Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/RUmn18ssAD-vTaSbXUpgeMiMs3g.roa
File:                     RUmn18ssAD-vTaSbXUpgeMiMs3g.roa (raw, json)
Hash identifier:          or3A2vKAQJ/EiLzIjbqaUQhSlH9lhOE+nAWXxF9GWcQ=
Subject key identifier:   45:49:A7:D7:CB:2C:00:3F:AF:4D:A4:9B:5D:4A:60:78:C8:8C:B3:78
Certificate issuer:       /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial:       018476D5582DD233ED848AE339C8CB152631
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/RUmn18ssAD-vTaSbXUpgeMiMs3g.roa
Signing time:             Mon 14 Nov 2022 15:50:03 +0000
ROA not before:           Mon 14 Nov 2022 15:50:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51765
IP address blocks:        45.149.63.0/24 maxlen: 24
                          45.149.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:76:d5:58:2d:d2:33:ed:84:8a:e3:39:c8:cb:15:26:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
        Validity
            Not Before: Nov 14 15:50:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4549a7d7cb2c003faf4da49b5d4a6078c88cb378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:58:e0:a1:a0:df:0d:1f:ac:8d:4b:de:7b:
                    e8:d2:17:4a:f6:33:44:df:e1:2b:79:27:1b:7f:21:
                    14:12:1a:ee:30:e1:43:24:cf:94:88:6b:0d:46:98:
                    2e:a3:83:5a:34:5d:ae:3e:db:99:d1:c3:15:a1:f9:
                    f7:4e:09:8c:25:06:c0:54:32:3c:66:3d:32:5d:61:
                    f3:98:15:f0:28:c7:57:64:0c:5e:f6:0a:02:d6:fd:
                    d3:49:54:85:24:4d:e1:c3:52:77:2b:de:78:f0:1f:
                    91:b4:ec:c5:87:e4:8f:f0:2d:1d:bc:eb:4a:70:9c:
                    ca:52:f1:f3:70:2c:c9:00:13:78:c1:93:b4:ca:18:
                    07:36:cb:66:ad:be:97:5a:38:69:c7:3c:1f:fb:75:
                    72:51:76:1f:f4:b5:05:bf:5a:72:b9:46:16:19:db:
                    72:cb:46:bd:33:01:59:c0:71:78:d1:ad:fb:69:92:
                    67:cd:a4:2e:aa:93:12:34:18:96:f4:cc:7f:88:bd:
                    bd:3e:c0:64:fc:7b:5d:cc:4e:b8:2c:d0:cd:11:42:
                    0e:70:54:2c:16:10:79:c3:09:5f:24:9f:22:09:b5:
                    c1:de:03:95:bf:7e:c1:5d:e8:50:bd:64:c2:e7:bd:
                    dd:f0:6c:e5:96:06:c8:1f:47:92:2a:a3:d3:34:a0:
                    5b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:49:A7:D7:CB:2C:00:3F:AF:4D:A4:9B:5D:4A:60:78:C8:8C:B3:78
            X509v3 Authority Key Identifier:
                keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/RUmn18ssAD-vTaSbXUpgeMiMs3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.61.0/24
                  45.149.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:fd:e3:40:83:ae:f8:31:4d:c2:82:4c:ca:0b:6d:f4:67:df:
         5e:41:2a:54:dc:17:93:95:94:16:4e:69:c1:47:43:0b:ac:63:
         be:76:f3:69:fe:a3:b3:17:8a:c9:b0:f1:4c:64:24:3f:6b:24:
         2f:1e:71:4e:c4:14:8d:6d:00:f5:33:b2:36:60:b7:bd:3f:f2:
         c3:df:0f:19:b9:bc:2c:73:22:f6:31:c6:53:73:74:4d:f3:2e:
         c2:21:61:f9:14:54:60:03:c0:b0:55:76:6d:a9:97:1e:9f:a7:
         34:a7:33:d7:d6:5b:72:9b:fd:5a:91:91:c9:b1:57:7c:eb:ca:
         0d:41:9f:fe:4a:7a:83:c0:27:ef:14:ef:71:34:9a:be:b5:55:
         54:55:ef:bc:36:69:5a:ba:8a:7d:1c:13:64:31:b7:6f:c0:47:
         49:c0:3d:10:99:f3:b4:15:f4:99:07:ab:db:02:a0:62:10:48:
         c6:d5:f1:e8:9f:b8:cf:e6:12:df:f6:80:62:f8:47:c9:b2:4f:
         16:a9:fc:7f:a6:4e:a8:29:56:4d:9a:b6:ca:82:9a:1e:42:cc:
         3b:15:88:82:3d:01:e2:a7:79:d1:17:a4:3f:4b:06:37:b3:aa:
         4b:db:0a:bf:b4:74:f2:09:62:52:da:10:fc:3a:89:f8:3d:90:
         d2:92:07:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org