Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218321.roa
File:                     AS218321.roa (raw, json)
Hash identifier:          D85tluyaTgTkscXNoePWDOYAdW6ZilGKdhu6TPIgUqY=
Subject key identifier:   F8:B1:A2:81:93:84:7C:9E:A6:CE:25:6E:DE:07:1D:05:A8:94:2E:86
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       0D6E64A799D319E3E8E4F00D09FC6B8F06642BC1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218321.roa
Signing time:             Sun 25 Oct 2026 10:19:48 +0000
ROA not before:           Sun 25 Oct 2026 10:14:48 +0000
ROA not after:            Sun 24 Oct 2027 10:19:48 +0000
asID:                     218321
IP address blocks:        2a13:9500:1f6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6e:64:a7:99:d3:19:e3:e8:e4:f0:0d:09:fc:6b:8f:06:64:2b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Oct 25 10:14:48 2026 GMT
            Not After : Oct 24 10:19:48 2027 GMT
        Subject: CN=F8B1A28193847C9EA6CE256EDE071D05A8942E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:c9:33:13:2b:c6:41:fa:8c:2e:4a:4a:70:
                    ea:b9:5b:57:c3:a4:b1:4d:96:3e:7c:74:ab:00:72:
                    36:f2:79:e0:d3:89:28:7e:93:d4:bd:e5:e9:94:3b:
                    0f:31:23:fb:d0:a1:0c:6b:7f:5b:08:a4:a3:51:16:
                    fa:bc:00:ba:e7:e8:69:6e:89:2a:87:ab:90:50:a7:
                    34:f7:0d:7c:5e:26:b2:ba:cd:7f:d8:ed:ef:36:70:
                    ba:dd:9f:13:3e:0a:89:aa:2e:2c:88:2d:aa:52:60:
                    46:91:b7:32:71:9b:60:18:69:35:10:6c:49:bf:73:
                    c8:82:92:f9:47:d5:68:13:36:7f:27:1f:67:f2:50:
                    bb:fb:43:87:ad:9d:b0:25:1f:9d:02:47:b3:38:79:
                    82:da:7b:68:d4:9e:94:23:8d:0d:01:b3:f4:22:a5:
                    44:bb:93:bd:29:fe:a5:45:10:8f:2c:8c:f0:af:b8:
                    be:e0:46:c2:fb:45:d2:0e:73:51:31:9a:7b:d1:a0:
                    1e:a5:7f:43:26:b5:ef:2a:28:58:cc:95:a2:c1:68:
                    49:dc:5d:f3:ad:60:8e:e8:a1:17:fb:35:f3:28:f2:
                    8d:90:39:cf:58:d0:4e:4a:55:aa:3a:25:fa:88:ae:
                    19:ec:4d:c8:47:10:90:01:77:82:cb:eb:3b:44:cb:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B1:A2:81:93:84:7C:9E:A6:CE:25:6E:DE:07:1D:05:A8:94:2E:86
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218321.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:1f6::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:d3:28:46:ff:84:44:17:11:8a:63:e0:aa:ff:bf:9e:ef:10:
         b3:c7:b7:31:b1:75:3c:0a:67:5c:ca:91:4d:0d:12:3e:d4:cf:
         9b:a5:18:3b:9e:db:4c:e7:b3:ae:51:b3:e7:bc:c8:eb:04:ea:
         63:b6:c8:38:ee:c7:ba:4b:ba:b0:e2:95:60:21:e6:fe:13:f2:
         46:a9:2e:d9:1f:47:61:00:73:6f:6d:51:29:0b:31:67:9d:92:
         be:8b:47:d7:41:09:2c:03:8b:e9:43:31:a8:74:a8:9d:23:4e:
         61:58:81:f0:a1:ee:e1:96:61:71:fb:76:92:a5:19:a0:0d:3f:
         75:1f:75:74:66:12:2c:f7:3c:c7:b6:50:e9:14:f4:19:cf:f5:
         a0:86:e7:7e:99:32:a0:81:08:6d:1b:1e:37:0f:e6:c3:dd:8c:
         ee:a2:36:c8:5c:ba:f8:f0:de:5b:ea:0d:42:9d:bc:e8:e4:dc:
         a5:68:a6:70:ce:a9:a4:9d:d7:6a:ef:dc:c2:91:2b:d5:d5:e8:
         10:33:80:5f:5d:5d:ba:17:c8:15:5b:2b:68:a1:37:47:d2:8e:
         94:ae:0d:5d:1b:8c:f5:e3:4f:a2:86:fa:ea:ad:42:44:ea:53:
         96:8d:09:6e:f2:fe:95:91:eb:61:e9:99:1d:23:bb:9a:bb:0d:
         ce:4c:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----