Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
File:                     AS63023.roa (raw, json)
Hash identifier:          /6W/G5ddRJjV6WhaP8+qO0HZ1Xxw+z7cvoFxs29PAec=
Subject key identifier:   80:CD:91:60:CC:8D:3C:9F:D9:94:40:EA:79:8E:8B:89:2B:6D:B5:E3
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       7E3F158D2B94F34AD07E164405D1895F090D4489
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
Signing time:             Wed 04 Nov 2026 11:24:33 +0000
ROA not before:           Wed 04 Nov 2026 11:19:33 +0000
ROA not after:            Wed 03 Nov 2027 11:24:33 +0000
asID:                     63023
IP address blocks:        96.62.100.0/24 maxlen: 24
                          143.14.67.0/24 maxlen: 24
                          143.14.220.0/24 maxlen: 24
                          155.117.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3f:15:8d:2b:94:f3:4a:d0:7e:16:44:05:d1:89:5f:09:0d:44:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Nov  4 11:19:33 2026 GMT
            Not After : Nov  3 11:24:33 2027 GMT
        Subject: CN=80CD9160CC8D3C9FD99440EA798E8B892B6DB5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b6:25:7c:0a:38:2e:1f:38:9b:f7:f7:0c:6c:
                    e6:bd:5a:06:c7:a5:4e:52:e2:8b:b1:37:a5:08:a7:
                    69:d9:aa:b9:be:45:1c:57:62:d1:56:44:10:64:e2:
                    97:55:33:39:2b:31:51:8c:89:f9:e4:b0:a2:d9:ba:
                    00:18:72:8e:ee:58:b6:63:a8:16:da:df:12:70:f0:
                    9d:96:d0:d4:f6:85:4e:a1:09:49:ca:77:1a:20:67:
                    87:f3:ce:5e:ed:8d:55:fe:41:40:3c:c2:07:df:05:
                    42:3b:a4:ac:1d:a2:26:b4:2b:19:d8:4c:6d:48:bb:
                    a3:3e:d3:88:40:67:67:4e:15:ed:98:7c:79:29:b0:
                    a3:5a:b8:4e:90:f3:25:15:ea:0c:35:3f:5a:8a:16:
                    aa:85:6e:3d:51:18:24:6c:9f:01:fd:53:81:4b:9a:
                    97:07:ce:26:a9:e2:ec:9c:15:9a:6b:48:56:b6:9c:
                    13:0b:90:43:46:66:d9:0c:6d:32:47:31:3c:10:a9:
                    ea:bf:e9:3a:ea:e8:52:44:16:7f:3d:56:5a:90:07:
                    3d:32:27:6d:ca:61:2a:22:97:2e:86:b3:e8:22:2a:
                    ed:0a:ac:e1:9e:97:ca:d2:63:04:1a:89:b7:06:a6:
                    d6:41:66:8c:d3:c7:44:af:04:88:84:46:13:f1:74:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CD:91:60:CC:8D:3C:9F:D9:94:40:EA:79:8E:8B:89:2B:6D:B5:E3
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.62.100.0/24
                  143.14.67.0/24
                  143.14.220.0/24
                  155.117.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:06:80:79:c9:6d:0f:6a:7d:bb:50:ad:b1:d5:93:35:20:89:
         cc:c4:7c:d3:26:06:45:25:ca:b7:b6:ee:db:74:5b:38:1b:8d:
         86:ac:2f:b4:cf:49:d3:68:95:76:11:34:42:22:1b:e5:30:d8:
         42:63:f2:aa:c3:68:b9:1c:96:b3:f8:0c:d2:61:86:9c:16:8e:
         32:09:59:8b:01:2c:59:48:98:09:d9:f9:8d:a6:d9:4e:51:35:
         b3:e2:bd:0a:66:5c:63:f4:c4:2a:3a:32:fe:7c:61:cd:2b:c3:
         84:29:0b:18:f0:42:01:19:38:c9:f9:4c:a8:f2:95:c5:a1:a3:
         d3:7e:02:81:43:42:ef:d9:17:69:ae:1d:83:f1:6b:eb:fe:d4:
         bd:44:06:3b:c4:45:2a:03:8b:1e:34:2f:2f:6f:f6:ac:77:f6:
         f7:d4:fe:4d:cb:06:bc:bd:0b:74:de:cb:17:3d:ba:b0:47:61:
         6a:26:e5:35:ca:b4:39:bb:1d:f9:aa:d3:e1:0d:df:36:69:e5:
         b8:68:dd:ac:ee:e9:e2:ad:2e:c9:12:08:ed:03:2d:79:2c:70:
         df:83:55:23:6b:fc:49:33:53:e2:20:84:4a:35:df:6d:01:ae:
         b1:0d:cb:c3:43:c7:b4:ee:60:57:38:61:e4:c8:91:ae:7c:12:
         7a:33:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----