Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205544.roa
File:                     AS205544.roa (raw, json)
Hash identifier:          jV+ZZJhugM+O/l19M8IzVT5Etsd1DTSDkifJVImkGX0=
Subject key identifier:   41:68:A2:8B:F9:E0:39:58:CD:C3:44:B1:C6:DA:83:A3:FA:D9:A9:DA
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       1F071EB6A03F199E31EE66715F5DE36BC08C54F4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205544.roa
Signing time:             Mon 26 Oct 2026 17:26:42 +0000
ROA not before:           Mon 26 Oct 2026 17:21:42 +0000
ROA not after:            Mon 25 Oct 2027 17:26:42 +0000
asID:                     205544
IP address blocks:        82.38.198.0/24 maxlen: 24
                          82.41.197.0/24 maxlen: 24
                          82.47.167.0/24 maxlen: 24
                          82.47.185.0/24 maxlen: 24
                          82.47.249.0/24 maxlen: 24
                          84.75.223.0/24 maxlen: 24
                          178.83.88.0/24 maxlen: 24
                          178.83.90.0/24 maxlen: 24
                          178.83.92.0/24 maxlen: 24
                          178.83.94.0/24 maxlen: 24
                          178.83.97.0/24 maxlen: 24
                          178.83.98.0/24 maxlen: 24
                          178.83.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:07:1e:b6:a0:3f:19:9e:31:ee:66:71:5f:5d:e3:6b:c0:8c:54:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Oct 26 17:21:42 2026 GMT
            Not After : Oct 25 17:26:42 2027 GMT
        Subject: CN=4168A28BF9E03958CDC344B1C6DA83A3FAD9A9DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:6b:dd:82:c4:02:12:04:de:79:38:83:0e:
                    50:d8:df:d3:56:0f:63:f2:38:a0:f0:3c:d6:fe:7e:
                    4f:fd:f8:14:04:6f:a8:a4:a2:15:2f:69:ad:f1:60:
                    37:17:6f:52:90:94:e2:1e:78:42:fd:14:4d:f6:6f:
                    47:ec:6d:05:3d:81:ee:f2:9b:af:c8:db:c9:bf:b4:
                    15:ed:26:cb:45:80:12:4b:b4:9a:8e:88:e7:47:ca:
                    3f:50:10:a3:5d:98:3c:f3:95:a1:23:4e:52:a5:ce:
                    b1:49:48:06:9b:8f:0e:69:b0:ba:4d:06:68:cd:17:
                    9b:57:f8:a3:b4:71:c2:2e:e9:b6:eb:a7:18:1c:2f:
                    4d:dc:81:22:49:99:4f:4d:68:54:50:e5:6f:a8:d9:
                    df:fa:f9:6d:94:d9:bf:b9:3a:74:ea:fd:ff:13:14:
                    9e:5e:02:e7:da:7f:23:8c:56:26:a7:5d:2c:24:cb:
                    41:fe:06:c3:3f:c0:9a:88:11:6d:90:b0:9f:99:97:
                    49:6f:6d:de:96:56:c3:e9:d9:74:be:ac:ac:bf:e6:
                    22:de:2b:99:28:36:98:34:94:31:db:18:bf:5d:a1:
                    ef:42:34:cc:61:10:31:2a:40:08:b0:90:70:a5:c0:
                    7c:7b:75:23:99:5c:36:81:8e:c8:5e:58:58:79:92:
                    3f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:68:A2:8B:F9:E0:39:58:CD:C3:44:B1:C6:DA:83:A3:FA:D9:A9:DA
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205544.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.38.198.0/24
                  82.41.197.0/24
                  82.47.167.0/24
                  82.47.185.0/24
                  82.47.249.0/24
                  84.75.223.0/24
                  178.83.88.0/24
                  178.83.90.0/24
                  178.83.92.0/24
                  178.83.94.0/24
                  178.83.97.0-178.83.98.255
                  178.83.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:79:88:8b:18:ed:3c:ae:fc:63:a3:47:fe:dc:71:e7:9c:2a:
         e7:e5:0a:8d:98:d5:18:cc:a8:80:de:a2:61:4c:b8:42:1c:72:
         86:f5:cb:1a:96:5c:15:05:b5:fe:a4:e3:c6:5d:c9:74:c6:3a:
         2b:23:5b:29:58:8e:3a:cb:68:bc:22:df:c1:1b:b7:01:90:3f:
         d2:10:42:db:69:d3:33:cd:a4:49:f4:85:4d:f4:6c:3d:a1:93:
         99:88:81:2e:c0:a1:5d:24:42:72:f6:a6:0b:64:0d:dd:c7:de:
         0f:e1:fd:8c:23:2d:35:f2:2d:84:ec:fa:2f:6b:48:e9:5e:7d:
         53:a7:2a:11:9c:af:c6:a7:87:73:09:7d:c1:43:9a:a4:b2:74:
         5f:5c:f9:44:c0:d5:89:48:7e:ca:70:80:7d:a1:43:94:9e:19:
         f4:6e:6a:15:20:37:b3:40:bc:99:29:70:75:32:9e:fb:b3:54:
         35:4c:4a:ab:2e:66:e9:58:ab:e7:3e:b0:3a:1d:0b:53:4b:78:
         0c:36:13:f4:9d:ed:d2:ee:be:0c:7c:55:fb:9a:a0:4f:ff:68:
         06:ea:87:b8:33:fd:f4:61:93:b2:bf:ce:fb:19:a7:65:5e:4c:
         ad:cb:fd:9b:a2:87:01:a4:a3:9b:70:3e:a9:07:15:1a:76:82:
         10:33:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----