Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
File:                     AS21859.roa (raw, json)
Hash identifier:          vKI29zJlmTIaq9flKpY+2ELqDM6vWXpraowdUupkk5A=
Subject key identifier:   8D:4B:6A:EC:1E:63:8E:82:90:91:3B:E5:70:BE:07:5A:72:EA:BE:87
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       4F12E6A4AC000CF1921DB3D7A1876599FC1FE65A
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
Signing time:             Tue 03 Nov 2026 14:13:20 +0000
ROA not before:           Tue 03 Nov 2026 14:08:20 +0000
ROA not after:            Tue 02 Nov 2027 14:13:20 +0000
asID:                     21859
IP address blocks:        45.151.47.0/24 maxlen: 24
                          91.206.2.0/24 maxlen: 24
                          194.147.4.0/24 maxlen: 24
                          2a07:fc40::/29 maxlen: 29
                          2a09:40::/29 maxlen: 29
                          2a0c:2cc0::/29 maxlen: 29
                          2a0c:43c0::/29 maxlen: 29
                          2a0c:4e00::/29 maxlen: 29
                          2a10:8740::/29 maxlen: 29
                          2a10:e180::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:12:e6:a4:ac:00:0c:f1:92:1d:b3:d7:a1:87:65:99:fc:1f:e6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Nov  3 14:08:20 2026 GMT
            Not After : Nov  2 14:13:20 2027 GMT
        Subject: CN=8D4B6AEC1E638E8290913BE570BE075A72EABE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:df:ff:3e:0a:92:6e:df:5f:69:7e:c3:f2:fe:
                    a6:98:65:03:ab:e1:8f:33:db:1b:06:f8:7b:c8:08:
                    af:cc:16:47:b8:f9:f5:5f:70:58:e2:29:f2:5e:30:
                    a1:3e:98:df:81:99:90:a5:cb:87:d1:1c:47:99:5a:
                    e3:af:f6:d8:a8:1b:e2:31:7b:4a:44:0c:8b:6d:e7:
                    18:9e:5b:25:bc:2a:a7:8e:5f:b4:63:37:c2:b1:cd:
                    6f:6d:80:1f:03:ed:c5:8d:4f:95:1a:39:33:88:49:
                    28:4c:da:64:77:c1:56:41:87:10:6a:bd:5b:e3:a8:
                    9f:16:21:4d:73:68:79:ae:1b:6d:bb:f9:b5:ee:75:
                    f5:45:df:9c:c8:ec:f8:40:de:e1:aa:0e:8e:05:61:
                    3a:68:cd:e1:d8:15:fb:b9:08:d4:d5:c4:80:57:c2:
                    21:04:0b:0c:bc:1a:08:60:58:d4:98:7f:0e:5a:81:
                    9b:69:a6:2d:6d:22:e3:8c:df:59:15:38:f5:43:09:
                    98:26:28:dc:5a:aa:04:2e:9c:b0:e5:a3:99:87:33:
                    bb:83:6d:2a:d8:0e:2b:22:12:ea:a4:65:36:6f:a7:
                    ce:27:4c:a6:b2:d9:b1:9c:bd:09:ac:ff:02:1f:c8:
                    b9:10:9a:ee:00:20:54:7f:36:a6:d5:8a:d8:21:c2:
                    ef:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4B:6A:EC:1E:63:8E:82:90:91:3B:E5:70:BE:07:5A:72:EA:BE:87
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.47.0/24
                  91.206.2.0/24
                  194.147.4.0/24
                IPv6:
                  2a07:fc40::/29
                  2a09:40::/29
                  2a0c:2cc0::/29
                  2a0c:43c0::/29
                  2a0c:4e00::/29
                  2a10:8740::/29
                  2a10:e180::/29

    Signature Algorithm: sha256WithRSAEncryption
         21:91:ce:7d:b7:9a:0a:eb:78:67:3f:53:4f:33:a3:f8:3f:f4:
         8c:ea:5c:e9:8d:6f:8a:ce:b7:01:b5:8b:7d:f1:d0:14:35:7e:
         12:5a:a6:38:3d:e6:0a:78:c6:62:05:4c:e6:0d:23:7c:10:c3:
         b6:bb:c1:5a:29:a4:10:32:94:d6:e3:20:3a:99:24:10:9d:9f:
         ec:79:16:c4:65:40:4b:80:27:af:8c:33:3c:01:45:54:e1:f3:
         69:39:95:a8:67:d2:a6:ea:66:94:47:bd:75:bb:c3:96:c2:20:
         b4:cb:68:b4:4a:92:bd:b8:a7:6c:33:7a:d4:f8:f8:9a:9b:91:
         6d:b2:99:41:7a:2c:d5:e5:66:a4:82:fe:e6:19:43:ab:ea:f4:
         0a:3d:8f:eb:8d:c6:91:2e:bf:73:03:69:eb:48:b3:50:80:11:
         c5:20:a6:57:d1:67:50:00:f2:83:cb:70:1a:33:8c:75:85:79:
         90:69:ee:03:36:6f:5f:82:8e:06:5a:a8:9e:2b:0c:c3:28:e0:
         21:85:de:2a:3f:79:74:74:ac:68:19:1a:29:b6:50:51:91:0b:
         d3:bb:71:3e:1d:1e:02:0d:70:5f:8f:4a:30:dc:a2:36:d0:3e:
         78:1f:3a:09:82:19:bb:d3:e0:f0:05:34:55:db:be:e2:7d:88:
         1c:a3:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----