:46:29:09:46:12:f5:fc:03:86:82:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:98:0E:A4:B9:DE:EC:54:A3:FC:66:F8:2E:4C:B1:53:8F:5E:39:16
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232342e302f31392d3139203d3e203632333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:88:03:8b:1a:6e:06:5a:14:64:f2:43:11:5b:70:f0:3a:
         29:45:24:5a:b6:a1:bf:d2:bd:25:7b:12:e0:39:20:34:ba:20:
         be:16:1f:d9:af:70:af:e4:5a:4a:1d:63:42:51:ff:ab:a1:d4:
         9b:e4:cf:04:e4:6f:bf:b6:56:71:9b:3e:36:89:e9:69:35:91:
         a2:44:b4:50:a9:63:54:2d:3d:83:86:3e:3f:42:73:5f:f7:c2:
         57:f0:7b:55:c6:41:8a:b1:ce:16:e3:22:c5:ca:12:0b:b7:d5:
         1e:b7:11:b2:02:ae:4b:ae:ba:76:34:4b:a3:2c:fa:2f:cc:aa:
         e3:c2:aa:06:8c:ae:ef:74:84:df:17:ea:8e:31:3f:bb:e0:46:
         88:cd:b6:08:01:0f:8c:62:5b:06:3c:27:15:46:89:f9:48:8e:
         4f:7c:92:70:33:c3:b5:9f:de:db:20:b5:4c:0c:84:ff:38:18:
         07:73:6c:98:ea:bb:13:f9:8d:59:75:d3:15:9c:81:42:06:eb:
         63:2f:8d:8c:42:cf:f4:df:dd:62:d7:06:b2:72:ba:fa:f1:6c:
         ff:5c:50:7a:f4:11:81:91:11:05:76:34:c3:a7:5c:f8:d5:dc:
         bd:05:2c:1b:bd:6a:b7:c2:80:8c:6f:54:e5:b9:19:99:38:97:
         27:d0:11:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org