Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS262287.roa
File:                     AS262287.roa (raw, json)
Hash identifier:          b9kv8Ah7PIf7let9YfDacvsw/lxJNlGDzXRNVu7oZGg=
Subject key identifier:   2A:2E:10:08:F2:EF:E0:E5:D3:ED:4F:15:C1:04:C5:D2:5D:20:EE:20
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       43E66A71B0D147DA3AEC9564202E1BD92877C285
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS262287.roa
Signing time:             Thu 05 Nov 2026 12:08:02 +0000
ROA not before:           Thu 05 Nov 2026 12:03:02 +0000
ROA not after:            Thu 04 Nov 2027 12:08:02 +0000
asID:                     262287
IP address blocks:        82.23.26.0/24 maxlen: 24
                          82.23.27.0/24 maxlen: 24
                          82.23.29.0/24 maxlen: 24
                          82.23.32.0/24 maxlen: 24
                          82.23.33.0/24 maxlen: 24
                          82.23.35.0/24 maxlen: 24
                          82.23.36.0/24 maxlen: 24
                          82.23.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e6:6a:71:b0:d1:47:da:3a:ec:95:64:20:2e:1b:d9:28:77:c2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov  5 12:03:02 2026 GMT
            Not After : Nov  4 12:08:02 2027 GMT
        Subject: CN=2A2E1008F2EFE0E5D3ED4F15C104C5D25D20EE20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:a3:55:f9:4c:cc:7d:e4:82:cf:23:d7:1c:
                    03:b8:61:11:af:fa:2d:0b:0a:0b:74:38:ef:09:8b:
                    04:cd:4a:34:fd:92:0b:39:ab:e0:8e:15:95:c3:1c:
                    17:a2:a3:1b:cc:6e:34:7a:2f:a4:ee:43:64:c9:d5:
                    36:07:b0:1d:03:75:d5:fc:f5:f5:7b:8e:81:b8:ee:
                    e8:b9:38:1c:5c:70:58:61:76:1a:2b:c2:d3:1a:a4:
                    20:a2:47:ed:20:c6:0a:a6:6a:5d:b8:47:c3:6f:56:
                    08:12:b5:32:1e:bc:d7:2f:1b:51:f5:f0:19:1c:0f:
                    c5:dc:86:8a:29:57:34:85:cd:23:a5:3d:f1:3f:92:
                    33:46:51:78:f6:0f:18:87:d6:14:db:1e:eb:4e:cd:
                    41:70:7a:05:bb:4c:8b:90:b0:79:8e:5c:03:d1:30:
                    bb:2b:20:d8:cf:0c:f9:71:e7:0c:bb:05:e8:79:c3:
                    ee:88:f3:a5:d2:90:3f:74:c4:f1:64:2d:1e:1b:8a:
                    06:68:99:78:ea:d2:05:68:9f:fa:81:30:b6:39:8b:
                    ad:27:73:15:96:3b:b3:14:84:3c:a1:e0:c5:fc:04:
                    bb:5a:a5:3e:41:d8:2f:83:89:4c:bc:c2:bf:27:79:
                    5f:e9:18:96:36:20:75:e1:a2:8e:42:1b:19:d5:11:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2E:10:08:F2:EF:E0:E5:D3:ED:4F:15:C1:04:C5:D2:5D:20:EE:20
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS262287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.23.26.0/23
                  82.23.29.0/24
                  82.23.32.0/23
                  82.23.35.0-82.23.36.255
                  82.23.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ab:21:38:ba:74:2b:c4:a6:ce:65:38:69:94:b1:8a:bf:74:
         1c:0c:b4:1e:ea:ac:ce:d4:d5:70:a8:26:77:8c:1f:98:e5:a9:
         93:99:ea:64:7f:7c:4d:2c:85:49:ce:bf:60:c6:13:2f:84:c9:
         3f:f5:d5:1e:69:20:9b:d4:23:a2:f0:cc:77:0b:66:03:88:f4:
         df:df:b8:f6:55:96:72:a7:4b:52:1a:9b:60:cc:e8:94:ed:ab:
         fe:35:6d:b1:8c:21:56:1b:00:ee:b7:e3:4a:0e:ca:7e:ce:e9:
         93:47:25:63:fe:d6:5a:18:d4:bd:18:9f:93:65:68:dc:fa:9f:
         af:d1:db:34:d6:4c:ff:20:d8:a4:59:9e:ad:33:93:74:a1:e2:
         fc:cd:9b:a6:da:cb:af:60:06:3a:33:f6:c5:13:02:41:00:90:
         3a:f9:ba:81:36:5a:11:87:71:8d:7f:47:87:ae:5a:17:6d:d2:
         d3:73:ae:56:09:52:1f:a9:58:71:bb:19:85:b6:07:45:7e:4e:
         a6:67:2c:03:4f:5b:bf:55:75:f1:90:f2:c8:94:a3:cb:f7:dc:
         65:b3:1d:01:77:0b:81:43:59:5b:97:21:63:84:52:7a:66:16:
         35:d7:2d:9d:a3:ec:e0:c9:e6:0a:ce:34:48:5f:99:0c:db:1e:
         6c:bd:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----