Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4e4c505e-f236-4169-9f4e-3ad99578db6c/0/3139352e3231312e35312e302f32342d3234203d3e203536393133.roa
File:                     3139352e3231312e35312e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier:          WapPbQ8klxvQK2lams8DcCYrTuMGKqT8AaYJ3AcO+Sc=
Subject key identifier:   84:D1:8B:16:7A:80:77:AB:43:AE:8C:B1:27:8D:97:71:9C:FA:B8:B1
Certificate issuer:       /CN=5d8e5883fa17e93eda29c9a5076baba8978a88d6
Certificate serial:       3668BFC9F661A9BC5790D4E4E31C5A1648FB2027
Authority key identifier: 5D:8E:58:83:FA:17:E9:3E:DA:29:C9:A5:07:6B:AB:A8:97:8A:88:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XY5Yg_oX6T7aKcmlB2urqJeKiNY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4e4c505e-f236-4169-9f4e-3ad99578db6c/0/3139352e3231312e35312e302f32342d3234203d3e203536393133.roa
Signing time:             Wed 05 Jul 2023 06:39:02 +0000
ROA not before:           Wed 05 Jul 2023 06:34:02 +0000
ROA not after:            Wed 03 Jul 2024 06:39:02 +0000
asID:                     56913
IP address blocks:        195.211.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:68:bf:c9:f6:61:a9:bc:57:90:d4:e4:e3:1c:5a:16:48:fb:20:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8e5883fa17e93eda29c9a5076baba8978a88d6
        Validity
            Not Before: Jul  5 06:34:02 2023 GMT
            Not After : Jul  3 06:39:02 2024 GMT
        Subject: CN=84D18B167A8077AB43AE8CB1278D97719CFAB8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:d1:c5:ea:3c:70:38:e4:fd:4e:55:2c:f3:
                    80:ac:17:09:dd:7a:7d:06:45:11:34:9a:a3:76:1b:
                    54:be:4a:d2:be:f4:38:43:b8:e4:53:ce:ed:6f:56:
                    a4:8c:f0:82:5c:41:f3:c5:f8:3e:30:e7:13:c2:14:
                    31:9d:fc:c6:8f:c8:97:72:d0:ab:55:8c:01:a9:61:
                    b2:42:85:1c:a8:19:af:74:8c:1c:b4:77:dc:a3:9c:
                    fe:a1:68:96:4c:29:c4:25:ce:8b:41:5b:a8:2e:57:
                    c4:fe:8c:f4:c1:35:bd:09:95:cd:6e:1a:78:4e:07:
                    b5:4c:b0:23:f2:6d:fc:9f:e2:35:69:a6:b6:40:05:
                    c0:30:4d:a1:17:a9:2f:1e:83:b9:3f:2b:54:0a:cd:
                    fb:12:08:8a:a1:6e:01:13:09:4d:c6:06:f0:ab:52:
                    9f:78:b2:17:2c:30:1b:b0:ef:81:ea:bb:66:c6:2e:
                    24:b6:a2:0b:54:84:73:16:5f:84:ca:01:d0:fa:4c:
                    91:6c:7f:95:c1:11:b8:d5:a6:89:d0:0b:89:64:f0:
                    26:14:e6:62:10:dd:a0:7a:34:05:bb:bc:79:84:40:
                    66:51:00:f8:c5:1c:d3:a6:83:d8:82:95:32:f2:61:
                    33:d1:f1:ff:fd:f9:6b:f2:cd:36:75:d9:b8:59:ec:
                    1d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D1:8B:16:7A:80:77:AB:43:AE:8C:B1:27:8D:97:71:9C:FA:B8:B1
            X509v3 Authority Key Identifier:
                keyid:5D:8E:58:83:FA:17:E9:3E:DA:29:C9:A5:07:6B:AB:A8:97:8A:88:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4e4c505e-f236-4169-9f4e-3ad99578db6c/0/5D8E5883FA17E93EDA29C9A5076BABA8978A88D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY5Yg_oX6T7aKcmlB2urqJeKiNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4e4c505e-f236-4169-9f4e-3ad99578db6c/0/3139352e3231312e35312e302f32342d3234203d3e203536393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.211.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9d:6f:af:b3:dc:86:f2:62:4b:cb:3c:33:9a:68:41:1e:72:
         a8:a5:93:53:00:db:e6:9b:1f:a5:48:f7:0e:72:8b:42:69:bd:
         6d:50:63:aa:8f:ea:16:a9:94:bd:1f:35:d0:00:f5:21:fc:3b:
         ae:8e:f9:5a:60:5d:e5:b8:77:fb:44:5e:f6:e0:1b:a0:9e:c5:
         fb:ab:d6:19:69:f5:4c:79:7b:78:1f:0d:4b:f6:d9:f2:3a:35:
         32:27:29:5e:57:6d:5b:b8:4f:b9:86:a3:73:10:8f:3d:1a:2c:
         aa:9a:53:62:ac:9c:52:b5:88:1c:f8:10:31:ed:b7:d3:db:09:
         5a:78:b9:8a:86:8f:82:2c:6b:21:20:da:d3:a1:10:b2:52:25:
         1f:45:3d:b7:c2:5f:12:c7:42:d7:b4:46:19:08:5b:2e:5c:40:
         bb:16:ff:3a:85:1d:2f:13:af:3f:2e:be:68:32:4a:2c:52:a3:
         a2:cc:60:df:0a:56:57:cf:ad:c1:55:13:b4:d6:15:51:52:8e:
         20:f6:91:44:e6:40:d5:63:09:2f:9d:ca:bc:e9:67:48:6f:c0:
         29:54:bf:c9:07:4f:7e:25:df:02:a9:b2:68:4b:4b:e5:a2:dc:
         a9:49:a7:88:ae:db:ce:f8:fa:2e:3a:58:af:da:85:05:18:58:
         3f:38:b2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org