Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/RUgJG5CON_gPHmRICMu1pyilicM.roa
File:                     RUgJG5CON_gPHmRICMu1pyilicM.roa (raw, json)
Hash identifier:          U4aaHIIBj6P02740AzoLQhmUTbKj1kbukF2X6eUirD8=
Subject key identifier:   45:48:09:1B:90:8E:37:F8:0F:1E:64:48:08:CB:B5:A7:28:A5:89:C3
Certificate issuer:       /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial:       01837AD0D0E502B8CBD7D0D14F140C617265
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/RUgJG5CON_gPHmRICMu1pyilicM.roa
Signing time:             Mon 26 Sep 2022 17:20:48 +0000
ROA not before:           Mon 26 Sep 2022 17:20:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61138
IP address blocks:        45.143.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7a:d0:d0:e5:02:b8:cb:d7:d0:d1:4f:14:0c:61:72:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
        Validity
            Not Before: Sep 26 17:20:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4548091b908e37f80f1e644808cbb5a728a589c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:87:23:33:ae:be:9a:7f:0a:ec:e9:66:8c:
                    1c:2f:f9:12:39:aa:8c:69:a0:f7:b9:dc:95:ae:98:
                    34:4f:ef:34:ef:b6:02:3f:41:23:09:ba:ee:9e:25:
                    70:40:85:f3:36:9c:b8:2c:35:94:c1:65:c6:a2:05:
                    12:70:31:72:ed:3f:40:66:fd:d7:00:07:08:56:7b:
                    d7:37:fd:f2:90:01:25:5c:e2:b9:61:72:78:43:38:
                    6e:64:0e:27:5b:ab:8d:38:b2:07:fa:08:0d:75:45:
                    2e:1b:6e:b9:e2:d7:9d:84:f4:55:a5:09:e2:56:7f:
                    5e:db:6c:63:e8:68:53:b9:bb:dc:f3:5d:d9:3a:18:
                    3d:fc:b6:15:17:5b:50:8e:29:de:ed:7d:2e:a2:ce:
                    49:d4:8e:2a:6b:14:a0:6c:6c:6b:c1:3f:b2:e8:91:
                    67:89:db:17:ff:66:b1:71:f0:fc:30:11:3c:dc:06:
                    92:d5:4a:a5:e8:b4:d9:12:2f:88:df:81:dc:4c:f3:
                    9a:5b:92:cd:ae:a0:f1:14:30:7a:de:9e:84:9c:36:
                    40:46:a5:39:62:80:4c:14:d1:8a:8f:08:5e:a3:fe:
                    16:74:11:95:5c:2a:f2:9f:56:67:a4:f6:67:20:ad:
                    b0:5d:31:9f:5d:3c:d8:e3:68:1e:27:4e:8d:90:b1:
                    c4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:48:09:1B:90:8E:37:F8:0F:1E:64:48:08:CB:B5:A7:28:A5:89:C3
            X509v3 Authority Key Identifier:
                keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/RUgJG5CON_gPHmRICMu1pyilicM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:34:d7:3e:85:f5:7a:57:54:c2:84:38:14:e5:6b:3f:67:c3:
         57:2f:30:82:2a:9d:a9:2b:fd:d4:f3:1d:35:b4:24:3e:94:bf:
         9d:98:ab:86:c7:53:d9:54:08:91:e1:ce:5e:2a:b9:cf:0d:e8:
         64:76:4c:c2:f8:a7:ee:19:e4:0b:2b:f3:68:64:d4:54:52:d2:
         57:d4:8f:20:d0:9e:43:61:ae:cb:75:91:08:a5:06:db:2c:1c:
         cd:90:29:f6:cc:8a:8c:27:33:2f:be:c6:88:30:ac:03:fd:60:
         59:95:3d:61:bb:b0:26:a5:69:98:0b:da:5f:bb:fa:ee:c9:af:
         2e:de:6e:08:9b:1a:1d:52:f2:4b:98:48:a4:a5:87:33:0f:73:
         c2:f9:24:ba:87:ea:4f:d4:b1:91:e7:6c:dd:6c:1f:d9:4a:12:
         4a:5a:aa:96:f3:98:2e:b9:49:84:33:d6:69:39:a4:d9:74:a8:
         6f:b6:08:11:87:5c:0a:1e:e6:bd:48:0f:46:5f:a1:60:41:f3:
         44:88:4e:fa:76:e3:78:59:ef:f4:22:05:ad:b3:f6:8d:a8:a3:
         d4:41:f1:3f:f2:b9:a1:9d:00:da:e2:9a:66:52:f4:ed:48:41:
         c4:76:f4:56:a2:2a:78:8a:06:ea:bf:18:ed:e0:a3:ba:31:f8:
         c8:91:50:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:00 2024 by rpki-client on console-fra.rpki-client.org