Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS134494.roa
File:                     AS134494.roa (raw, json)
Hash identifier:          ABUD15cGFpmGCJBjlhdrm1BpCd/PGarEvpNGMMcs3qY=
Subject key identifier:   C5:B1:11:AE:BE:B6:76:E5:4A:F0:B4:3D:13:CE:A9:CA:C9:76:B6:E5
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       66121828B078808EE97CCEF7BAE4BBA4A779D93E
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS134494.roa
Signing time:             Wed 28 Oct 2026 13:18:21 +0000
ROA not before:           Wed 28 Oct 2026 13:13:21 +0000
ROA not after:            Wed 27 Oct 2027 13:18:21 +0000
asID:                     134494
IP address blocks:        46.236.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:12:18:28:b0:78:80:8e:e9:7c:ce:f7:ba:e4:bb:a4:a7:79:d9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Oct 28 13:13:21 2026 GMT
            Not After : Oct 27 13:18:21 2027 GMT
        Subject: CN=C5B111AEBEB676E54AF0B43D13CEA9CAC976B6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:c3:65:5d:0c:ee:47:71:ff:45:2c:80:1b:
                    66:0d:37:83:2c:7f:8f:ce:7f:ba:13:da:5c:46:75:
                    a3:11:8d:02:30:b5:05:8f:64:01:88:8b:b6:d5:66:
                    4e:14:44:c4:b4:8b:e1:d0:21:83:1f:b6:99:57:3e:
                    3c:be:0e:fb:f4:e4:f0:ef:02:4c:f4:c1:4b:b8:4e:
                    67:20:61:06:6a:4e:98:21:fc:62:46:a8:45:c4:3f:
                    20:7e:89:82:98:b5:78:f2:aa:ca:bb:02:c3:a9:47:
                    fc:5d:fb:01:3b:1e:8b:f1:ea:ab:b6:da:f6:d9:56:
                    7f:08:03:48:c6:c3:b5:9e:dc:39:63:c0:57:bc:3d:
                    ea:3f:fb:11:36:d0:a4:3c:d7:3d:93:b9:08:c6:6c:
                    c2:49:49:1b:8e:d8:9d:cb:96:29:78:f8:19:e4:d9:
                    45:46:3b:60:25:9e:38:63:b9:9b:79:46:cc:7f:4a:
                    60:e6:b5:65:2f:e5:4e:d0:cb:e7:d4:89:34:20:4c:
                    0e:cb:a8:b5:1b:98:13:97:79:e2:0f:62:8e:d9:74:
                    5e:c3:55:9e:62:4e:30:7c:32:c7:ca:1e:b1:17:9c:
                    d1:41:af:51:c5:92:08:56:db:19:d3:94:ad:4e:b7:
                    d7:c1:44:d2:62:b3:0d:df:fa:7b:f1:df:35:02:34:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B1:11:AE:BE:B6:76:E5:4A:F0:B4:3D:13:CE:A9:CA:C9:76:B6:E5
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS134494.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.236.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:3e:ae:b8:67:a3:eb:ab:80:dc:42:2f:c0:ff:11:29:f4:d6:
         dc:41:2f:e8:8b:69:b6:7b:14:dd:c9:d8:e9:58:d1:88:fc:b3:
         6d:66:85:78:9f:68:6d:69:bc:1f:0f:ad:6a:9e:e2:bf:b5:70:
         df:2b:c6:bd:5b:3a:08:82:c5:9a:e9:b2:9d:9b:f2:08:2f:f7:
         b2:1a:ad:70:79:bd:4d:6c:78:d2:46:62:d3:b7:c0:be:b6:8d:
         01:49:21:4a:f6:19:9b:52:5b:9c:18:2a:af:ad:ab:5c:ab:62:
         26:c0:3d:62:56:d4:d1:3b:c2:1c:6d:66:00:eb:7d:3a:12:a5:
         2b:f0:9f:23:7f:62:59:19:98:4f:f8:e4:d5:73:d9:7d:cf:a9:
         1d:57:10:e2:be:68:ba:d4:46:41:8a:4d:1f:aa:95:ba:1b:0d:
         e1:6f:68:31:cc:85:48:5c:15:09:fa:e6:4a:c8:fa:64:a6:8a:
         09:23:1e:94:43:9d:5c:c8:54:8a:5a:19:b6:2d:23:d4:10:fc:
         47:95:94:b8:70:27:00:8d:76:0c:0d:4a:42:76:48:49:f3:48:
         b5:de:b9:c4:57:bc:81:33:b4:92:a3:5f:ca:91:05:ce:9f:22:
         8f:de:c5:e3:9a:f3:c3:21:e2:85:27:c9:6a:2d:97:d0:21:e7:
         aa:6a:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----