Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: a67ksSPKrvw8DtadPZsfq+KXuuQzkLsO7akl3b0TiIw=
Subject key identifier: 03:09:CF:A0:5F:67:DD:38:C9:E6:B0:25:8B:5F:AA:F8:1A:34:28:EA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6A502232C9903EC4CE055FECD69E5A1B80DC0C95
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
Signing time: Fri 31 Jan 2025 15:45:16 +0000
ROA not before: Fri 31 Jan 2025 15:40:16 +0000
ROA not after: Fri 30 Jan 2026 15:45:16 +0000
asID: 834
IP address blocks: 46.202.2.0/24 maxlen: 24
46.202.29.0/24 maxlen: 24
46.202.31.0/24 maxlen: 24
46.202.33.0/24 maxlen: 24
46.202.37.0/24 maxlen: 24
46.202.43.0/24 maxlen: 24
46.202.44.0/23 maxlen: 24
46.202.47.0/24 maxlen: 24
46.202.48.0/24 maxlen: 24
46.202.61.0/24 maxlen: 24
46.202.62.0/24 maxlen: 24
46.202.66.0/24 maxlen: 24
46.202.70.0/24 maxlen: 24
46.202.75.0/24 maxlen: 24
46.202.76.0/24 maxlen: 24
46.202.80.0/24 maxlen: 24
46.203.89.0/24 maxlen: 24
46.203.120.0/24 maxlen: 24
46.203.145.0/24 maxlen: 24
46.203.149.0/24 maxlen: 24
46.203.152.0/24 maxlen: 24
46.203.155.0/24 maxlen: 24
46.203.158.0/24 maxlen: 24
91.124.24.0/24 maxlen: 24
91.124.31.0/24 maxlen: 24
91.124.33.0/24 maxlen: 24
91.124.36.0/23 maxlen: 24
91.124.39.0/24 maxlen: 24
91.124.48.0/24 maxlen: 24
91.124.50.0/23 maxlen: 24
91.124.160.0/22 maxlen: 24
91.124.176.0/24 maxlen: 24
91.124.196.0/22 maxlen: 24
91.124.204.0/22 maxlen: 24
91.124.209.0/24 maxlen: 24
92.112.13.0/24 maxlen: 24
92.112.15.0/24 maxlen: 24
92.112.16.0/21 maxlen: 24
92.112.48.0/23 maxlen: 24
92.112.50.0/24 maxlen: 24
92.112.52.0/23 maxlen: 24
92.112.54.0/24 maxlen: 24
92.112.59.0/24 maxlen: 24
92.112.64.0/24 maxlen: 24
92.112.67.0/24 maxlen: 24
92.112.68.0/24 maxlen: 24
92.112.76.0/22 maxlen: 24
92.112.80.0/21 maxlen: 24
92.112.88.0/24 maxlen: 24
92.112.90.0/23 maxlen: 24
92.112.94.0/23 maxlen: 24
92.112.106.0/23 maxlen: 24
92.112.110.0/24 maxlen: 24
92.112.119.0/24 maxlen: 24
92.112.128.0/23 maxlen: 24
92.112.132.0/23 maxlen: 24
92.112.140.0/24 maxlen: 24
92.113.10.0/24 maxlen: 24
92.113.14.0/24 maxlen: 24
92.113.46.0/23 maxlen: 24
92.113.48.0/24 maxlen: 24
92.113.227.0/24 maxlen: 24
95.135.128.0/22 maxlen: 24
95.135.132.0/23 maxlen: 24
95.135.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:50:22:32:c9:90:3e:c4:ce:05:5f:ec:d6:9e:5a:1b:80:dc:0c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 31 15:40:16 2025 GMT
Not After : Jan 30 15:45:16 2026 GMT
Subject: CN=0309CFA05F67DD38C9E6B0258B5FAAF81A3428EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:3a:69:76:bc:cc:b3:e5:07:c3:60:92:ae:
1c:ca:39:bd:20:3a:d7:9d:ef:72:24:bf:13:66:06:
ef:95:0e:17:1f:f9:54:ac:19:e7:a8:7a:64:75:76:
8f:2c:5b:27:cb:c6:63:c8:46:1f:cf:f0:6f:c9:1c:
60:02:9e:2f:d3:81:f1:92:0f:07:4d:7c:ff:54:1d:
68:18:35:a1:f1:cb:2c:5a:20:2d:34:29:7f:32:71:
08:c5:e2:ff:7d:b2:6a:41:ac:26:53:cb:72:47:14:
22:6e:96:00:39:4b:9f:6c:7d:14:2d:3f:53:69:f4:
88:00:4f:b8:5f:14:21:33:2c:99:bc:e1:20:b2:3f:
2e:59:27:92:1b:ec:81:a5:c8:26:3b:1f:c9:a1:2c:
91:c7:d4:c0:48:b0:7f:b0:1a:a9:16:05:5e:d7:8a:
07:a8:4b:81:e9:64:53:cb:a3:a2:c8:5d:59:0d:4f:
21:97:08:ba:9e:c0:d0:4a:a6:ec:81:27:bd:47:9a:
c0:95:e3:f5:53:e5:80:d3:32:0e:54:54:6c:0e:34:
88:fd:69:4e:79:bc:a1:a4:f5:34:a6:ac:ef:fb:ad:
33:c4:74:cb:f2:09:99:c8:ec:be:88:76:41:59:1a:
95:ce:d6:67:1d:ea:cd:c8:2c:dd:0a:2c:f8:fe:fe:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:09:CF:A0:5F:67:DD:38:C9:E6:B0:25:8B:5F:AA:F8:1A:34:28:EA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.2.0/24
46.202.29.0/24
46.202.31.0/24
46.202.33.0/24
46.202.37.0/24
46.202.43.0-46.202.45.255
46.202.47.0-46.202.48.255
46.202.61.0-46.202.62.255
46.202.66.0/24
46.202.70.0/24
46.202.75.0-46.202.76.255
46.202.80.0/24
46.203.89.0/24
46.203.120.0/24
46.203.145.0/24
46.203.149.0/24
46.203.152.0/24
46.203.155.0/24
46.203.158.0/24
91.124.24.0/24
91.124.31.0/24
91.124.33.0/24
91.124.36.0/23
91.124.39.0/24
91.124.48.0/24
91.124.50.0/23
91.124.160.0/22
91.124.176.0/24
91.124.196.0/22
91.124.204.0/22
91.124.209.0/24
92.112.13.0/24
92.112.15.0-92.112.23.255
92.112.48.0-92.112.50.255
92.112.52.0-92.112.54.255
92.112.59.0/24
92.112.64.0/24
92.112.67.0-92.112.68.255
92.112.76.0-92.112.88.255
92.112.90.0/23
92.112.94.0/23
92.112.106.0/23
92.112.110.0/24
92.112.119.0/24
92.112.128.0/23
92.112.132.0/23
92.112.140.0/24
92.113.10.0/24
92.113.14.0/24
92.113.46.0-92.113.48.255
92.113.227.0/24
95.135.128.0-95.135.134.255
Signature Algorithm: sha256WithRSAEncryption
12:25:41:98:ce:98:7e:cd:b2:08:50:98:d1:39:c1:58:5a:88:
98:27:f9:e6:9f:13:c1:4e:1c:04:25:98:b6:50:47:16:0b:a9:
69:a9:38:57:74:64:68:b8:17:14:e6:3d:23:4a:62:2d:06:47:
a1:30:f8:40:2d:2d:89:90:c1:89:fb:9e:df:05:90:0e:bf:9a:
d8:54:be:7b:df:b9:62:95:8d:58:b4:44:d2:b3:75:39:c7:8a:
89:4a:a2:85:17:4c:11:e2:57:3b:a6:fc:d0:77:8d:a5:fa:fd:
0e:b5:1d:3e:a5:61:b0:8a:71:6e:b6:49:31:86:02:24:3d:4e:
6a:1a:c4:e0:7e:fc:78:a3:78:4e:3c:90:9f:49:fb:be:ee:36:
4f:f4:e8:d1:ab:c6:7a:3c:58:b9:f4:66:37:13:d4:48:d2:0e:
0e:ae:d9:bd:b1:0b:fa:bc:e9:02:93:71:6e:34:bf:dc:cb:9a:
83:ed:c2:e9:8c:44:36:b8:01:10:72:db:f5:51:44:bb:6e:75:
cd:c0:82:20:21:7f:d6:e6:e1:ae:bb:5f:26:a2:72:18:d8:d9:
b7:67:46:5d:40:d9:d0:d6:af:89:5b:7f:2d:09:1e:88:4e:41:
eb:58:b2:e1:99:ed:62:fa:91:ea:a4:7e:f3:78:e1:b3:d9:37:
18:56:52:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:01 2025 by rpki-client