Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: gu546dKMoZdRf7hdSPZA6fr+XXbmP0ZyM5fwluL6xdo=
Subject key identifier: 93:4A:BD:FD:7A:03:F2:88:D8:4A:4C:38:5C:10:01:03:2D:DE:2C:62
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 636D79F31876C8CA5FAA41889BB9429A69016858
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
Signing time: Sat 12 Apr 2025 09:10:33 +0000
ROA not before: Sat 12 Apr 2025 09:05:33 +0000
ROA not after: Sat 11 Apr 2026 09:10:33 +0000
asID: 834
IP address blocks: 46.202.61.0/24 maxlen: 24
46.202.66.0/24 maxlen: 24
46.202.70.0/24 maxlen: 24
46.202.75.0/24 maxlen: 24
46.203.112.0/24 maxlen: 24
46.203.151.0/24 maxlen: 24
46.203.174.0/24 maxlen: 24
46.203.179.0/24 maxlen: 24
46.203.180.0/23 maxlen: 24
91.124.19.0/24 maxlen: 24
91.124.34.0/24 maxlen: 24
91.124.38.0/24 maxlen: 24
91.124.40.0/21 maxlen: 24
91.124.116.0/24 maxlen: 24
91.124.118.0/24 maxlen: 24
91.124.168.0/24 maxlen: 24
91.124.201.0/24 maxlen: 24
91.124.207.0/24 maxlen: 24
92.112.6.0/23 maxlen: 24
92.112.8.0/24 maxlen: 24
92.112.48.0/23 maxlen: 24
92.112.89.0/24 maxlen: 24
92.112.106.0/23 maxlen: 24
92.112.142.0/24 maxlen: 24
92.112.147.0/24 maxlen: 24
92.112.158.0/24 maxlen: 24
92.113.10.0/24 maxlen: 24
92.113.14.0/24 maxlen: 24
92.113.46.0/23 maxlen: 24
92.113.48.0/24 maxlen: 24
92.113.100.0/24 maxlen: 24
92.113.227.0/24 maxlen: 24
95.134.0.0/22 maxlen: 24
95.134.4.0/23 maxlen: 24
95.134.6.0/24 maxlen: 24
95.134.20.0/22 maxlen: 24
95.134.28.0/22 maxlen: 24
95.134.32.0/22 maxlen: 24
95.134.40.0/22 maxlen: 24
95.134.60.0/22 maxlen: 24
95.134.76.0/23 maxlen: 24
95.134.78.0/24 maxlen: 24
95.134.86.0/23 maxlen: 24
95.134.89.0/24 maxlen: 24
95.134.90.0/23 maxlen: 24
95.134.92.0/23 maxlen: 24
95.134.94.0/24 maxlen: 24
95.134.104.0/21 maxlen: 24
95.134.112.0/20 maxlen: 24
95.134.129.0/24 maxlen: 24
95.134.130.0/24 maxlen: 24
95.134.132.0/23 maxlen: 24
95.134.135.0/24 maxlen: 24
95.134.136.0/21 maxlen: 24
95.134.152.0/21 maxlen: 24
95.134.160.0/21 maxlen: 24
95.134.176.0/23 maxlen: 24
95.134.178.0/24 maxlen: 24
95.134.182.0/24 maxlen: 24
95.134.184.0/24 maxlen: 24
95.134.186.0/23 maxlen: 24
95.134.192.0/22 maxlen: 24
95.134.200.0/21 maxlen: 24
95.134.213.0/24 maxlen: 24
95.134.214.0/23 maxlen: 24
95.134.220.0/22 maxlen: 24
95.135.40.0/24 maxlen: 24
95.135.50.0/24 maxlen: 24
95.135.61.0/24 maxlen: 24
95.135.70.0/24 maxlen: 24
95.135.72.0/24 maxlen: 24
95.135.76.0/22 maxlen: 24
95.135.82.0/23 maxlen: 24
95.135.109.0/24 maxlen: 24
95.135.132.0/23 maxlen: 24
95.135.134.0/24 maxlen: 24
95.135.137.0/24 maxlen: 24
95.135.139.0/24 maxlen: 24
95.135.140.0/23 maxlen: 24
95.135.144.0/24 maxlen: 24
95.135.160.0/21 maxlen: 24
95.135.191.0/24 maxlen: 24
95.135.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:6d:79:f3:18:76:c8:ca:5f:aa:41:88:9b:b9:42:9a:69:01:68:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 12 09:05:33 2025 GMT
Not After : Apr 11 09:10:33 2026 GMT
Subject: CN=934ABDFD7A03F288D84A4C385C1001032DDE2C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:3c:8a:9c:65:17:93:9a:33:c6:2a:c9:e8:
50:ee:ac:3b:f9:7d:cb:0f:d9:ee:f3:2c:3e:27:7a:
27:18:2f:a9:6e:69:37:a3:c3:78:a0:79:a2:04:e1:
80:16:1a:91:dc:b2:9e:9d:0d:32:5e:70:50:61:73:
e9:04:9d:3c:fa:da:dd:0d:06:27:f7:63:71:dc:9f:
14:cf:7d:31:de:c5:57:36:a5:c8:13:a2:af:56:3a:
8c:44:1b:b4:5d:5d:2b:2d:23:55:4f:10:93:45:53:
a4:4e:85:ba:a6:2d:8d:a5:7a:7c:22:34:67:dc:36:
68:71:4e:f9:7f:14:10:38:87:5d:db:cf:ea:b0:e7:
7e:f3:5c:5c:43:71:cc:70:95:d0:1f:8c:71:6d:db:
5e:8a:4c:3a:ba:37:50:c1:a3:6b:d7:4f:b6:30:f5:
0c:4c:6e:f1:09:8c:b8:92:da:3a:03:4a:80:45:49:
69:5b:ea:ec:59:1a:f6:92:65:d3:06:2c:4b:2a:4a:
12:64:88:90:e0:0d:69:4c:36:80:15:a4:2e:c1:23:
42:d6:f8:09:cf:17:3a:dd:f6:5e:c4:a5:f2:fb:46:
99:ee:1f:6d:ce:47:d9:6b:dd:ae:a0:68:29:c3:28:
0d:4f:9f:fe:3c:e1:8c:26:86:9f:6c:72:38:57:de:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4A:BD:FD:7A:03:F2:88:D8:4A:4C:38:5C:10:01:03:2D:DE:2C:62
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.61.0/24
46.202.66.0/24
46.202.70.0/24
46.202.75.0/24
46.203.112.0/24
46.203.151.0/24
46.203.174.0/24
46.203.179.0-46.203.181.255
91.124.19.0/24
91.124.34.0/24
91.124.38.0/24
91.124.40.0/21
91.124.116.0/24
91.124.118.0/24
91.124.168.0/24
91.124.201.0/24
91.124.207.0/24
92.112.6.0-92.112.8.255
92.112.48.0/23
92.112.89.0/24
92.112.106.0/23
92.112.142.0/24
92.112.147.0/24
92.112.158.0/24
92.113.10.0/24
92.113.14.0/24
92.113.46.0-92.113.48.255
92.113.100.0/24
92.113.227.0/24
95.134.0.0-95.134.6.255
95.134.20.0/22
95.134.28.0-95.134.35.255
95.134.40.0/22
95.134.60.0/22
95.134.76.0-95.134.78.255
95.134.86.0/23
95.134.89.0-95.134.94.255
95.134.104.0-95.134.127.255
95.134.129.0-95.134.130.255
95.134.132.0/23
95.134.135.0-95.134.143.255
95.134.152.0-95.134.167.255
95.134.176.0-95.134.178.255
95.134.182.0/24
95.134.184.0/24
95.134.186.0/23
95.134.192.0/22
95.134.200.0/21
95.134.213.0-95.134.215.255
95.134.220.0/22
95.135.40.0/24
95.135.50.0/24
95.135.61.0/24
95.135.70.0/24
95.135.72.0/24
95.135.76.0/22
95.135.82.0/23
95.135.109.0/24
95.135.132.0-95.135.134.255
95.135.137.0/24
95.135.139.0-95.135.141.255
95.135.144.0/24
95.135.160.0/21
95.135.191.0/24
95.135.200.0/21
Signature Algorithm: sha256WithRSAEncryption
33:15:2d:a8:ad:fa:58:be:ca:60:57:1d:72:13:64:dd:2c:b6:
3e:e4:2c:40:ac:a8:d9:de:6b:0e:57:c7:ec:c8:a0:72:e6:ea:
75:51:e5:01:b6:db:7d:ca:ee:a6:f3:82:49:a4:d9:bb:4c:4b:
68:e7:29:ef:b4:3c:d2:f1:f5:5b:87:b2:25:a8:9f:5e:73:c5:
c7:a4:56:2b:25:a5:c2:ed:47:85:50:82:00:23:28:17:44:f5:
46:d7:94:b2:c4:af:f0:2a:0c:a1:1e:9d:36:16:97:b7:b9:b8:
86:f7:21:c8:db:bb:08:7f:1b:d4:66:f6:92:96:ef:65:69:0b:
57:60:70:48:58:8f:35:d1:67:c0:04:43:b1:32:18:6b:2a:9c:
46:6e:3f:f8:63:67:ac:a4:94:f4:c2:e4:82:66:49:ac:23:00:
46:d8:4c:fd:2d:b8:aa:31:77:d9:ea:05:e5:1c:e2:63:23:04:
d3:7f:63:e5:a0:be:18:f2:b8:23:1a:a3:9e:6c:1f:0f:f4:09:
48:59:23:80:35:c4:da:06:51:8e:f7:ce:bb:88:5f:0d:50:8f:
f6:ea:82:8e:15:e7:19:f5:89:a7:b2:a6:93:21:e4:b6:0a:3d:
51:9c:70:05:01:e0:d2:d7:44:d2:8b:51:cc:8f:d9:c4:c4:c7:
97:43:9c:38
-----BEGIN CERTIFICATE-----
MIIG/jCCBeagAwIBAgIUY2158xh2yMpfqkGIm7lCmmkBaFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA0MTIwOTA1MzNaFw0yNjA0MTEwOTEwMzNaMDMxMTAvBgNV
BAMTKDkzNEFCREZEN0EwM0YyODhEODRBNEMzODVDMTAwMTAzMkRERTJDNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+DyKnGUXk5ozxirJ6FDurDv5
fcsP2e7zLD4neicYL6luaTejw3igeaIE4YAWGpHcsp6dDTJecFBhc+kEnTz62t0N
Bif3Y3HcnxTPfTHexVc2pcgToq9WOoxEG7RdXSstI1VPEJNFU6ROhbqmLY2lenwi
NGfcNmhxTvl/FBA4h13bz+qw537zXFxDccxwldAfjHFt216KTDq6N1DBo2vXT7Yw
9QxMbvEJjLiS2joDSoBFSWlb6uxZGvaSZdMGLEsqShJkiJDgDWlMNoAVpC7BI0LW
+AnPFzrd9l7EpfL7RpnuH23OR9lr3a6gaCnDKA1Pn/484Ywmhp9scjhX3oW7AgMB
AAGjggQIMIIEBDAdBgNVHQ4EFgQUk0q9/XoD8ojYSkw4XBABAy3eLGIwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICHgYIKwYBBQUHAQcBAf8EggINMIICCTCCAgUEAgABMIIB
/QMEAC7KPQMEAC7KQgMEAC7KRgMEAC7KSwMEAC7LcAMEAC7LlwMEAC7LrjAMAwQA
LsuzAwQBLsu0AwQAW3wTAwQAW3wiAwQAW3wmAwQDW3woAwQAW3x0AwQAW3x2AwQA
W3yoAwQAW3zJAwQAW3zPMAwDBAFccAYDBABccAgDBAFccDADBABccFkDBAFccGoD
BABccI4DBABccJMDBABccJ4DBABccQoDBABccQ4wDAMEAVxxLgMEAFxxMAMEAFxx
ZAMEAFxx4zALAwMBX4YDBABfhgYDBAJfhhQwDAMEAl+GHAMEAl+GIAMEAl+GKAME
Al+GPDAMAwQCX4ZMAwQAX4ZOAwQBX4ZWMAwDBABfhlkDBABfhl4wDAMEA1+GaAME
B1+GADAMAwQAX4aBAwQAX4aCAwQBX4aEMAwDBABfhocDBARfhoAwDAMEA1+GmAME
A1+GoDAMAwQEX4awAwQAX4ayAwQAX4a2AwQAX4a4AwQBX4a6AwQCX4bAAwQDX4bI
MAwDBABfhtUDBANfhtADBAJfhtwDBABfhygDBABfhzIDBABfhz0DBABfh0YDBABf
h0gDBAJfh0wDBAFfh1IDBABfh20wDAMEAl+HhAMEAF+HhgMEAF+HiTAMAwQAX4eL
AwQBX4eMAwQAX4eQAwQDX4egAwQAX4e/AwQDX4fIMA0GCSqGSIb3DQEBCwUAA4IB
AQAzFS2orfpYvspgVx1yE2TdLLY+5CxArKjZ3msOV8fsyKBy5up1UeUBttt9yu6m
84JJpNm7TEto5ynvtDzS8fVbh7IlqJ9ec8XHpFYrJaXC7UeFUIIAIygXRPVG15Sy
xK/wKgyhHp02Fpe3ubiG9yHI27sIfxvUZvaSlu9laQtXYHBIWI810WfABEOxMhhr
KpxGbj/4Y2espJT0wuSCZkmsIwBG2Ez9LbiqMXfZ6gXlHOJjIwTTf2PloL4Y8rgj
GqOebB8P9AlIWSOANcTaBlGO9867iF8NUI/26oKOFecZ9YmnsqaTIeS2Cj1RnHAF
AeDS10TSi1HMj9nExMeXQ5w4
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net