Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          s78LNryFSI+j6iH/8TC2Th4MFTAtoufOd1u8sEhTPmY=
Subject key identifier:   05:AA:E9:1F:05:A2:9E:8E:35:42:14:3E:86:DF:DD:8C:3E:E8:F1:EB
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       610C0EA3868D8BB11885E3C492718DE5A91422F6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
Signing time:             Thu 10 Apr 2025 10:42:58 +0000
ROA not before:           Thu 10 Apr 2025 10:37:58 +0000
ROA not after:            Thu 09 Apr 2026 10:42:58 +0000
asID:                     174
IP address blocks:        46.202.32.0/24 maxlen: 24
                          46.202.35.0/24 maxlen: 24
                          46.202.36.0/24 maxlen: 24
                          46.202.41.0/24 maxlen: 24
                          46.202.46.0/24 maxlen: 24
                          46.202.62.0/24 maxlen: 24
                          46.202.85.0/24 maxlen: 24
                          46.202.86.0/24 maxlen: 24
                          46.203.18.0/24 maxlen: 24
                          46.203.31.0/24 maxlen: 24
                          46.203.33.0/24 maxlen: 24
                          46.203.35.0/24 maxlen: 24
                          46.203.46.0/24 maxlen: 24
                          46.203.55.0/24 maxlen: 24
                          46.203.57.0/24 maxlen: 24
                          46.203.61.0/24 maxlen: 24
                          46.203.72.0/24 maxlen: 24
                          46.203.75.0/24 maxlen: 24
                          46.203.77.0/24 maxlen: 24
                          46.203.78.0/24 maxlen: 24
                          46.203.81.0/24 maxlen: 24
                          46.203.135.0/24 maxlen: 24
                          46.203.136.0/24 maxlen: 24
                          46.203.139.0/24 maxlen: 24
                          46.203.146.0/24 maxlen: 24
                          46.203.148.0/24 maxlen: 24
                          46.203.178.0/24 maxlen: 24
                          91.124.17.0/24 maxlen: 24
                          91.124.36.0/24 maxlen: 24
                          91.124.68.0/22 maxlen: 22
                          91.124.72.0/22 maxlen: 22
                          91.124.76.0/22 maxlen: 22
                          91.124.84.0/22 maxlen: 22
                          91.124.92.0/22 maxlen: 22
                          91.124.96.0/22 maxlen: 22
                          91.124.100.0/22 maxlen: 22
                          91.124.104.0/22 maxlen: 22
                          91.124.108.0/22 maxlen: 22
                          91.124.112.0/22 maxlen: 22
                          91.124.160.0/24 maxlen: 24
                          91.124.161.0/24 maxlen: 24
                          91.124.162.0/24 maxlen: 24
                          91.124.163.0/24 maxlen: 24
                          91.124.176.0/24 maxlen: 24
                          91.124.180.0/22 maxlen: 22
                          91.124.188.0/22 maxlen: 22
                          91.124.196.0/24 maxlen: 24
                          91.124.197.0/24 maxlen: 24
                          91.124.198.0/24 maxlen: 24
                          91.124.204.0/24 maxlen: 24
                          91.124.205.0/24 maxlen: 24
                          91.124.206.0/24 maxlen: 24
                          91.124.212.0/22 maxlen: 22
                          91.124.224.0/22 maxlen: 22
                          91.124.228.0/22 maxlen: 22
                          91.124.232.0/22 maxlen: 22
                          92.112.65.0/24 maxlen: 24
                          92.112.66.0/24 maxlen: 24
                          92.112.71.0/24 maxlen: 24
                          92.112.104.0/24 maxlen: 24
                          92.112.105.0/24 maxlen: 24
                          92.112.108.0/24 maxlen: 24
                          92.112.109.0/24 maxlen: 24
                          92.113.70.0/24 maxlen: 24
                          92.113.71.0/24 maxlen: 24
                          92.113.72.0/24 maxlen: 24
                          92.113.73.0/24 maxlen: 24
                          92.113.101.0/24 maxlen: 24
                          92.113.102.0/24 maxlen: 24
                          92.113.104.0/24 maxlen: 24
                          92.113.105.0/24 maxlen: 24
                          92.113.127.0/24 maxlen: 24
                          92.113.128.0/24 maxlen: 24
                          92.113.158.0/24 maxlen: 24
                          92.113.159.0/24 maxlen: 24
                          92.113.160.0/24 maxlen: 24
                          92.113.161.0/24 maxlen: 24
                          95.134.12.0/24 maxlen: 24
                          95.134.13.0/24 maxlen: 24
                          95.134.14.0/24 maxlen: 24
                          95.134.15.0/24 maxlen: 24
                          95.134.79.0/24 maxlen: 24
                          95.134.80.0/24 maxlen: 24
                          95.134.88.0/24 maxlen: 24
                          95.134.95.0/24 maxlen: 24
                          95.134.128.0/24 maxlen: 24
                          95.134.134.0/24 maxlen: 24
                          95.134.151.0/24 maxlen: 24
                          95.135.104.0/24 maxlen: 24
                          95.135.154.0/24 maxlen: 24
                          95.135.155.0/24 maxlen: 24
                          95.135.168.0/24 maxlen: 24
                          95.135.232.0/24 maxlen: 24
                          95.135.238.0/24 maxlen: 24
                          95.135.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:0e:a3:86:8d:8b:b1:18:85:e3:c4:92:71:8d:e5:a9:14:22:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Apr 10 10:37:58 2025 GMT
            Not After : Apr  9 10:42:58 2026 GMT
        Subject: CN=05AAE91F05A29E8E3542143E86DFDD8C3EE8F1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:c1:88:14:b9:b1:b6:c1:7f:50:3d:ff:f3:
                    1b:84:b9:64:94:f6:fd:fa:a5:13:9c:89:af:a0:43:
                    f5:b1:9c:aa:cb:b7:48:94:c0:31:76:96:f8:2a:61:
                    d7:0d:79:68:97:90:d5:ec:67:69:c4:60:59:43:c3:
                    e5:cc:63:5c:37:da:13:6f:73:c9:43:bd:a4:b6:20:
                    de:a0:87:b3:df:71:50:ad:62:14:d8:6e:0b:e7:24:
                    84:67:e2:b7:10:df:c3:08:d5:17:7e:55:d8:c9:08:
                    30:88:da:29:e9:25:66:4a:3b:67:87:74:42:3d:f9:
                    14:59:f7:e7:4a:0d:a2:4f:11:d0:44:89:08:1f:79:
                    77:78:e9:ba:41:62:6f:b4:c8:6c:af:83:ec:aa:5f:
                    07:ed:15:71:5e:b5:96:57:dd:e8:1a:7b:55:31:65:
                    d7:78:97:31:3e:7f:32:4c:0e:f8:dc:51:17:10:56:
                    4f:42:59:b8:cd:b9:e1:22:bf:af:77:34:8d:88:1a:
                    c0:c0:54:b6:91:67:7f:de:5a:df:15:ff:ad:6c:79:
                    71:3a:24:b6:13:1b:72:2d:0b:6e:45:df:66:35:b6:
                    56:84:2d:a0:e1:32:92:a5:a0:aa:d5:c5:8f:8b:42:
                    04:a9:b5:ca:97:76:6f:c3:fc:d7:7f:f6:2d:22:af:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AA:E9:1F:05:A2:9E:8E:35:42:14:3E:86:DF:DD:8C:3E:E8:F1:EB
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.32.0/24
                  46.202.35.0-46.202.36.255
                  46.202.41.0/24
                  46.202.46.0/24
                  46.202.62.0/24
                  46.202.85.0-46.202.86.255
                  46.203.18.0/24
                  46.203.31.0/24
                  46.203.33.0/24
                  46.203.35.0/24
                  46.203.46.0/24
                  46.203.55.0/24
                  46.203.57.0/24
                  46.203.61.0/24
                  46.203.72.0/24
                  46.203.75.0/24
                  46.203.77.0-46.203.78.255
                  46.203.81.0/24
                  46.203.135.0-46.203.136.255
                  46.203.139.0/24
                  46.203.146.0/24
                  46.203.148.0/24
                  46.203.178.0/24
                  91.124.17.0/24
                  91.124.36.0/24
                  91.124.68.0-91.124.79.255
                  91.124.84.0/22
                  91.124.92.0-91.124.115.255
                  91.124.160.0/22
                  91.124.176.0/24
                  91.124.180.0/22
                  91.124.188.0/22
                  91.124.196.0-91.124.198.255
                  91.124.204.0-91.124.206.255
                  91.124.212.0/22
                  91.124.224.0-91.124.235.255
                  92.112.65.0-92.112.66.255
                  92.112.71.0/24
                  92.112.104.0/23
                  92.112.108.0/23
                  92.113.70.0-92.113.73.255
                  92.113.101.0-92.113.102.255
                  92.113.104.0/23
                  92.113.127.0-92.113.128.255
                  92.113.158.0-92.113.161.255
                  95.134.12.0/22
                  95.134.79.0-95.134.80.255
                  95.134.88.0/24
                  95.134.95.0/24
                  95.134.128.0/24
                  95.134.134.0/24
                  95.134.151.0/24
                  95.135.104.0/24
                  95.135.154.0/23
                  95.135.168.0/24
                  95.135.232.0/24
                  95.135.238.0/24
                  95.135.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:c8:66:ed:ca:d0:a8:0d:f5:87:59:96:3d:64:dc:34:d4:46:
         3c:31:cb:06:b9:fb:9c:1f:a3:6e:6a:99:7f:19:32:3d:32:3b:
         50:f1:20:e3:15:27:d7:2c:ab:d6:1b:e3:e7:de:2a:22:7c:df:
         a3:f3:85:61:5c:b4:b8:93:19:ff:e4:b6:8a:84:0c:84:a4:58:
         69:f1:10:37:ed:38:e4:b0:d5:99:21:13:3f:e2:99:63:07:57:
         21:98:44:60:23:a3:79:43:9a:a9:2b:b9:4e:eb:f3:88:8c:25:
         44:54:8c:87:69:0f:e5:8c:23:50:65:e6:ab:98:01:5e:41:ef:
         9b:9b:4b:cf:da:35:06:bd:93:9c:b6:6d:68:30:0d:e4:b0:eb:
         31:21:54:74:f3:27:90:fb:e0:d0:94:c2:01:91:1f:de:b3:4c:
         d6:d6:48:3b:0f:99:0b:c6:e0:59:52:71:57:f7:ee:6a:21:0e:
         03:02:09:f1:50:b5:9f:f8:d8:e1:f7:b8:5a:12:ba:e4:f2:32:
         0c:da:90:c7:33:de:0e:8e:f3:ec:0c:ad:22:33:e2:31:d6:40:
         f7:d7:79:24:32:c0:d7:f0:2e:91:52:e1:62:e5:a6:66:f5:42:
         61:cb:c1:b9:af:9b:2d:75:b8:ef:02:0e:b5:c7:15:08:fb:a3:
         ce:ad:15:a0
-----BEGIN CERTIFICATE-----
MIIG1TCCBb2gAwIBAgIUYQwOo4aNi7EYhePEknGN5akUIvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA0MTAxMDM3NThaFw0yNjA0MDkxMDQyNThaMDMxMTAvBgNV
BAMTKDA1QUFFOTFGMDVBMjlFOEUzNTQyMTQzRTg2REZERDhDM0VFOEYxRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59cGIFLmxtsF/UD3/8xuEuWSU
9v36pROcia+gQ/WxnKrLt0iUwDF2lvgqYdcNeWiXkNXsZ2nEYFlDw+XMY1w32hNv
c8lDvaS2IN6gh7PfcVCtYhTYbgvnJIRn4rcQ38MI1Rd+VdjJCDCI2inpJWZKO2eH
dEI9+RRZ9+dKDaJPEdBEiQgfeXd46bpBYm+0yGyvg+yqXwftFXFetZZX3egae1Ux
Zdd4lzE+fzJMDvjcURcQVk9CWbjNueEiv693NI2IGsDAVLaRZ3/eWt8V/61seXE6
JLYTG3ItC25F32Y1tlaELaDhMpKloKrVxY+LQgSptcqXdm/D/Nd/9i0ir1SnAgMB
AAGjggPfMIID2zAdBgNVHQ4EFgQUBarpHwWino41QhQ+ht/djD7o8eswHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTc0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB9QYIKwYBBQUHAQcBAf8EggHkMIIB4DCCAdwEAgABMIIB
1AMEAC7KIDAMAwQALsojAwQALsokAwQALsopAwQALsouAwQALso+MAwDBAAuylUD
BAAuylYDBAAuyxIDBAAuyx8DBAAuyyEDBAAuyyMDBAAuyy4DBAAuyzcDBAAuyzkD
BAAuyz0DBAAuy0gDBAAuy0swDAMEAC7LTQMEAC7LTgMEAC7LUTAMAwQALsuHAwQA
LsuIAwQALsuLAwQALsuSAwQALsuUAwQALsuyAwQAW3wRAwQAW3wkMAwDBAJbfEQD
BARbfEADBAJbfFQwDAMEAlt8XAMEAlt8cAMEAlt8oAMEAFt8sAMEAlt8tAMEAlt8
vDAMAwQCW3zEAwQAW3zGMAwDBAJbfMwDBABbfM4DBAJbfNQwDAMEBVt84AMEAlt8
6DAMAwQAXHBBAwQAXHBCAwQAXHBHAwQBXHBoAwQBXHBsMAwDBAFccUYDBAFccUgw
DAMEAFxxZQMEAFxxZgMEAVxxaDAMAwQAXHF/AwQAXHGAMAwDBAFccZ4DBAFccaAD
BAJfhgwwDAMEAF+GTwMEAF+GUAMEAF+GWAMEAF+GXwMEAF+GgAMEAF+GhgMEAF+G
lwMEAF+HaAMEAV+HmgMEAF+HqAMEAF+H6AMEAF+H7gMEAF+H8jANBgkqhkiG9w0B
AQsFAAOCAQEARchm7crQqA31h1mWPWTcNNRGPDHLBrn7nB+jbmqZfxkyPTI7UPEg
4xUn1yyr1hvj594qInzfo/OFYVy0uJMZ/+S2ioQMhKRYafEQN+045LDVmSETP+KZ
YwdXIZhEYCOjeUOaqSu5TuvziIwlRFSMh2kP5YwjUGXmq5gBXkHvm5tLz9o1Br2T
nLZtaDAN5LDrMSFUdPMnkPvg0JTCAZEf3rNM1tZIOw+ZC8bgWVJxV/fuaiEOAwIJ
8VC1n/jY4fe4WhK65PIyDNqQxzPeDo7z7AytIjPiMdZA99d5JDLA1/AukVLhYuWm
ZvVCYcvBua+bLXW47wIOtccVCPujzq0VoA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net