Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: iNW9YI8cmr0bOKYcjKKvxBD6sp6B6rNhxqGApzTt/eQ=
Subject key identifier: A5:82:F5:F4:8E:E0:5A:88:14:5F:B7:47:1F:90:F8:CB:39:95:A2:7B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 10A3139603B6850CEE50DAF1E6E14E8B0D4674C5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
Signing time: Sun 13 Apr 2025 13:06:19 +0000
ROA not before: Sun 13 Apr 2025 13:01:19 +0000
ROA not after: Sun 12 Apr 2026 13:06:19 +0000
asID: 834
IP address blocks: 96.62.140.0/24 maxlen: 24
96.62.208.0/22 maxlen: 24
96.62.228.0/24 maxlen: 24
96.62.243.0/24 maxlen: 24
146.103.46.0/24 maxlen: 24
147.79.4.0/24 maxlen: 24
147.79.48.0/22 maxlen: 24
147.79.60.0/22 maxlen: 24
148.135.145.0/24 maxlen: 24
148.135.152.0/24 maxlen: 24
148.135.156.0/24 maxlen: 24
148.135.162.0/23 maxlen: 24
148.135.193.0/24 maxlen: 24
148.135.196.0/22 maxlen: 24
148.135.200.0/21 maxlen: 24
150.241.228.0/22 maxlen: 24
150.241.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a3:13:96:03:b6:85:0c:ee:50:da:f1:e6:e1:4e:8b:0d:46:74:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 13 13:01:19 2025 GMT
Not After : Apr 12 13:06:19 2026 GMT
Subject: CN=A582F5F48EE05A88145FB7471F90F8CB3995A27B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:45:57:85:6d:80:a8:b0:84:0b:a7:57:49:
d0:d8:0f:6c:ae:21:46:16:8b:30:44:d3:a4:89:c2:
71:11:8e:cc:fb:35:c0:6c:b1:3a:68:d1:32:8a:06:
5f:5c:da:ed:ce:d4:72:d6:5d:a0:6f:2b:dd:82:11:
96:03:d7:4b:a8:ec:f4:01:34:d1:79:72:a5:1d:c4:
18:98:d4:4f:19:f1:21:e9:e5:6c:a0:43:0c:7d:ae:
ef:ff:ad:c9:c9:f0:7b:91:bc:8b:d7:51:44:37:35:
57:89:63:59:c5:90:8f:03:8a:2f:35:f1:2a:42:6b:
03:af:02:b1:d5:db:0a:a4:4c:12:1c:08:b8:2d:7e:
6a:fd:07:0d:8b:a8:3a:bc:99:47:f4:f0:31:58:b1:
d3:c7:3a:61:d4:a1:62:fe:33:cd:4a:74:9a:e0:87:
7f:8b:d4:3e:a1:22:05:97:76:5f:b8:b4:09:b5:3b:
87:75:e4:3c:b7:d2:d9:ac:ad:86:47:d9:80:96:66:
d8:42:c1:18:be:f3:51:6e:db:0a:1c:eb:7e:56:f1:
dc:81:13:17:c8:f4:b1:e9:c7:75:27:bc:c3:9a:31:
33:86:53:1c:98:12:db:4c:fa:a1:9e:83:43:74:ce:
1f:9d:04:9e:96:0a:a5:82:66:85:3a:e0:70:22:45:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:82:F5:F4:8E:E0:5A:88:14:5F:B7:47:1F:90:F8:CB:39:95:A2:7B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.140.0/24
96.62.208.0/22
96.62.228.0/24
96.62.243.0/24
146.103.46.0/24
147.79.4.0/24
147.79.48.0/22
147.79.60.0/22
148.135.145.0/24
148.135.152.0/24
148.135.156.0/24
148.135.162.0/23
148.135.193.0/24
148.135.196.0-148.135.207.255
150.241.228.0/22
150.241.253.0/24
Signature Algorithm: sha256WithRSAEncryption
58:de:d5:46:26:a1:7f:69:29:01:cf:38:e5:72:a5:0b:fa:63:
d8:17:84:33:1f:b5:89:90:cd:c3:fb:f1:42:f6:c3:c8:ff:6a:
bf:10:55:c5:a9:86:7e:ec:75:b3:c3:eb:7c:c9:ac:05:48:3b:
52:c7:bb:b0:52:ff:0d:cb:5f:b1:da:f3:65:15:64:49:23:e4:
35:c9:c4:68:71:55:2c:ae:b2:9b:ff:d7:cd:72:ee:79:37:0b:
1e:93:32:62:e2:34:af:49:90:9d:f7:09:6f:85:e3:fa:de:b9:
a2:4d:8f:0c:ed:cf:35:82:21:8f:de:86:47:28:4e:0f:56:44:
d2:04:e9:11:a8:ff:87:7c:a1:43:03:29:de:78:32:21:96:f5:
2a:b7:11:30:80:9c:97:1e:90:f3:c0:47:00:be:bb:f6:07:07:
60:02:7c:40:fd:ba:66:e3:e8:96:d8:98:be:6d:24:0c:a9:60:
dd:3b:a6:48:45:74:dc:95:36:70:e4:e3:b9:7d:dc:ad:2f:be:
f0:b8:0f:8b:0b:a4:c8:dd:9a:e4:83:26:27:fd:97:59:bd:b3:
56:3d:83:e9:7b:76:83:e3:3a:bf:42:e0:76:74:e1:23:4a:6d:
7f:b2:98:cb:b3:7e:44:87:79:91:ce:ef:66:9e:96:1f:2e:94:
0c:78:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net