Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214716.roa
File:                     AS214716.roa (raw, json)
Hash identifier:          jPibhATIBo3t7OufwuX7iPJwhxN/nXlubP5IPblhbFQ=
Subject key identifier:   5F:46:F5:E8:6C:36:81:F8:79:6D:DF:21:F3:5F:B1:47:D0:8C:49:CC
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       07FE95DF763A55C2097E5E0DBABF19BFEA61F4B8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214716.roa
Signing time:             Sat 31 Oct 2026 09:12:52 +0000
ROA not before:           Sat 31 Oct 2026 09:07:52 +0000
ROA not after:            Sat 30 Oct 2027 09:12:52 +0000
asID:                     214716
IP address blocks:        82.29.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fe:95:df:76:3a:55:c2:09:7e:5e:0d:ba:bf:19:bf:ea:61:f4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Oct 31 09:07:52 2026 GMT
            Not After : Oct 30 09:12:52 2027 GMT
        Subject: CN=5F46F5E86C3681F8796DDF21F35FB147D08C49CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:6d:2a:3c:9b:ac:64:3e:f1:d1:de:7b:2b:
                    e0:6a:b4:b7:e8:1f:a3:ef:3f:e2:41:85:b4:03:99:
                    b2:98:01:29:3a:e3:37:39:5a:0c:de:00:ab:a0:4f:
                    e8:25:7f:02:90:a5:9a:5b:63:cb:66:ab:f3:df:5b:
                    e6:52:89:5d:44:b2:95:4d:97:ac:cc:bf:df:5e:19:
                    04:8a:fb:06:35:0f:72:27:48:4d:56:05:29:ab:9c:
                    3b:4b:14:c2:8f:cf:d1:77:2f:1e:19:b7:1d:57:ef:
                    d0:d8:5c:b3:af:c7:d8:3b:23:1e:6b:d4:c2:f7:5c:
                    95:ad:0c:3f:f5:1a:b9:5a:9c:40:28:5a:b7:99:8f:
                    e2:0e:54:a0:6b:e1:17:33:7c:a3:45:25:01:bd:60:
                    2f:88:d0:71:1b:a9:36:aa:7a:70:df:30:4b:34:32:
                    28:64:f3:8c:cb:cc:a7:fb:a0:b5:f3:7d:4b:67:33:
                    58:15:e0:4d:01:66:66:e5:88:25:88:8d:56:89:08:
                    9c:7e:fc:ed:10:17:71:b7:69:f5:96:d0:43:c1:27:
                    9e:46:b2:b3:20:9b:2c:4a:3c:39:3c:8d:78:30:cb:
                    24:82:40:31:f7:30:9e:a9:ee:62:04:50:00:04:f9:
                    01:31:f9:61:aa:20:0d:69:65:74:b3:2a:2a:88:21:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:46:F5:E8:6C:36:81:F8:79:6D:DF:21:F3:5F:B1:47:D0:8C:49:CC
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214716.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.29.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ec:f6:51:8c:73:a7:c2:c5:95:c6:2b:ee:0c:82:65:ff:df:
         1e:83:97:50:e7:f2:7c:14:a7:06:1c:99:ea:a5:40:f1:9f:81:
         d2:b7:04:2a:c4:80:bc:6d:19:e0:70:1b:d0:12:36:27:b9:69:
         56:cb:15:26:4b:1a:98:21:b8:20:eb:40:3d:d2:65:f1:59:f0:
         78:1f:18:95:70:86:a5:9c:e3:3e:70:08:5b:65:af:8a:26:bc:
         ee:8d:10:41:3b:c9:2e:5c:c8:b9:2a:fd:a6:4d:db:36:ea:de:
         f5:60:9f:43:04:4c:0c:17:7b:9e:b4:2b:ea:46:7e:6d:d8:34:
         92:3f:39:8b:b9:4c:25:b9:1d:69:1f:e6:26:fc:53:26:89:2a:
         6a:0c:86:5f:78:9a:84:c6:60:c4:c0:a1:c6:aa:bf:76:43:1b:
         49:fc:8e:3b:e5:cf:ad:47:ef:5a:10:58:14:75:b3:f5:1c:16:
         eb:0a:30:50:42:bf:65:69:34:b1:c9:e3:1a:1f:36:57:fe:92:
         e3:a9:22:09:0b:c9:b4:cf:21:19:06:38:d2:47:b6:b5:4d:1b:
         84:05:f3:f9:73:7c:e9:87:9e:2c:fc:11:ab:a4:e4:de:5f:ca:
         e8:f9:3e:fc:ee:59:fe:51:9e:4d:68:3b:b2:e5:f9:f2:56:36:
         89:b9:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----