Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa
File:                     AS50049.roa (raw, json)
Hash identifier:          6jK4qXxxCjGWu8adW7SEPJvErq8rpUWMbMcpPmln3mc=
Subject key identifier:   81:6D:04:CC:25:A7:FA:35:0E:2D:B4:38:2C:2F:87:AF:BF:89:29:37
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       5BCFCC386AE13DB55FA3D28E9B59E5DFB61C0BFC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa
Signing time:             Mon 02 Nov 2026 17:55:32 +0000
ROA not before:           Mon 02 Nov 2026 17:50:32 +0000
ROA not after:            Mon 01 Nov 2027 17:55:32 +0000
asID:                     50049
IP address blocks:        94.118.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cf:cc:38:6a:e1:3d:b5:5f:a3:d2:8e:9b:59:e5:df:b6:1c:0b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Nov  2 17:50:32 2026 GMT
            Not After : Nov  1 17:55:32 2027 GMT
        Subject: CN=816D04CC25A7FA350E2DB4382C2F87AFBF892937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:b4:69:41:e2:74:e7:42:ed:38:3b:0e:d3:
                    8e:a3:6b:44:e8:07:27:d4:13:f3:70:57:8b:7b:1b:
                    de:a4:f8:a5:4b:45:87:bf:20:ef:eb:b7:4d:ee:43:
                    41:80:78:8e:ee:a6:36:c7:c5:e2:3d:99:77:1c:79:
                    5c:2b:77:d7:33:d9:ff:77:4a:0d:0d:e6:8e:10:23:
                    9c:96:17:ae:c3:bd:d5:5d:a5:07:90:f2:ea:99:26:
                    98:02:36:23:4d:b2:36:73:e5:2c:e1:f6:4f:8c:6d:
                    8d:23:08:b3:8b:85:6a:22:5f:e6:40:06:6e:5f:40:
                    75:14:16:9a:84:47:7d:70:88:20:de:f9:e3:f6:6d:
                    cd:ab:e1:82:0c:b4:f3:78:39:36:22:79:33:9e:e7:
                    db:37:d1:8d:49:c7:96:ae:37:6a:83:16:ce:7b:72:
                    93:62:73:36:e3:2d:9b:5f:dc:9b:e1:7a:6f:27:bd:
                    a9:9f:2e:c8:f2:ba:1c:fa:2a:c0:f0:c6:c6:cf:e8:
                    7a:4f:5a:b3:4c:81:e3:76:28:74:09:8a:1b:68:1d:
                    5c:bb:17:86:30:15:23:c4:0b:28:19:3e:37:d2:1f:
                    ff:64:cc:96:76:9c:e8:d9:5c:5d:50:11:75:c2:04:
                    a8:49:87:d1:b3:05:c6:b2:76:2b:71:e0:64:bc:f0:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6D:04:CC:25:A7:FA:35:0E:2D:B4:38:2C:2F:87:AF:BF:89:29:37
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.118.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:90:e3:01:ab:fe:53:20:cc:13:7f:71:37:5d:f1:3c:8e:c5:
         ad:f7:f8:3d:d2:89:db:ce:7a:57:e3:9a:c7:44:ff:70:17:8d:
         96:54:10:99:7b:6b:9f:6f:1b:11:00:fa:1b:41:92:1b:c2:13:
         da:38:9f:18:90:fa:63:3d:8b:7d:20:13:1b:e2:fb:61:8c:71:
         16:db:5a:7c:cb:11:8f:15:0e:47:cb:a7:e1:a4:60:4b:fd:e6:
         17:15:cc:ec:d9:21:6b:85:9e:0d:e0:14:50:a7:4e:2c:31:f2:
         a3:e2:35:e9:42:b3:7a:96:8b:09:99:7e:50:c4:f8:f5:47:81:
         8e:64:be:46:66:6c:a1:20:53:67:73:25:8f:03:80:4b:a0:97:
         6a:0a:31:33:fa:66:0d:12:29:9c:e2:9f:69:1e:6c:85:f2:c6:
         63:75:09:77:da:10:ff:7a:e9:cc:86:98:32:3f:99:49:6e:11:
         2d:12:a2:32:07:59:d7:25:77:87:86:07:16:2f:13:4c:95:ac:
         11:a1:7d:c5:91:07:12:ef:08:19:9f:82:ae:1a:fa:11:29:d0:
         42:e7:f6:d0:da:25:ce:42:78:36:bf:72:bf:46:fc:2e:53:1a:
         c0:51:ed:08:c0:45:f9:dc:e9:40:50:63:18:5c:c8:b2:4f:c3:
         e8:1f:39:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----