Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50049.roa
File:                     AS50049.roa (raw, json)
Hash identifier:          KCjDXCAnoQcWO9ftZ0tN/BvcfMBLDfVkuOSEYkZ6/Ak=
Subject key identifier:   C9:5C:27:E4:FC:A3:E6:11:5C:BC:CE:FB:5B:6B:6A:0B:AA:51:66:74
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       4E31984DA69EE3E9211DFB370C5C293B06788586
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50049.roa
Signing time:             Tue 03 Nov 2026 22:05:25 +0000
ROA not before:           Tue 03 Nov 2026 22:00:25 +0000
ROA not after:            Tue 02 Nov 2027 22:05:25 +0000
asID:                     50049
IP address blocks:        91.124.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:31:98:4d:a6:9e:e3:e9:21:1d:fb:37:0c:5c:29:3b:06:78:85:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Nov  3 22:00:25 2026 GMT
            Not After : Nov  2 22:05:25 2027 GMT
        Subject: CN=C95C27E4FCA3E6115CBCCEFB5B6B6A0BAA516674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:44:b0:dc:34:d6:e8:26:f8:68:65:b7:98:
                    d5:41:15:f4:ba:51:02:b8:41:12:1d:35:3b:a1:c5:
                    8b:bb:5a:ae:a3:a0:cf:18:7d:11:00:a5:f2:bf:f4:
                    4d:4e:4d:3c:8b:03:e2:88:60:df:b0:19:3e:7d:1f:
                    7e:7e:b3:5d:6e:47:98:dd:e2:10:b7:fc:fb:b1:ce:
                    2f:45:1f:dd:7e:64:43:c8:37:0f:60:83:22:41:ed:
                    21:6e:37:1b:37:d5:d7:a6:77:80:9a:c5:a8:d7:9b:
                    bf:c6:b0:2f:d1:34:a6:c6:74:60:0a:39:f0:91:6b:
                    52:e6:41:47:8f:a7:1c:04:bb:75:82:5f:0f:bf:15:
                    0e:23:05:89:91:11:a1:99:60:f4:82:63:e5:d1:dd:
                    34:ab:0f:27:40:3c:80:b4:3a:2a:e9:9f:96:04:94:
                    aa:0b:a8:12:bf:60:8d:e1:b1:dd:cb:14:a9:95:89:
                    68:0b:5b:73:fc:b5:3e:b4:a7:eb:01:5e:ad:de:f2:
                    2b:91:94:78:77:69:e8:22:82:bd:99:54:f9:aa:87:
                    14:48:33:5d:af:ef:e4:40:ce:40:eb:df:7a:12:3c:
                    f2:c6:12:5d:89:46:fa:98:31:f7:e3:aa:51:88:16:
                    19:b2:ba:36:86:4d:de:65:84:b8:65:f1:b3:91:28:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5C:27:E4:FC:A3:E6:11:5C:BC:CE:FB:5B:6B:6A:0B:AA:51:66:74
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50049.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.124.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:a8:10:e8:55:de:71:9f:6d:00:ec:48:2e:62:cd:a6:c2:8e:
         65:e6:49:0e:16:39:6b:bd:02:e6:10:42:19:3e:e6:5c:0b:8b:
         f3:72:29:df:61:24:1f:63:e2:c9:e2:ba:ac:36:f2:0c:c0:35:
         dd:3b:9e:02:73:62:4e:87:63:24:cc:d9:97:f3:f2:02:f7:6f:
         e2:21:3e:1d:93:28:93:1f:fa:88:4d:cf:47:1d:c8:ef:ae:fa:
         a5:f4:b5:37:4b:86:cb:fe:d1:bc:ce:f4:9b:43:a7:33:78:9c:
         6d:ee:8c:ee:c3:7d:e5:12:d4:5d:b5:3b:9a:3f:ed:70:31:26:
         09:02:3b:9f:30:04:3e:6c:d9:04:34:4e:26:13:fc:ba:8e:43:
         1c:31:ea:51:a2:a1:ad:0f:69:f0:6c:92:bf:7a:06:88:6a:a0:
         ef:3c:40:3a:a0:31:18:d9:b5:fe:44:6c:63:b2:73:8f:77:99:
         d5:8e:81:d3:29:d3:93:ef:7a:76:c7:69:8d:34:48:96:d1:f2:
         1f:23:f5:ae:45:0e:f6:32:0b:f3:c7:9f:3e:64:fb:12:5b:cd:
         37:4f:f6:7e:71:b2:41:bd:c7:a7:77:fb:16:c4:f0:04:c7:cc:
         db:26:dd:02:bf:a8:79:cd:3a:00:ee:c0:00:a3:f5:f5:af:e0:
         07:fd:4c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----