Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219001.roa
File:                     AS219001.roa (raw, json)
Hash identifier:          TVJsO1zJ0Ghvo4tHHoMuL1Tnb2Gx/tVQIHKX2j1Gvm8=
Subject key identifier:   EF:D2:63:F4:00:FC:DA:08:8B:47:48:A6:5A:CC:1E:0F:BB:73:8F:27
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       591CA5DCCFF95D50C7AE1126E2E39E814CB7C3ED
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219001.roa
Signing time:             Mon 02 Nov 2026 18:34:30 +0000
ROA not before:           Mon 02 Nov 2026 18:29:30 +0000
ROA not after:            Mon 01 Nov 2027 18:34:30 +0000
asID:                     219001
IP address blocks:        79.182.48.0/24 maxlen: 24
                          79.182.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1c:a5:dc:cf:f9:5d:50:c7:ae:11:26:e2:e3:9e:81:4c:b7:c3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Nov  2 18:29:30 2026 GMT
            Not After : Nov  1 18:34:30 2027 GMT
        Subject: CN=EFD263F400FCDA088B4748A65ACC1E0FBB738F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:50:09:a5:0e:bf:ef:9b:23:c2:b1:c3:cd:
                    b4:6c:33:dd:5f:d6:31:5f:35:52:6b:82:81:e0:30:
                    ca:a8:46:fb:6b:cd:c7:d0:84:e7:e3:1f:47:cc:18:
                    24:f4:a5:bf:a9:1f:24:50:75:f5:33:5f:e1:b3:7f:
                    48:62:be:f7:a8:be:03:32:ce:78:c4:74:d1:c9:bc:
                    13:43:1d:b6:14:f7:13:e4:f4:e9:4e:43:32:b1:c1:
                    dc:6c:5c:63:4a:4d:16:a2:87:64:13:24:cd:b2:be:
                    08:72:7e:85:ed:c8:4b:55:f9:ef:d6:6a:a9:bd:ec:
                    31:37:75:3b:52:21:e6:47:10:b4:ad:4e:fe:cf:b0:
                    75:a0:08:c6:60:f9:d6:61:0c:67:11:f9:b6:50:d6:
                    45:d0:fe:21:50:c0:52:87:41:a0:96:96:98:81:2c:
                    cd:02:1a:ad:fb:c3:5e:ee:6e:e3:d8:ca:ce:76:97:
                    67:4b:4b:16:aa:6d:7f:58:04:b4:19:1e:65:9d:db:
                    46:9a:b1:17:9e:db:2a:b3:28:f4:7b:e0:d6:fb:ef:
                    24:83:13:66:9f:e9:60:58:51:26:04:f0:a9:85:e0:
                    11:39:f4:ea:a3:c7:27:58:ae:cc:f5:59:88:05:9b:
                    05:f1:1d:ad:85:aa:bc:b0:73:29:45:38:79:f6:e6:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D2:63:F4:00:FC:DA:08:8B:47:48:A6:5A:CC:1E:0F:BB:73:8F:27
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219001.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.48.0/24
                  79.182.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:16:80:67:3c:68:0a:3c:ba:61:06:70:56:42:cb:36:52:b2:
         e6:04:14:be:b6:e8:12:e5:84:62:90:31:72:8a:25:8c:27:5e:
         c3:7a:0e:a1:b2:6b:30:ab:46:e2:c3:69:37:6e:24:9d:94:9e:
         d9:ec:3d:52:e4:93:b7:c2:77:65:20:3d:b0:a1:86:88:c3:88:
         1f:a3:06:c3:25:a9:1e:41:c9:6e:bd:f4:9e:2f:ef:f5:47:10:
         52:70:0f:e1:d7:6d:b9:43:7d:11:78:6a:f0:6f:8e:0f:31:00:
         b4:79:06:a0:68:87:e6:2e:f4:6d:0c:39:70:d7:95:70:5b:d0:
         66:fa:a6:02:47:db:90:f5:ec:ac:5b:b9:0b:de:b0:6b:89:2a:
         5d:43:3c:b3:84:1d:24:0b:39:0e:40:0f:89:da:9a:bb:96:9c:
         1f:f8:a9:58:66:62:f1:91:74:9c:e1:8f:02:15:bd:8f:53:ab:
         64:77:fe:57:5c:25:03:a7:86:e8:e3:0c:8b:d1:be:9f:05:94:
         5f:f4:d4:61:33:68:2f:e4:0c:27:d8:63:0d:5e:c0:bb:47:e7:
         67:cb:49:f1:68:23:de:45:19:e6:4d:ab:ab:31:a2:b5:36:36:
         b4:ef:43:22:65:ec:c9:4e:fe:f3:44:fd:3a:5f:e2:ce:92:fc:
         1b:e2:2c:28
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUWRyl3M/5XVDHrhEm4uOegUy3w+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjExMDIxODI5MzBaFw0yNzExMDExODM0MzBaMDMxMTAvBgNV
BAMTKEVGRDI2M0Y0MDBGQ0RBMDg4QjQ3NDhBNjVBQ0MxRTBGQkI3MzhGMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC671AJpQ6/75sjwrHDzbRsM91f
1jFfNVJrgoHgMMqoRvtrzcfQhOfjH0fMGCT0pb+pHyRQdfUzX+Gzf0hivveovgMy
znjEdNHJvBNDHbYU9xPk9OlOQzKxwdxsXGNKTRaih2QTJM2yvghyfoXtyEtV+e/W
aqm97DE3dTtSIeZHELStTv7PsHWgCMZg+dZhDGcR+bZQ1kXQ/iFQwFKHQaCWlpiB
LM0CGq37w17ubuPYys52l2dLSxaqbX9YBLQZHmWd20aasRee2yqzKPR74Nb77ySD
E2af6WBYUSYE8KmF4BE59OqjxydYrsz1WYgFmwXxHa2FqrywcylFOHn25uQTAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU79Jj9AD82giLR0imWsweD7tzjycwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTkwMDEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBABPtjADBABPtoYwDQYJKoZIhvcNAQELBQADggEBAN8WgGc8aAo8umEG
cFZCyzZSsuYEFL626BLlhGKQMXKKJYwnXsN6DqGyazCrRuLDaTduJJ2UntnsPVLk
k7fCd2UgPbChhojDiB+jBsMlqR5ByW699J4v7/VHEFJwD+HXbblDfRF4avBvjg8x
ALR5BqBoh+Yu9G0MOXDXlXBb0Gb6pgJH25D17KxbuQvesGuJKl1DPLOEHSQLOQ5A
D4namruWnB/4qVhmYvGRdJzhjwIVvY9Tq2R3/ldcJQOnhujjDIvRvp8FlF/01GEz
aC/kDCfYYw1ewLtH52fLSfFoI95FGeZNq6sxorU2NrTvQyJl7MlO/vNE/Tpf4s6S
/BviLCg=
-----END CERTIFICATE-----