Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Pycu2JKbRiI23GoaJfEOzGDnwdk.roa
File:                     Pycu2JKbRiI23GoaJfEOzGDnwdk.roa (raw, json)
Hash identifier:          Ig2y7qWKEaBNjQGa/rQpj2L7+nNgk6RXrIPH5tJNRiA=
Subject key identifier:   3F:27:2E:D8:92:9B:46:22:36:DC:6A:1A:25:F1:0E:CC:60:E7:C1:D9
Certificate issuer:       /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial:       01A1357D5E7D46E4D5455AB8A063FF434933
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Pycu2JKbRiI23GoaJfEOzGDnwdk.roa
Signing time:             Tue 13 Oct 2026 13:39:30 +0000
ROA not before:           Tue 13 Oct 2026 13:39:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        37.252.192.0/21 maxlen: 24
                          150.237.16.0/20 maxlen: 24
                          185.9.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:7d:5e:7d:46:e4:d5:45:5a:b8:a0:63:ff:43:49:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
        Validity
            Not Before: Oct 13 13:39:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3f272ed8929b462236dc6a1a25f10ecc60e7c1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:03:11:58:28:5a:ad:56:35:6f:ac:7f:99:
                    2d:a6:4b:d7:ff:bf:fa:ea:a7:8c:b9:e2:0a:ea:92:
                    85:b9:7a:97:5f:b8:74:f6:51:ea:37:e1:99:c3:bd:
                    3c:6c:fa:9a:34:59:bd:89:a8:44:b5:7d:05:8b:44:
                    f6:92:cc:17:0b:c6:d5:b7:36:8c:6b:44:3f:2e:e3:
                    08:e0:34:cb:d9:1e:79:01:9e:00:30:8f:d2:8a:22:
                    69:5f:75:20:00:de:11:1e:b2:28:e0:7a:bd:45:5b:
                    cb:4a:c5:c2:70:83:02:40:f1:2a:fc:a7:ae:3f:31:
                    19:66:48:b8:1a:37:3d:4d:1e:d8:b0:87:da:71:49:
                    74:a6:aa:70:85:37:97:27:3b:41:49:45:0d:0a:c7:
                    b5:df:05:cb:63:29:ba:18:ae:f6:c9:3c:4f:a1:27:
                    dd:0f:08:d5:a8:2d:e2:bd:b5:b3:32:da:46:d2:92:
                    a8:e2:db:4d:0f:2d:e1:12:30:d5:72:c1:2e:c5:70:
                    67:e9:b6:78:cc:51:6e:88:cc:22:22:90:f0:ab:f4:
                    3d:f0:d1:76:c3:49:e6:df:37:c1:47:ad:7e:67:d9:
                    d1:8d:a5:53:0a:12:72:67:5a:38:ef:89:ce:94:9b:
                    e9:40:16:4f:0c:0f:6d:ec:71:c5:55:b0:de:bc:0b:
                    5b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:2E:D8:92:9B:46:22:36:DC:6A:1A:25:F1:0E:CC:60:E7:C1:D9
            X509v3 Authority Key Identifier:
                keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Pycu2JKbRiI23GoaJfEOzGDnwdk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.252.192.0/21
                  150.237.16.0/20
                  185.9.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:c8:d0:a4:58:00:63:9f:f3:40:33:b9:ba:38:ec:6f:d2:36:
         f0:72:ca:ba:f6:58:14:f7:f9:2b:e7:6e:1a:c9:6c:36:52:d1:
         bd:0c:06:e1:05:57:e9:45:dd:ad:ba:9d:b5:bc:f4:db:4a:15:
         5b:05:a8:5e:87:69:74:ae:ec:cd:a2:28:ee:04:09:11:f3:10:
         ef:42:1d:ac:71:19:70:59:f6:11:51:f0:3b:a3:2d:08:4e:ce:
         95:7b:74:85:37:e5:25:e7:8c:6b:f7:5b:b2:6f:96:f7:10:79:
         29:d2:fb:e5:35:30:be:21:a4:90:80:61:ca:b4:66:f8:dc:9b:
         43:ab:c9:2e:ca:11:c7:65:c8:7a:4d:24:bc:fc:b0:99:05:b8:
         68:95:c5:9b:ae:74:fb:a7:33:95:f0:e5:c1:f3:6a:0b:d1:19:
         c0:ca:1b:6e:0b:0e:cc:c9:2e:4b:ad:76:8a:26:08:5a:40:93:
         ad:fc:49:3f:f5:c5:c8:4c:da:e4:8d:5a:87:86:81:81:5a:9e:
         82:2a:a8:9c:47:b7:f2:5c:94:ff:d5:f0:17:10:73:b1:76:c4:
         79:4a:28:d5:3a:e0:ed:eb:a7:a2:7d:61:8c:a3:89:94:d9:36:
         de:d2:7f:c8:27:c5:2a:2c:92:56:1d:34:e1:0f:28:dd:91:1c:
         7a:93:d3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----