Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218796.roa
File:                     AS218796.roa (raw, json)
Hash identifier:          p/mwdihnMs4PzoT0xRnXGYm1WcvgAJoAUULIcko+q1w=
Subject key identifier:   CB:34:C6:F6:AC:DB:92:15:63:45:87:9C:D1:79:C8:EF:3D:3C:26:13
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       6273CD04F0211C41B335A0339BB735D2002E8997
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218796.roa
Signing time:             Fri 30 Oct 2026 07:31:08 +0000
ROA not before:           Fri 30 Oct 2026 07:26:08 +0000
ROA not after:            Fri 29 Oct 2027 07:31:08 +0000
asID:                     218796
IP address blocks:        2a13:9500:1fc::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:73:cd:04:f0:21:1c:41:b3:35:a0:33:9b:b7:35:d2:00:2e:89:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Oct 30 07:26:08 2026 GMT
            Not After : Oct 29 07:31:08 2027 GMT
        Subject: CN=CB34C6F6ACDB92156345879CD179C8EF3D3C2613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:96:e8:42:57:4b:8c:e8:44:05:1a:99:f2:
                    3e:16:3c:de:4e:90:b4:ae:ce:0b:80:90:c2:21:7b:
                    17:31:bc:1f:06:56:e7:16:52:c8:12:40:96:d5:a3:
                    d0:f9:e6:04:3b:86:1e:95:45:8c:71:79:67:a4:26:
                    59:43:0f:71:c9:21:e0:53:1a:a1:ca:9e:5a:4d:75:
                    07:6c:99:50:0a:9e:00:03:83:e6:0b:2f:af:ab:88:
                    4b:ab:95:f6:11:35:47:30:49:8d:3e:9a:e4:1a:4a:
                    59:24:33:64:ae:81:76:f2:22:67:cb:15:97:7b:e9:
                    30:37:1a:9e:46:a0:79:6f:91:c0:74:56:6f:c0:ca:
                    97:e9:01:32:9c:49:0c:00:98:b9:4b:d2:0a:a4:4f:
                    73:ff:16:54:67:0f:9d:ee:89:23:fd:da:5f:d7:19:
                    ce:05:78:36:fe:95:4a:39:90:0d:95:7e:bf:4c:e5:
                    1b:85:c5:5a:c7:da:06:1e:b3:83:c8:29:04:20:47:
                    26:d2:a2:1f:eb:29:23:97:f1:47:91:1d:9d:d5:c7:
                    e4:91:31:80:c7:78:08:84:cf:d8:bd:51:77:87:2f:
                    10:cd:fe:90:15:e2:a8:f3:6b:6d:f6:2b:0f:6a:26:
                    49:03:07:3e:d9:2f:90:7d:31:67:28:79:a4:f9:77:
                    c4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:34:C6:F6:AC:DB:92:15:63:45:87:9C:D1:79:C8:EF:3D:3C:26:13
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218796.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:1fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:4e:5c:47:f5:88:ea:79:dd:95:7f:0d:bf:8d:69:ff:5b:3c:
         08:87:f4:2c:ef:4c:26:30:b3:c7:e2:1c:e2:d1:1f:eb:1b:e0:
         8e:5f:ad:0b:8e:15:4c:33:c1:34:f6:29:79:46:f3:19:36:06:
         bc:72:ed:94:25:55:20:0a:56:64:0d:69:d0:bd:f0:6d:7e:5e:
         df:47:99:15:ce:75:fe:11:25:f1:ac:9d:74:94:53:0f:a1:d0:
         90:94:ce:d4:2b:57:85:1b:e2:28:78:47:db:fd:8d:07:56:e6:
         4e:69:ac:b0:74:23:a9:04:46:ac:96:8e:26:4e:76:dd:17:7e:
         89:85:58:f0:53:89:de:73:7d:87:f1:61:5e:21:6f:00:d0:b9:
         1e:22:9b:8e:9c:74:41:31:c9:8f:dd:84:63:fa:6a:4f:30:d0:
         92:0f:35:db:ed:06:f6:13:25:19:dc:79:cc:1d:9c:dc:bd:06:
         d8:9e:5b:b8:8d:a6:f8:48:29:14:ef:c7:76:c1:49:0f:d8:91:
         7b:6a:27:55:2f:06:6f:ed:e1:25:a7:44:35:31:6f:37:f6:45:
         89:de:3c:c7:32:a8:ae:02:ce:a8:39:92:13:92:d3:ce:f3:35:
         9c:c5:50:46:d0:41:bd:26:46:18:7d:75:f1:cd:ec:a6:31:89:
         64:3c:8c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----