Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214677.roa
File:                     AS214677.roa (raw, json)
Hash identifier:          GvmD9piRW1I5l2Th2slo8qY3XgTZdZt3Q+5uunxenPU=
Subject key identifier:   C2:FC:36:82:55:FE:E3:58:E5:86:63:9C:E4:75:D2:F0:05:1D:DF:24
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       48457266575E386194A7CA4BB37D4BA3065FE5D8
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214677.roa
Signing time:             Mon 26 Oct 2026 14:49:38 +0000
ROA not before:           Mon 26 Oct 2026 14:44:38 +0000
ROA not after:            Mon 25 Oct 2027 14:49:38 +0000
asID:                     214677
IP address blocks:        195.206.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:45:72:66:57:5e:38:61:94:a7:ca:4b:b3:7d:4b:a3:06:5f:e5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Oct 26 14:44:38 2026 GMT
            Not After : Oct 25 14:49:38 2027 GMT
        Subject: CN=C2FC368255FEE358E586639CE475D2F0051DDF24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:09:b1:09:80:7d:10:c0:76:70:28:78:64:
                    23:fc:e8:6e:c7:05:5f:25:ea:2c:c7:19:b4:d0:2a:
                    dd:b2:a1:d1:b4:86:0c:e0:44:7b:70:23:ba:89:5f:
                    32:f1:bb:6c:36:c6:51:27:be:f1:2b:cb:cb:2c:50:
                    e1:aa:1e:10:2f:49:04:b7:84:8f:39:6f:3e:87:72:
                    a8:d9:63:68:c2:be:12:76:87:f4:06:d7:93:40:f0:
                    60:a1:ae:ef:a7:31:f9:94:da:79:0b:84:ba:1f:11:
                    9a:7e:d5:1a:79:67:06:75:27:d7:08:b7:aa:f0:bd:
                    d3:76:2e:e4:c9:aa:e7:54:e1:51:1b:bf:b1:81:d8:
                    2f:c6:0f:9c:be:22:ee:d2:a8:99:22:f0:3d:67:27:
                    03:2c:6d:8e:63:15:fc:46:38:cb:4b:31:6a:e4:72:
                    c4:b5:9b:d4:c9:4d:e8:d3:2c:04:e6:5f:97:20:ae:
                    e1:23:8b:fc:a7:2b:ad:d3:11:de:72:71:57:6b:3c:
                    b7:13:4e:37:00:9f:24:46:43:df:2b:51:00:36:15:
                    58:c4:71:01:0e:07:59:6d:c5:ff:bc:04:f6:0d:67:
                    89:07:93:77:6f:f4:af:49:16:00:f8:6b:90:7d:7a:
                    f1:d5:ed:3f:50:1c:b5:77:75:99:c3:8b:09:d7:90:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:36:82:55:FE:E3:58:E5:86:63:9C:E4:75:D2:F0:05:1D:DF:24
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214677.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.206.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:46:65:fc:9e:a5:ea:b5:20:07:b8:a7:85:e2:5c:26:47:95:
         c1:ec:c5:6c:98:6d:32:c3:d3:c1:0e:f3:f5:b6:9a:c4:84:6a:
         15:6f:b0:25:d9:20:c7:6a:c5:0e:5f:02:03:31:8f:4f:e5:6f:
         22:3a:bd:19:72:ff:77:12:e6:a8:b4:14:47:7d:d9:c4:4e:9e:
         10:b1:fe:a8:02:0e:0a:70:dd:d8:8c:08:04:88:b6:e0:57:a2:
         0f:57:c5:6a:c3:b5:26:10:26:73:8c:23:82:2f:c9:c9:e7:ab:
         2e:77:af:b5:f6:da:a6:31:f6:74:c9:df:e9:73:55:a9:56:d2:
         ef:aa:5f:84:0d:b8:31:1a:42:00:ab:ca:aa:ca:15:c7:15:07:
         a6:13:34:2f:23:e7:8d:45:61:9a:8a:6e:10:06:f8:24:cd:9b:
         05:5a:d9:e8:a0:95:23:22:e2:e4:9b:40:fe:9f:10:8e:d3:64:
         9d:9e:87:19:d1:b5:c9:4f:40:42:e8:21:27:6a:f4:ff:63:10:
         98:d8:08:6b:02:19:7d:f4:6f:ae:52:d4:08:da:17:b5:e4:5d:
         c4:16:e1:d5:c2:e6:d8:54:5f:2c:49:f6:94:f1:03:6d:55:dd:
         5d:bf:49:ea:5b:d6:4a:1c:60:76:d6:28:5e:74:c3:ec:c1:41:
         42:43:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----