Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4637.roa
File:                     AS4637.roa (raw, json)
Hash identifier:          sXL54PFVthoy/4xLcVVWr/IJW8hQ5FxR53l12vUeqXM=
Subject key identifier:   7C:E6:46:6A:A6:98:45:5A:12:30:C9:BB:B9:C2:F0:E7:A6:E1:EF:24
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       2FCA5FD268F2619E0F7E4B3E01D67DCCCBB70C47
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4637.roa
Signing time:             Sun 04 Oct 2026 23:14:18 +0000
ROA not before:           Sun 04 Oct 2026 23:09:18 +0000
ROA not after:            Sun 03 Oct 2027 23:14:18 +0000
asID:                     4637
IP address blocks:        96.62.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ca:5f:d2:68:f2:61:9e:0f:7e:4b:3e:01:d6:7d:cc:cb:b7:0c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Oct  4 23:09:18 2026 GMT
            Not After : Oct  3 23:14:18 2027 GMT
        Subject: CN=7CE6466AA698455A1230C9BBB9C2F0E7A6E1EF24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:36:6c:71:03:bb:ab:5f:23:85:8d:29:17:
                    89:09:10:37:74:ea:25:7c:2c:09:de:5a:58:f3:cd:
                    59:85:11:be:7a:48:5f:0c:ad:f5:88:53:68:f5:17:
                    81:1c:b1:28:de:08:be:ba:50:a6:85:5d:64:7d:08:
                    0b:63:28:97:0e:9f:a7:76:71:b1:b4:08:8a:53:5f:
                    37:ee:b9:80:97:85:a8:25:b6:b0:a5:b3:d7:c0:62:
                    11:d0:88:fa:0f:a5:8c:e6:7a:7c:d7:8c:2f:c7:03:
                    83:a6:c5:cb:cf:be:7d:c5:01:c9:63:59:7c:40:ef:
                    6d:43:14:f6:40:7f:ca:f7:09:27:cb:dd:ee:12:8d:
                    17:c6:36:62:e8:68:5a:8f:9a:70:88:9a:81:99:69:
                    2e:c2:a9:63:77:62:32:e2:fb:12:8f:8d:2a:13:ac:
                    aa:ea:0c:69:10:9a:a5:66:ff:a0:bb:23:77:73:64:
                    01:14:44:3a:3b:18:4d:71:95:1b:28:44:d9:82:bf:
                    22:a9:2e:de:b7:c6:e1:d6:da:a7:51:69:d2:bd:85:
                    dc:8c:0c:0a:a0:ca:d9:54:0d:ed:4e:98:35:cd:c2:
                    9e:cb:0c:0c:5b:5d:a2:6a:b9:49:c2:8f:30:23:2a:
                    39:56:0b:19:6a:3f:64:64:51:cb:a0:1b:58:90:3a:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E6:46:6A:A6:98:45:5A:12:30:C9:BB:B9:C2:F0:E7:A6:E1:EF:24
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.62.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:3d:a9:ef:b1:e1:19:b3:49:c4:13:c1:c8:c4:be:3c:e6:93:
         bc:2c:49:22:a5:ab:75:cc:d7:e9:c1:ec:07:dd:fb:b8:58:a5:
         2e:d6:b9:94:e4:90:14:a9:6b:d5:e7:8c:44:b3:6c:31:b5:c2:
         09:0f:b0:3d:2e:5f:18:30:04:0c:d3:73:6d:2c:35:c1:68:54:
         ca:7e:63:07:16:59:42:f9:9f:88:9e:37:8c:81:db:8a:d0:1b:
         52:04:81:71:8e:f0:ba:c9:d0:68:52:d3:04:51:51:b9:dc:de:
         0f:b5:a5:2c:fe:4c:55:42:26:6e:98:33:7f:93:f9:fa:e4:34:
         7b:34:46:a0:cf:ef:ca:4d:5c:d9:88:a9:34:82:66:d6:4b:41:
         c6:3c:b6:67:a7:d4:e6:95:8e:52:f7:5f:9e:74:9a:52:a3:d7:
         67:60:bf:dc:3a:1b:44:94:61:ce:cb:44:88:2f:bb:eb:45:f0:
         05:45:4a:62:1b:56:6e:27:5b:79:c6:6d:b0:5e:8b:44:85:0b:
         4b:79:0a:28:dc:ae:d6:e4:2a:7e:ab:a2:42:ea:b2:8e:a2:b9:
         a2:76:0f:6a:55:c4:8d:a6:8f:db:46:5c:83:41:59:09:48:76:
         df:c0:1d:e8:94:26:91:7c:47:52:06:8e:21:34:37:b0:fa:d1:
         04:ab:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----