Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213784.roa
File:                     AS213784.roa (raw, json)
Hash identifier:          aYySgiL23NxgKYzoryfh4GSuNbs1AVCRAsLC3ZgdvXk=
Subject key identifier:   F6:A3:15:2B:32:72:64:65:54:E7:CB:75:F4:13:60:4D:8D:05:4F:80
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       2E61826F9BC22E58E9147496CF1FEC8353970559
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213784.roa
Signing time:             Wed 28 Oct 2026 00:06:05 +0000
ROA not before:           Wed 28 Oct 2026 00:01:05 +0000
ROA not after:            Wed 27 Oct 2027 00:06:05 +0000
asID:                     213784
IP address blocks:        51.241.28.0/22 maxlen: 24
                          51.241.36.0/22 maxlen: 24
                          51.241.68.0/22 maxlen: 24
                          94.192.192.0/22 maxlen: 24
                          94.192.232.0/22 maxlen: 24
                          188.220.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:61:82:6f:9b:c2:2e:58:e9:14:74:96:cf:1f:ec:83:53:97:05:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Oct 28 00:01:05 2026 GMT
            Not After : Oct 27 00:06:05 2027 GMT
        Subject: CN=F6A3152B3272646554E7CB75F413604D8D054F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:88:10:12:54:19:79:73:a2:a9:d2:74:f1:
                    24:2d:53:40:c7:c1:ea:bd:1f:7c:05:9c:ad:44:3d:
                    77:e4:0f:39:f1:12:8f:fd:1f:52:d6:e0:d7:00:c0:
                    43:fc:b6:d2:e7:81:f2:bf:87:41:8d:9c:c3:2c:26:
                    e1:ab:fb:7b:39:db:e9:85:29:01:b1:ca:cd:24:ec:
                    95:00:05:36:f7:4b:68:db:ee:37:23:af:1a:40:b9:
                    63:62:00:bb:c9:67:fc:41:e8:47:42:74:8b:4d:72:
                    79:c2:fd:ee:9c:db:7c:bf:34:0b:ac:8d:4a:80:19:
                    a4:b0:33:5e:cc:0f:e7:aa:b6:0e:8b:b6:50:1c:d2:
                    f6:26:c7:56:66:f9:58:a0:71:82:d8:c9:aa:f2:f7:
                    8d:d7:25:76:cd:4b:5f:60:ad:6a:66:71:7e:4d:89:
                    e3:33:ca:11:02:ab:e4:0e:c2:a4:9a:64:0f:d9:3c:
                    a0:6b:92:23:8b:a8:40:36:7c:a6:c3:61:39:46:e7:
                    34:7e:a2:28:ad:c3:c2:61:ce:29:23:e4:fe:42:72:
                    04:03:b4:bb:8d:85:20:51:5a:7a:45:2e:5f:b6:0f:
                    95:65:34:e6:f0:d3:9e:14:80:ac:26:46:52:a7:27:
                    d1:4d:12:72:a2:4b:5d:c5:c2:7a:35:82:f3:82:26:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A3:15:2B:32:72:64:65:54:E7:CB:75:F4:13:60:4D:8D:05:4F:80
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213784.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.241.28.0/22
                  51.241.36.0/22
                  51.241.68.0/22
                  94.192.192.0/22
                  94.192.232.0/22
                  188.220.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:ec:ff:ba:55:f8:9c:e7:2a:6a:00:00:b7:3d:30:a6:07:6c:
         a1:f4:46:8c:dd:f9:d2:da:e6:60:0a:a9:3c:fc:2c:89:1a:32:
         70:34:a1:09:84:e6:61:ba:e0:40:b3:65:fc:ed:fd:58:18:73:
         49:ee:3f:5b:04:d5:47:35:ae:ec:2a:2b:90:a4:ff:91:e4:43:
         5c:a9:fc:cb:e0:89:f1:2e:f8:96:24:7b:3c:f9:00:c2:22:74:
         7b:57:37:e4:80:a5:45:a2:ca:bd:23:77:73:7d:b3:e3:40:74:
         28:9b:d8:bb:f8:f2:d2:24:4f:10:a5:c6:3d:e2:40:30:ac:b0:
         84:a5:7b:3e:bc:de:79:06:5f:bb:ca:26:e5:87:4a:c0:1f:5f:
         cc:db:d2:48:2a:91:01:76:a8:37:62:9b:0c:d1:d0:0d:a0:bb:
         49:36:74:fb:eb:c7:b4:e7:ac:e1:48:25:2d:48:ad:9a:53:41:
         41:2a:62:12:4b:21:a0:e5:26:b3:6d:90:c5:21:fe:98:db:1d:
         05:f3:fa:ad:60:2e:35:66:73:e5:9a:ab:88:5c:25:4f:0f:da:
         36:24:f2:68:63:6e:1b:b5:46:48:6c:2a:32:66:8b:94:c7:a6:
         ee:bf:9f:e4:36:e6:3a:82:e6:b1:1a:90:d1:ed:1a:b8:48:e8:
         0c:5c:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----