Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          MBxTmwQFpCPvOToHN/cdMEsmAYJVmPjbMrtydCIHfKk=
Subject key identifier:   A3:A3:E5:24:27:B8:65:ED:B3:17:40:1E:17:72:F4:3E:83:DD:4E:7C
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       3A7F7E34B35C8E3622F6A828F1449A6DA349E1E8
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
Signing time:             Fri 11 Apr 2025 00:02:17 +0000
ROA not before:           Thu 10 Apr 2025 23:57:17 +0000
ROA not after:            Fri 10 Apr 2026 00:02:17 +0000
asID:                     834
IP address blocks:        5.252.74.0/24 maxlen: 24
                          5.252.82.0/24 maxlen: 24
                          45.87.185.0/24 maxlen: 24
                          45.95.36.0/24 maxlen: 24
                          89.19.50.0/24 maxlen: 24
                          92.118.162.0/24 maxlen: 24
                          92.119.33.0/24 maxlen: 24
                          92.242.186.0/24 maxlen: 24
                          109.106.3.0/24 maxlen: 24
                          130.185.127.0/24 maxlen: 24
                          179.61.226.0/23 maxlen: 24
                          179.61.229.0/24 maxlen: 24
                          179.61.243.0/24 maxlen: 24
                          181.41.196.0/24 maxlen: 24
                          181.214.0.0/24 maxlen: 24
                          181.214.4.0/24 maxlen: 24
                          181.214.14.0/24 maxlen: 24
                          181.214.79.0/24 maxlen: 24
                          181.214.91.0/24 maxlen: 24
                          181.214.97.0/24 maxlen: 24
                          181.214.100.0/24 maxlen: 24
                          181.214.108.0/24 maxlen: 24
                          181.214.110.0/23 maxlen: 24
                          181.214.113.0/24 maxlen: 24
                          181.214.119.0/24 maxlen: 24
                          181.214.120.0/24 maxlen: 24
                          181.214.124.0/23 maxlen: 24
                          181.214.148.0/24 maxlen: 24
                          181.214.154.0/24 maxlen: 24
                          181.214.161.0/24 maxlen: 24
                          181.214.201.0/24 maxlen: 24
                          181.214.212.0/24 maxlen: 24
                          181.214.216.0/24 maxlen: 24
                          181.214.248.0/24 maxlen: 24
                          181.214.254.0/24 maxlen: 24
                          181.215.3.0/24 maxlen: 24
                          181.215.22.0/23 maxlen: 24
                          181.215.31.0/24 maxlen: 24
                          181.215.73.0/24 maxlen: 24
                          181.215.84.0/24 maxlen: 24
                          181.215.91.0/24 maxlen: 24
                          181.215.95.0/24 maxlen: 24
                          181.215.108.0/23 maxlen: 24
                          181.215.111.0/24 maxlen: 24
                          181.215.112.0/22 maxlen: 24
                          181.215.159.0/24 maxlen: 24
                          181.215.186.0/23 maxlen: 24
                          181.215.189.0/24 maxlen: 24
                          181.215.200.0/24 maxlen: 24
                          181.215.216.0/24 maxlen: 24
                          181.215.225.0/24 maxlen: 24
                          181.215.227.0/24 maxlen: 24
                          181.215.237.0/24 maxlen: 24
                          181.215.240.0/24 maxlen: 24
                          181.215.250.0/24 maxlen: 24
                          191.96.24.0/24 maxlen: 24
                          191.96.58.0/24 maxlen: 24
                          191.96.64.0/24 maxlen: 24
                          191.96.88.0/23 maxlen: 24
                          191.96.91.0/24 maxlen: 24
                          191.96.99.0/24 maxlen: 24
                          191.96.102.0/24 maxlen: 24
                          191.96.105.0/24 maxlen: 24
                          191.96.116.0/24 maxlen: 24
                          191.96.120.0/24 maxlen: 24
                          191.96.126.0/24 maxlen: 24
                          191.96.140.0/24 maxlen: 24
                          191.96.143.0/24 maxlen: 24
                          191.96.149.0/24 maxlen: 24
                          191.96.157.0/24 maxlen: 24
                          191.96.164.0/24 maxlen: 24
                          191.96.180.0/24 maxlen: 24
                          191.96.182.0/24 maxlen: 24
                          191.101.9.0/24 maxlen: 24
                          191.101.20.0/24 maxlen: 24
                          191.101.22.0/24 maxlen: 24
                          191.101.39.0/24 maxlen: 24
                          191.101.56.0/24 maxlen: 24
                          191.101.58.0/24 maxlen: 24
                          191.101.63.0/24 maxlen: 24
                          191.101.76.0/24 maxlen: 24
                          191.101.82.0/24 maxlen: 24
                          191.101.87.0/24 maxlen: 24
                          191.101.88.0/24 maxlen: 24
                          191.101.95.0/24 maxlen: 24
                          191.101.97.0/24 maxlen: 24
                          191.101.102.0/24 maxlen: 24
                          191.101.116.0/24 maxlen: 24
                          191.101.120.0/24 maxlen: 24
                          191.101.124.0/24 maxlen: 24
                          191.101.148.0/24 maxlen: 24
                          191.101.182.0/24 maxlen: 24
                          191.101.187.0/24 maxlen: 24
                          191.101.192.0/24 maxlen: 24
                          191.101.198.0/24 maxlen: 24
                          191.101.239.0/24 maxlen: 24
                          191.101.240.0/24 maxlen: 24
                          191.101.252.0/24 maxlen: 24
                          193.31.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7f:7e:34:b3:5c:8e:36:22:f6:a8:28:f1:44:9a:6d:a3:49:e1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Apr 10 23:57:17 2025 GMT
            Not After : Apr 10 00:02:17 2026 GMT
        Subject: CN=A3A3E52427B865EDB317401E1772F43E83DD4E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:02:1b:61:69:ba:3a:44:c3:5b:72:db:52:
                    94:6c:73:5d:66:87:34:1a:7f:bb:5c:34:ad:2f:66:
                    e7:d9:2a:1b:77:04:98:41:ea:f3:05:b5:b6:92:be:
                    0b:83:95:a0:9b:c4:f6:6f:e7:66:2b:99:55:fd:05:
                    df:c2:d6:49:3c:cc:88:cb:ad:35:33:3c:d1:ef:01:
                    1b:a4:7d:61:b0:ad:c9:4b:cf:8c:a7:03:9a:3b:46:
                    b1:9d:e1:5b:78:8a:a8:3d:ec:8e:dd:b1:c5:cc:62:
                    ea:f0:a2:b3:5e:f7:8d:3a:63:99:77:14:bb:99:98:
                    f8:98:ec:14:19:59:ff:37:94:90:91:60:04:5f:0b:
                    3e:ba:9e:1d:b8:0d:51:63:7c:37:5c:bc:a1:ec:e9:
                    e4:6d:c9:52:34:1a:26:05:08:19:ed:6e:d7:dc:a8:
                    aa:76:62:11:ed:55:ed:ad:34:87:01:cd:d6:59:be:
                    24:11:ae:ce:84:ef:79:97:48:de:20:b6:00:fd:12:
                    9d:42:5e:26:ac:94:5d:06:f0:3f:8c:b0:c8:4a:3c:
                    01:f5:78:cd:fd:6a:f3:43:44:03:86:4c:2d:ad:b2:
                    d7:06:25:4a:2f:58:77:c9:86:45:31:1d:56:f5:0b:
                    8d:20:4b:82:ad:0a:5c:bb:c0:59:df:89:51:27:66:
                    ab:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A3:E5:24:27:B8:65:ED:B3:17:40:1E:17:72:F4:3E:83:DD:4E:7C
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.74.0/24
                  5.252.82.0/24
                  45.87.185.0/24
                  45.95.36.0/24
                  89.19.50.0/24
                  92.118.162.0/24
                  92.119.33.0/24
                  92.242.186.0/24
                  109.106.3.0/24
                  130.185.127.0/24
                  179.61.226.0/23
                  179.61.229.0/24
                  179.61.243.0/24
                  181.41.196.0/24
                  181.214.0.0/24
                  181.214.4.0/24
                  181.214.14.0/24
                  181.214.79.0/24
                  181.214.91.0/24
                  181.214.97.0/24
                  181.214.100.0/24
                  181.214.108.0/24
                  181.214.110.0/23
                  181.214.113.0/24
                  181.214.119.0-181.214.120.255
                  181.214.124.0/23
                  181.214.148.0/24
                  181.214.154.0/24
                  181.214.161.0/24
                  181.214.201.0/24
                  181.214.212.0/24
                  181.214.216.0/24
                  181.214.248.0/24
                  181.214.254.0/24
                  181.215.3.0/24
                  181.215.22.0/23
                  181.215.31.0/24
                  181.215.73.0/24
                  181.215.84.0/24
                  181.215.91.0/24
                  181.215.95.0/24
                  181.215.108.0/23
                  181.215.111.0-181.215.115.255
                  181.215.159.0/24
                  181.215.186.0/23
                  181.215.189.0/24
                  181.215.200.0/24
                  181.215.216.0/24
                  181.215.225.0/24
                  181.215.227.0/24
                  181.215.237.0/24
                  181.215.240.0/24
                  181.215.250.0/24
                  191.96.24.0/24
                  191.96.58.0/24
                  191.96.64.0/24
                  191.96.88.0/23
                  191.96.91.0/24
                  191.96.99.0/24
                  191.96.102.0/24
                  191.96.105.0/24
                  191.96.116.0/24
                  191.96.120.0/24
                  191.96.126.0/24
                  191.96.140.0/24
                  191.96.143.0/24
                  191.96.149.0/24
                  191.96.157.0/24
                  191.96.164.0/24
                  191.96.180.0/24
                  191.96.182.0/24
                  191.101.9.0/24
                  191.101.20.0/24
                  191.101.22.0/24
                  191.101.39.0/24
                  191.101.56.0/24
                  191.101.58.0/24
                  191.101.63.0/24
                  191.101.76.0/24
                  191.101.82.0/24
                  191.101.87.0-191.101.88.255
                  191.101.95.0/24
                  191.101.97.0/24
                  191.101.102.0/24
                  191.101.116.0/24
                  191.101.120.0/24
                  191.101.124.0/24
                  191.101.148.0/24
                  191.101.182.0/24
                  191.101.187.0/24
                  191.101.192.0/24
                  191.101.198.0/24
                  191.101.239.0-191.101.240.255
                  191.101.252.0/24
                  193.31.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:62:aa:6d:2a:50:7f:e1:bd:61:ee:da:00:47:24:5b:a2:
         4e:c8:ed:f0:3d:53:53:59:62:56:fe:b8:7b:ba:22:3b:89:c1:
         69:da:af:9a:87:75:28:f4:e2:8b:bd:bd:3c:b1:7b:5b:80:4b:
         d2:f9:8c:48:0f:03:d0:08:69:89:9b:9d:f6:13:52:d3:1d:9e:
         73:ff:e1:bf:ed:93:c0:a5:0b:74:53:c6:09:91:13:8d:36:18:
         92:ba:5d:70:b6:2f:15:91:f5:09:27:35:19:53:c5:a8:75:5e:
         cf:26:73:5d:74:8a:55:6b:bb:63:9a:cd:c1:d2:26:a1:d5:f2:
         f1:cf:26:93:cd:5b:4f:63:29:51:8a:13:bb:76:2c:4b:06:18:
         e6:95:bc:b0:8f:57:10:42:ba:a0:f1:67:ff:a8:3b:8f:dc:2a:
         5d:39:6e:d3:8e:75:fb:40:0a:5a:c2:29:8c:01:4b:63:e3:57:
         89:19:de:fa:72:0b:7a:6f:4d:d5:0b:6f:f7:32:70:79:2a:a2:
         99:0c:52:b7:a5:a5:e0:e5:ff:b7:93:a0:14:bc:63:bd:c9:4e:
         3a:8e:31:51:8b:c5:f3:cc:19:0c:1b:23:47:65:4e:c7:9a:74:
         73:70:19:82:60:21:da:7e:c5:8b:a9:de:df:c8:3c:06:52:c2:
         3b:be:68:3f
-----BEGIN CERTIFICATE-----
MIIHWzCCBkOgAwIBAgIUOn9+NLNcjjYi9qgo8USabaNJ4egwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA0MTAyMzU3MTdaFw0yNjA0MTAwMDAyMTdaMDMxMTAvBgNV
BAMTKEEzQTNFNTI0MjdCODY1RURCMzE3NDAxRTE3NzJGNDNFODNERDRFN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyAIbYWm6OkTDW3LbUpRsc11m
hzQaf7tcNK0vZufZKht3BJhB6vMFtbaSvguDlaCbxPZv52YrmVX9Bd/C1kk8zIjL
rTUzPNHvARukfWGwrclLz4ynA5o7RrGd4Vt4iqg97I7dscXMYurworNe9406Y5l3
FLuZmPiY7BQZWf83lJCRYARfCz66nh24DVFjfDdcvKHs6eRtyVI0GiYFCBntbtfc
qKp2YhHtVe2tNIcBzdZZviQRrs6E73mXSN4gtgD9Ep1CXiaslF0G8D+MsMhKPAH1
eM39avNDRAOGTC2tstcGJUovWHfJhkUxHVb1C40gS4KtCly7wFnfiVEnZqujAgMB
AAGjggRlMIIEYTAdBgNVHQ4EFgQUo6PlJCe4Ze2zF0AeF3L0PoPdTnwwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICewYIKwYBBQUHAQcBAf8EggJqMIICZjCCAmIEAgABMIIC
WgMEAAX8SgMEAAX8UgMEAC1XuQMEAC1fJAMEAFkTMgMEAFx2ogMEAFx3IQMEAFzy
ugMEAG1qAwMEAIK5fwMEAbM94gMEALM95QMEALM98wMEALUpxAMEALXWAAMEALXW
BAMEALXWDgMEALXWTwMEALXWWwMEALXWYQMEALXWZAMEALXWbAMEAbXWbgMEALXW
cTAMAwQAtdZ3AwQAtdZ4AwQBtdZ8AwQAtdaUAwQAtdaaAwQAtdahAwQAtdbJAwQA
tdbUAwQAtdbYAwQAtdb4AwQAtdb+AwQAtdcDAwQBtdcWAwQAtdcfAwQAtddJAwQA
tddUAwQAtddbAwQAtddfAwQBtddsMAwDBAC1128DBAK113ADBAC1158DBAG117oD
BAC1170DBAC118gDBAC119gDBAC11+EDBAC11+MDBAC11+0DBAC11/ADBAC11/oD
BAC/YBgDBAC/YDoDBAC/YEADBAG/YFgDBAC/YFsDBAC/YGMDBAC/YGYDBAC/YGkD
BAC/YHQDBAC/YHgDBAC/YH4DBAC/YIwDBAC/YI8DBAC/YJUDBAC/YJ0DBAC/YKQD
BAC/YLQDBAC/YLYDBAC/ZQkDBAC/ZRQDBAC/ZRYDBAC/ZScDBAC/ZTgDBAC/ZToD
BAC/ZT8DBAC/ZUwDBAC/ZVIwDAMEAL9lVwMEAL9lWAMEAL9lXwMEAL9lYQMEAL9l
ZgMEAL9ldAMEAL9leAMEAL9lfAMEAL9llAMEAL9ltgMEAL9luwMEAL9lwAMEAL9l
xjAMAwQAv2XvAwQAv2XwAwQAv2X8AwQAwR8pMA0GCSqGSIb3DQEBCwUAA4IBAQAn
DmKqbSpQf+G9Ye7aAEckW6JOyO3wPVNTWWJW/rh7uiI7icFp2q+ah3Uo9OKLvb08
sXtbgEvS+YxIDwPQCGmJm532E1LTHZ5z/+G/7ZPApQt0U8YJkRONNhiSul1wti8V
kfUJJzUZU8WodV7PJnNddIpVa7tjms3B0iah1fLxzyaTzVtPYylRihO7dixLBhjm
lbywj1cQQrqg8Wf/qDuP3CpdOW7TjnX7QApawimMAUtj41eJGd76cgt6b03VC2/3
MnB5KqKZDFK3paXg5f+3k6AUvGO9yU46jjFRi8XzzBkMGyNHZU7HmnRzcBmCYCHa
fsWLqd7fyDwGUsI7vmg/
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net