Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 0J6T1oCJFje8wTuAVubd76Z5lNp0G7LodZIUWGCiDns=
Subject key identifier: 73:A0:2C:61:EA:E7:97:68:DD:C5:52:4A:4E:4B:88:0D:06:5F:87:0F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6514883B93D3DDFB93DC71E4E046A157E60469B3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
Signing time: Mon 05 May 2025 05:24:44 +0000
ROA not before: Mon 05 May 2025 05:19:44 +0000
ROA not after: Mon 04 May 2026 05:24:44 +0000
asID: 834
IP address blocks: 46.202.32.0/24 maxlen: 24
46.202.36.0/24 maxlen: 24
46.202.41.0/24 maxlen: 24
46.202.46.0/24 maxlen: 24
46.202.61.0/24 maxlen: 24
46.202.66.0/24 maxlen: 24
46.202.70.0/24 maxlen: 24
46.202.75.0/24 maxlen: 24
46.203.120.0/24 maxlen: 24
46.203.149.0/24 maxlen: 24
46.203.182.0/24 maxlen: 24
46.203.222.0/24 maxlen: 24
91.124.19.0/24 maxlen: 24
91.124.34.0/24 maxlen: 24
91.124.38.0/24 maxlen: 24
91.124.80.0/24 maxlen: 24
91.124.88.0/23 maxlen: 24
91.124.116.0/24 maxlen: 24
91.124.118.0/23 maxlen: 24
91.124.120.0/23 maxlen: 24
91.124.126.0/24 maxlen: 24
91.124.128.0/24 maxlen: 24
91.124.168.0/24 maxlen: 24
91.124.172.0/24 maxlen: 24
91.124.174.0/23 maxlen: 24
91.124.184.0/23 maxlen: 24
91.124.186.0/24 maxlen: 24
91.124.192.0/24 maxlen: 24
91.124.200.0/24 maxlen: 24
91.124.237.0/24 maxlen: 24
91.124.241.0/24 maxlen: 24
92.112.6.0/23 maxlen: 24
92.112.8.0/24 maxlen: 24
92.112.48.0/23 maxlen: 24
92.112.89.0/24 maxlen: 24
92.112.106.0/23 maxlen: 24
92.112.142.0/24 maxlen: 24
92.112.147.0/24 maxlen: 24
92.113.10.0/24 maxlen: 24
92.113.14.0/24 maxlen: 24
92.113.46.0/23 maxlen: 24
92.113.48.0/24 maxlen: 24
92.113.100.0/24 maxlen: 24
92.113.169.0/24 maxlen: 24
92.113.170.0/23 maxlen: 24
92.113.172.0/23 maxlen: 24
92.113.175.0/24 maxlen: 24
92.113.224.0/24 maxlen: 24
92.113.228.0/23 maxlen: 24
92.113.230.0/24 maxlen: 24
92.113.247.0/24 maxlen: 24
95.134.4.0/23 maxlen: 24
95.134.20.0/22 maxlen: 24
95.134.28.0/22 maxlen: 24
95.134.40.0/22 maxlen: 24
95.134.77.0/24 maxlen: 24
95.134.78.0/24 maxlen: 24
95.134.86.0/23 maxlen: 24
95.134.89.0/24 maxlen: 24
95.134.91.0/24 maxlen: 24
95.134.92.0/23 maxlen: 24
95.134.94.0/24 maxlen: 24
95.134.112.0/22 maxlen: 24
95.134.121.0/24 maxlen: 24
95.134.122.0/23 maxlen: 24
95.134.129.0/24 maxlen: 24
95.134.130.0/24 maxlen: 24
95.134.132.0/23 maxlen: 24
95.134.135.0/24 maxlen: 24
95.134.149.0/24 maxlen: 24
95.134.177.0/24 maxlen: 24
95.134.182.0/24 maxlen: 24
95.134.186.0/23 maxlen: 24
95.134.192.0/24 maxlen: 24
95.134.195.0/24 maxlen: 24
95.134.201.0/24 maxlen: 24
95.134.204.0/23 maxlen: 24
95.134.213.0/24 maxlen: 24
95.134.220.0/24 maxlen: 24
95.135.50.0/24 maxlen: 24
95.135.100.0/24 maxlen: 24
95.135.132.0/23 maxlen: 24
95.135.144.0/24 maxlen: 24
95.135.173.0/24 maxlen: 24
95.135.178.0/23 maxlen: 24
95.135.189.0/24 maxlen: 24
95.135.191.0/24 maxlen: 24
95.135.204.0/22 maxlen: 24
95.135.210.0/24 maxlen: 24
95.135.221.0/24 maxlen: 24
95.135.228.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
95.135.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:14:88:3b:93:d3:dd:fb:93:dc:71:e4:e0:46:a1:57:e6:04:69:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 5 05:19:44 2025 GMT
Not After : May 4 05:24:44 2026 GMT
Subject: CN=73A02C61EAE79768DDC5524A4E4B880D065F870F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:70:a0:ba:67:ca:d3:47:43:02:db:dd:59:
cb:0a:65:74:f0:45:8d:01:aa:29:5a:72:5b:de:0e:
73:56:09:bb:02:c5:66:f0:e3:21:3f:e3:f4:62:a9:
62:f6:04:46:45:1c:99:53:fd:34:7f:f0:77:b1:23:
33:7c:a4:6d:61:23:90:33:7b:94:00:d2:f6:60:8b:
50:04:f5:d6:db:d9:54:e9:7b:5b:f9:19:80:d6:9b:
35:3e:e8:a4:e9:7a:f7:1d:80:98:c5:8e:7a:98:54:
e1:c3:06:d6:c6:d7:b5:0f:de:8e:35:da:86:89:9f:
54:b0:de:5f:d5:8a:1a:e0:f8:35:41:b0:81:ff:48:
8f:18:a3:bb:c4:b1:d4:f5:9d:cf:e3:15:99:98:b8:
4d:38:83:77:10:e2:04:58:e6:b9:12:3d:d8:16:20:
25:ea:8a:36:00:c8:7e:ff:c2:84:32:c8:02:f4:87:
f4:f5:cb:ec:67:17:18:b9:18:ff:df:39:b9:9a:34:
60:08:af:81:bb:ab:4a:c7:9e:a0:1a:3d:fc:ce:d3:
16:78:fc:0c:82:72:21:3e:e6:ef:82:8b:65:64:d4:
ae:27:8d:6c:40:b8:5b:ab:8a:9c:ee:08:01:ea:21:
51:11:28:01:75:4c:b2:5e:6e:b6:89:f2:44:81:d9:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A0:2C:61:EA:E7:97:68:DD:C5:52:4A:4E:4B:88:0D:06:5F:87:0F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.32.0/24
46.202.36.0/24
46.202.41.0/24
46.202.46.0/24
46.202.61.0/24
46.202.66.0/24
46.202.70.0/24
46.202.75.0/24
46.203.120.0/24
46.203.149.0/24
46.203.182.0/24
46.203.222.0/24
91.124.19.0/24
91.124.34.0/24
91.124.38.0/24
91.124.80.0/24
91.124.88.0/23
91.124.116.0/24
91.124.118.0-91.124.121.255
91.124.126.0/24
91.124.128.0/24
91.124.168.0/24
91.124.172.0/24
91.124.174.0/23
91.124.184.0-91.124.186.255
91.124.192.0/24
91.124.200.0/24
91.124.237.0/24
91.124.241.0/24
92.112.6.0-92.112.8.255
92.112.48.0/23
92.112.89.0/24
92.112.106.0/23
92.112.142.0/24
92.112.147.0/24
92.113.10.0/24
92.113.14.0/24
92.113.46.0-92.113.48.255
92.113.100.0/24
92.113.169.0-92.113.173.255
92.113.175.0/24
92.113.224.0/24
92.113.228.0-92.113.230.255
92.113.247.0/24
95.134.4.0/23
95.134.20.0/22
95.134.28.0/22
95.134.40.0/22
95.134.77.0-95.134.78.255
95.134.86.0/23
95.134.89.0/24
95.134.91.0-95.134.94.255
95.134.112.0/22
95.134.121.0-95.134.123.255
95.134.129.0-95.134.130.255
95.134.132.0/23
95.134.135.0/24
95.134.149.0/24
95.134.177.0/24
95.134.182.0/24
95.134.186.0/23
95.134.192.0/24
95.134.195.0/24
95.134.201.0/24
95.134.204.0/23
95.134.213.0/24
95.134.220.0/24
95.135.50.0/24
95.135.100.0/24
95.135.132.0/23
95.135.144.0/24
95.135.173.0/24
95.135.178.0/23
95.135.189.0/24
95.135.191.0/24
95.135.204.0/22
95.135.210.0/24
95.135.221.0/24
95.135.228.0/24
95.135.230.0/24
95.135.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d4:74:93:27:da:ea:47:36:63:a0:8a:0d:26:c0:88:7b:26:
7a:0d:25:db:e7:e8:3e:9e:5d:33:3d:0e:f8:e6:e9:7e:61:bb:
f4:04:a2:1a:7a:ff:fa:1e:d2:e4:bd:73:2f:a4:a9:f6:8f:7f:
44:eb:b0:ff:c1:b3:8d:95:4f:ef:71:9c:02:f9:e2:cf:37:a3:
20:c4:4b:66:8e:e8:cf:3d:b8:5b:62:75:ce:18:ec:80:37:37:
f4:1f:af:86:8f:47:37:de:f5:05:50:58:e3:c4:ec:72:e6:ed:
a4:7d:ec:9e:af:03:cc:43:5f:c6:2a:41:59:63:78:b6:ba:d1:
ea:23:ee:fd:70:b9:a9:d3:2a:9f:96:09:53:93:e2:61:57:2f:
00:21:75:eb:63:ca:e8:9e:dc:03:cc:f3:b4:7c:5c:e7:00:b2:
c5:4d:6b:d8:5d:60:a7:ff:a7:64:92:a0:97:f4:54:50:98:fc:
8b:3a:ac:60:c0:c4:df:fc:b3:77:a7:5d:77:45:36:72:c9:20:
31:5e:65:68:df:5d:56:3a:d9:c1:a2:18:d5:f5:24:ea:69:06:
b2:e1:1d:40:5f:92:ac:0e:06:d7:0e:a4:92:c2:ae:76:3f:92:
db:99:d3:98:c1:4a:65:9c:b5:46:d2:6d:7b:1a:0f:34:5b:d8:
81:cc:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:29:12 2025 by rpki-client