Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
File:                     AS219427.roa (raw, json)
Hash identifier:          giE3lTVLmK6SaKExgweJ7IoSFYy4SSqBjFhoHOcRagE=
Subject key identifier:   10:A7:46:90:91:80:EC:3A:14:92:AF:4D:A6:B0:56:03:88:5E:08:81
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       12891C8F835F8CA2FE683134291208B8EFCC5A75
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
Signing time:             Thu 05 Nov 2026 00:09:14 +0000
ROA not before:           Thu 05 Nov 2026 00:04:14 +0000
ROA not after:            Thu 04 Nov 2027 00:09:14 +0000
asID:                     219427
IP address blocks:        51.146.244.0/24 maxlen: 24
                          188.220.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:89:1c:8f:83:5f:8c:a2:fe:68:31:34:29:12:08:b8:ef:cc:5a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Nov  5 00:04:14 2026 GMT
            Not After : Nov  4 00:09:14 2027 GMT
        Subject: CN=10A746909180EC3A1492AF4DA6B05603885E0881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:e5:04:2c:43:a2:2c:d7:ff:f0:db:ed:01:
                    4a:c6:f7:9c:b9:7a:41:8c:3e:c1:70:34:75:15:ae:
                    6e:ea:24:3a:38:e1:fb:cf:90:3a:81:67:45:48:65:
                    b0:b4:6a:4e:56:85:61:cc:2a:59:24:68:e2:28:be:
                    fd:e5:e4:a0:bc:0a:60:5b:4c:7a:4d:b6:2a:10:85:
                    a8:04:8a:cb:41:d6:b9:a8:cb:62:0f:fb:46:dd:57:
                    90:3a:4c:90:7d:cd:78:a4:7c:8d:d8:7d:34:6e:3f:
                    cb:ca:2b:08:fe:0b:5c:80:a8:bb:06:a4:f0:95:b1:
                    f3:f3:ed:47:4f:35:20:f5:62:96:f6:86:f9:60:c7:
                    a4:b3:e7:53:90:70:8f:2b:0b:9c:4c:a6:59:0b:28:
                    71:36:0c:8a:a5:fa:43:94:01:4e:07:37:c2:a2:d7:
                    12:48:40:ea:8b:6f:3d:a3:0a:fb:e0:28:44:da:6f:
                    c2:e2:52:31:0b:34:30:10:1d:ed:9d:74:c7:92:7b:
                    30:05:de:5d:9c:68:ee:d0:45:70:dc:76:3e:06:8f:
                    b8:12:41:f4:1d:95:4a:d8:ff:e9:68:62:77:7a:e9:
                    36:db:0b:04:93:6e:5e:40:a1:e1:85:a3:c7:a7:98:
                    71:2d:64:1e:c0:41:ff:b1:a2:02:32:48:82:62:96:
                    4d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A7:46:90:91:80:EC:3A:14:92:AF:4D:A6:B0:56:03:88:5E:08:81
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.146.244.0/24
                  188.220.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:61:34:62:78:55:19:de:11:94:64:92:14:ec:91:75:63:69:
         91:4c:16:b4:6f:91:8f:e0:30:55:cc:23:43:eb:ca:cb:77:43:
         ef:f8:f5:17:f3:71:26:c5:8b:58:ba:08:60:2e:e7:1c:39:f2:
         cf:e6:06:00:4f:ab:a6:cb:04:35:93:1f:70:06:24:3a:92:c1:
         21:71:ba:af:54:81:c4:a0:77:d7:e5:e5:53:7c:65:63:82:4a:
         24:2f:07:a6:0c:e9:12:54:04:98:28:3a:ef:35:12:1c:be:5e:
         15:d2:19:b3:eb:be:ee:37:d3:e1:0d:42:e7:b5:bb:6b:b4:7b:
         08:f7:4b:f6:e4:6f:8a:52:bd:c6:0e:3d:6e:0a:a8:58:61:07:
         d1:09:6f:bb:f6:10:ca:28:6e:6e:be:eb:e4:b6:b8:8c:35:c0:
         5c:05:3e:ae:85:3e:fd:87:88:bd:eb:0b:fd:f3:9e:a3:0e:a6:
         99:c3:a0:de:d6:63:65:78:00:19:b8:bb:41:31:af:42:56:36:
         ae:a6:62:83:e4:c4:6a:ce:fd:1e:91:88:a3:40:99:c8:41:80:
         e5:77:9d:48:49:2b:b1:d6:9d:b4:8d:08:6b:53:6e:ad:c8:c6:
         27:3f:90:78:b7:cf:9a:1b:48:0a:e6:c6:c6:a9:a7:36:32:4b:
         3f:9e:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----