Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS58325.roa
File:                     AS58325.roa (raw, json)
Hash identifier:          zo7HDPfokkWFxmN0JDhpYZN2Q46i6mba/9AWHrQx/MY=
Subject key identifier:   70:78:AB:25:1D:44:17:77:E4:AD:7F:6E:4E:95:E6:75:58:73:36:90
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       5963CA35F65FC82B0656825FA429F26E9974F2CC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS58325.roa
Signing time:             Thu 22 Oct 2026 20:50:23 +0000
ROA not before:           Thu 22 Oct 2026 20:45:23 +0000
ROA not after:            Thu 21 Oct 2027 20:50:23 +0000
asID:                     58325
IP address blocks:        94.192.56.0/22 maxlen: 24
                          94.192.60.0/22 maxlen: 24
                          188.221.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:63:ca:35:f6:5f:c8:2b:06:56:82:5f:a4:29:f2:6e:99:74:f2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Oct 22 20:45:23 2026 GMT
            Not After : Oct 21 20:50:23 2027 GMT
        Subject: CN=7078AB251D441777E4AD7F6E4E95E67558733690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:3a:24:c5:72:47:71:9d:b4:8e:a0:3a:04:
                    c2:57:1f:1f:bc:f5:b6:78:a5:05:11:68:fe:52:22:
                    74:bc:17:73:54:1a:53:7c:42:ff:a8:e5:b6:c0:9d:
                    56:47:9e:be:39:37:76:73:8e:67:db:14:60:40:92:
                    f5:68:62:12:72:0a:29:04:a2:86:1f:23:29:d8:f1:
                    5b:77:2e:51:24:54:64:e7:58:ad:f3:f6:d7:a5:41:
                    aa:46:8f:ee:ee:89:03:28:17:e8:21:e2:3b:ac:4f:
                    d2:3a:f1:2f:77:f9:7e:4e:ef:74:8e:a7:1f:e7:6b:
                    71:ae:e8:c1:08:f4:e6:af:93:81:dc:98:5d:e2:c9:
                    bc:ed:bc:dc:3e:ae:dc:6a:ed:bd:f9:d1:0a:d3:24:
                    b7:86:15:bb:ed:2f:c1:a1:6c:28:3e:fa:e7:2d:39:
                    07:a0:25:df:bb:a7:54:92:fe:1f:e7:d1:d7:bf:37:
                    e6:fa:6c:e2:67:48:66:fc:46:2b:38:5f:3b:08:74:
                    3b:42:aa:b6:fc:cc:a4:f3:b7:ff:96:90:8d:06:f1:
                    b1:58:52:6b:7b:4f:be:36:06:e7:90:d3:f2:af:c6:
                    ce:12:2b:8f:e7:50:17:da:c0:5a:73:cf:b0:52:67:
                    a3:72:2e:e6:85:2d:0d:f4:e8:a6:dd:d7:c6:0f:ad:
                    0d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:78:AB:25:1D:44:17:77:E4:AD:7F:6E:4E:95:E6:75:58:73:36:90
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS58325.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.192.56.0/21
                  188.221.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:06:f8:46:ac:17:2f:8a:75:a8:d6:d6:59:7d:c6:8a:a9:
         23:37:3a:b6:81:90:ef:64:3d:7d:2c:84:05:26:aa:c6:e7:7e:
         81:93:ed:5c:8e:f8:1a:c0:a5:f7:64:2c:74:82:8e:96:94:d4:
         f4:a4:d6:9a:af:b6:1a:7e:32:8f:55:06:7e:eb:f3:45:b1:74:
         31:a9:4a:a5:fb:41:d7:9c:e5:91:1c:87:8a:3d:cc:96:d2:56:
         6a:a1:05:a5:01:b1:d1:18:ff:06:6d:76:63:e9:de:85:13:d5:
         66:be:3f:6e:84:65:e8:4d:11:c2:a9:9e:77:e4:16:f5:49:df:
         40:4f:95:52:6d:1e:69:1e:e9:ff:cd:85:41:c6:38:32:0b:e5:
         fe:0c:ec:6a:71:0e:da:b4:e5:b4:d6:07:b6:60:70:78:65:ca:
         7a:17:86:3f:e1:9d:53:95:85:02:e0:ad:54:d7:82:52:f8:eb:
         fa:95:4b:aa:9c:5e:85:ea:04:45:4f:c9:9f:3f:d7:e1:46:d9:
         2b:dc:8e:50:e2:ad:00:49:3c:eb:ea:f4:e3:8c:ea:f9:c5:46:
         a5:bc:49:11:1c:c0:c4:ec:58:be:d1:ea:3c:9d:fc:30:06:b1:
         27:a8:2a:16:b1:81:73:34:9f:eb:0d:76:ae:cb:5c:ca:33:eb:
         a8:d1:78:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----