Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154317.roa
File:                     AS154317.roa (raw, json)
Hash identifier:          MKtd5+SVQwg2Ni+DtsyPXVMNIl1EDNdfU9nvvniabkE=
Subject key identifier:   BC:E9:06:88:10:94:79:CC:22:DB:DB:4C:89:96:39:3C:46:84:EA:7D
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       41D7F9B44818B58F57DAEF5A84792A33A3989EC6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154317.roa
Signing time:             Sun 04 Oct 2026 11:10:33 +0000
ROA not before:           Sun 04 Oct 2026 11:05:33 +0000
ROA not after:            Sun 03 Oct 2027 11:10:33 +0000
asID:                     154317
IP address blocks:        178.83.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d7:f9:b4:48:18:b5:8f:57:da:ef:5a:84:79:2a:33:a3:98:9e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Oct  4 11:05:33 2026 GMT
            Not After : Oct  3 11:10:33 2027 GMT
        Subject: CN=BCE90688109479CC22DBDB4C8996393C4684EA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:48:90:15:67:a3:0f:3e:56:19:cd:42:7b:83:
                    2f:8d:54:36:e7:f0:7c:67:73:21:c9:17:c4:d6:44:
                    8a:8e:eb:77:b6:82:23:73:5e:ae:83:02:40:d9:8f:
                    0c:18:46:c2:0c:36:04:de:f1:e3:da:76:4a:b0:24:
                    45:94:d4:fc:03:38:62:a9:d0:de:dc:ec:fa:e3:6b:
                    3c:6e:22:cb:5f:a0:a7:fa:f6:de:df:a8:62:b6:e6:
                    2f:29:45:27:5a:4c:73:72:73:81:53:b9:86:37:d8:
                    54:1f:3a:01:2d:bc:0b:b1:99:f7:07:93:b2:f9:1b:
                    44:17:7f:82:31:20:0c:7c:af:2f:c7:43:51:6b:fa:
                    92:0c:a9:05:d6:6a:67:55:ee:d6:37:c2:23:e6:f3:
                    18:55:03:3f:c8:5d:00:52:22:97:a8:70:c2:f9:1d:
                    ba:5e:cc:9e:33:6d:61:23:f1:5a:73:cd:ad:93:f0:
                    df:f3:ed:28:07:ba:1b:24:c7:1d:cd:55:21:c0:de:
                    1e:44:50:60:09:30:55:d5:db:88:6c:0b:40:fb:1f:
                    50:60:43:fe:17:59:94:0b:86:50:93:66:dc:54:3a:
                    65:4c:c8:73:a9:e0:e9:80:5d:4f:e7:3b:9f:ef:61:
                    ed:8d:e8:c3:45:6f:7e:7c:0b:22:e6:fd:ae:29:41:
                    3d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E9:06:88:10:94:79:CC:22:DB:DB:4C:89:96:39:3C:46:84:EA:7D
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.83.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:bd:16:f4:54:8f:e6:0d:d3:78:07:b6:70:20:a0:16:60:
         a6:13:27:38:f1:d0:e7:73:5e:c0:52:27:1b:54:eb:f3:2a:e4:
         77:a2:47:26:5e:a9:54:16:d4:40:cc:87:ef:e1:8b:7f:bb:11:
         0b:04:d7:14:84:af:5b:26:6f:3b:4a:93:2c:e5:c2:af:39:1a:
         44:f1:3c:39:9b:b9:ec:a9:32:e3:e6:c0:67:7b:62:00:9e:16:
         9f:13:f1:2a:fe:a6:6f:7d:db:75:5f:a3:59:46:b4:69:01:64:
         c8:2e:51:6e:1c:48:cc:e6:c0:2c:6b:1b:5d:dd:12:f3:dd:85:
         92:9e:86:b7:66:34:11:c3:3b:5c:a5:f6:81:51:18:02:47:bf:
         24:e4:a6:b5:c6:17:ce:a3:f7:6f:5d:5a:c5:99:48:6b:eb:b8:
         04:67:4a:bc:30:73:2c:bd:31:f8:4f:8c:8e:03:c4:72:b0:47:
         71:10:49:19:41:fe:66:cd:34:51:03:69:1c:ca:d7:fb:0d:fa:
         b4:c9:3e:ac:4d:49:2a:49:bc:dc:6f:8a:44:6d:c4:53:1d:e8:
         a3:8e:47:03:85:d7:21:02:66:0b:ec:7b:19:15:1c:c9:5e:6f:
         54:c1:c0:4f:21:17:c1:6d:5c:a3:6c:30:d7:64:87:4d:fe:50:
         24:48:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----