Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          IS1T1vNR6wdm23Sos2WrJLpY3hwh5fWY0YgZnCbx+zM=
Subject key identifier:   BA:75:5A:BC:B8:D3:E2:84:3C:70:2B:E2:7C:CE:18:A7:F7:05:16:66
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       6D675CAF0A14D09F7F27E6EC7248E66635EFF859
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
Signing time:             Sat 29 Mar 2025 10:17:35 +0000
ROA not before:           Sat 29 Mar 2025 10:12:35 +0000
ROA not after:            Sat 28 Mar 2026 10:17:35 +0000
asID:                     834
IP address blocks:        46.202.35.0/24 maxlen: 24
                          46.202.61.0/24 maxlen: 24
                          46.202.66.0/24 maxlen: 24
                          46.202.70.0/24 maxlen: 24
                          46.202.75.0/24 maxlen: 24
                          46.203.107.0/24 maxlen: 24
                          46.203.112.0/24 maxlen: 24
                          46.203.114.0/24 maxlen: 24
                          46.203.148.0/24 maxlen: 24
                          46.203.151.0/24 maxlen: 24
                          46.203.168.0/22 maxlen: 24
                          46.203.173.0/24 maxlen: 24
                          46.203.174.0/23 maxlen: 24
                          46.203.177.0/24 maxlen: 24
                          46.203.178.0/23 maxlen: 24
                          46.203.180.0/22 maxlen: 24
                          46.203.187.0/24 maxlen: 24
                          46.203.208.0/24 maxlen: 24
                          91.124.17.0/24 maxlen: 24
                          91.124.19.0/24 maxlen: 24
                          91.124.34.0/24 maxlen: 24
                          91.124.38.0/24 maxlen: 24
                          91.124.40.0/21 maxlen: 24
                          91.124.116.0/24 maxlen: 24
                          91.124.118.0/24 maxlen: 24
                          91.124.168.0/23 maxlen: 24
                          91.124.201.0/24 maxlen: 24
                          91.124.207.0/24 maxlen: 24
                          92.112.5.0/24 maxlen: 24
                          92.112.6.0/23 maxlen: 24
                          92.112.9.0/24 maxlen: 24
                          92.112.48.0/23 maxlen: 24
                          92.112.89.0/24 maxlen: 24
                          92.112.106.0/23 maxlen: 24
                          92.112.131.0/24 maxlen: 24
                          92.112.142.0/24 maxlen: 24
                          92.112.147.0/24 maxlen: 24
                          92.112.158.0/24 maxlen: 24
                          92.113.10.0/24 maxlen: 24
                          92.113.14.0/24 maxlen: 24
                          92.113.46.0/23 maxlen: 24
                          92.113.48.0/24 maxlen: 24
                          92.113.100.0/24 maxlen: 24
                          92.113.227.0/24 maxlen: 24
                          95.134.0.0/22 maxlen: 24
                          95.134.4.0/23 maxlen: 24
                          95.134.6.0/24 maxlen: 24
                          95.134.16.0/21 maxlen: 24
                          95.134.28.0/22 maxlen: 24
                          95.134.32.0/22 maxlen: 24
                          95.134.40.0/22 maxlen: 24
                          95.134.48.0/21 maxlen: 24
                          95.134.60.0/22 maxlen: 24
                          95.134.64.0/21 maxlen: 24
                          95.134.76.0/23 maxlen: 24
                          95.134.78.0/24 maxlen: 24
                          95.134.86.0/23 maxlen: 24
                          95.134.89.0/24 maxlen: 24
                          95.134.90.0/23 maxlen: 24
                          95.134.92.0/23 maxlen: 24
                          95.134.94.0/24 maxlen: 24
                          95.134.96.0/19 maxlen: 24
                          95.134.129.0/24 maxlen: 24
                          95.134.130.0/24 maxlen: 24
                          95.134.132.0/23 maxlen: 24
                          95.134.135.0/24 maxlen: 24
                          95.134.136.0/21 maxlen: 24
                          95.134.149.0/24 maxlen: 24
                          95.134.152.0/21 maxlen: 24
                          95.134.160.0/20 maxlen: 24
                          95.134.176.0/22 maxlen: 24
                          95.134.182.0/23 maxlen: 24
                          95.134.184.0/22 maxlen: 24
                          95.134.192.0/20 maxlen: 24
                          95.134.212.0/22 maxlen: 24
                          95.134.220.0/22 maxlen: 24
                          95.135.39.0/24 maxlen: 24
                          95.135.40.0/23 maxlen: 24
                          95.135.50.0/24 maxlen: 24
                          95.135.52.0/23 maxlen: 24
                          95.135.56.0/23 maxlen: 24
                          95.135.59.0/24 maxlen: 24
                          95.135.61.0/24 maxlen: 24
                          95.135.70.0/24 maxlen: 24
                          95.135.72.0/24 maxlen: 24
                          95.135.76.0/22 maxlen: 24
                          95.135.82.0/23 maxlen: 24
                          95.135.84.0/23 maxlen: 24
                          95.135.94.0/23 maxlen: 24
                          95.135.101.0/24 maxlen: 24
                          95.135.105.0/24 maxlen: 24
                          95.135.106.0/23 maxlen: 24
                          95.135.108.0/23 maxlen: 24
                          95.135.110.0/24 maxlen: 24
                          95.135.116.0/23 maxlen: 24
                          95.135.118.0/24 maxlen: 24
                          95.135.124.0/23 maxlen: 24
                          95.135.127.0/24 maxlen: 24
                          95.135.132.0/23 maxlen: 24
                          95.135.134.0/24 maxlen: 24
                          95.135.137.0/24 maxlen: 24
                          95.135.139.0/24 maxlen: 24
                          95.135.140.0/23 maxlen: 24
                          95.135.144.0/24 maxlen: 24
                          95.135.191.0/24 maxlen: 24
                          95.135.253.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:67:5c:af:0a:14:d0:9f:7f:27:e6:ec:72:48:e6:66:35:ef:f8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Mar 29 10:12:35 2025 GMT
            Not After : Mar 28 10:17:35 2026 GMT
        Subject: CN=BA755ABCB8D3E2843C702BE27CCE18A7F7051666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:5e:02:b5:0a:86:6f:fd:0a:39:7d:80:82:
                    fa:64:62:ec:c2:14:ad:b4:07:8f:43:66:30:74:3f:
                    b6:60:e6:25:20:5e:37:67:b1:fb:c8:b5:c3:70:c9:
                    df:7a:ab:07:47:f3:50:87:2f:08:18:96:32:0a:3a:
                    8b:76:89:d3:61:a0:b5:ee:af:26:a2:a2:4d:5b:55:
                    a0:28:35:07:9e:3a:03:59:7f:d2:bf:78:78:a9:b2:
                    8f:d1:a0:b0:59:27:01:0f:3c:f2:1f:15:46:d1:2d:
                    46:42:e9:b5:31:b1:1e:90:cb:e1:99:ab:e0:ef:68:
                    13:21:83:a0:d6:6f:f4:6f:8f:2d:67:3b:30:79:58:
                    e6:24:b4:e0:f4:cc:0e:c2:4b:51:93:1e:5b:0a:f9:
                    5b:c5:c5:ff:6f:a1:12:d2:7a:c3:89:a6:1d:a3:dd:
                    fd:9e:70:52:3a:dc:8d:2c:6f:aa:cf:ea:8e:57:22:
                    ea:0f:a7:ce:7e:da:74:9d:60:e7:4c:46:f9:f3:bc:
                    b3:d9:dc:8d:1e:78:7f:3d:d5:13:f2:7a:3a:18:0b:
                    3e:e3:35:cb:74:87:97:a6:04:3a:74:8c:74:d8:4b:
                    eb:e2:3b:57:5d:13:6b:1b:f7:9a:e2:9d:3e:2e:a8:
                    60:99:d2:72:e2:a1:7d:36:6e:8f:0d:21:46:ec:4a:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:5A:BC:B8:D3:E2:84:3C:70:2B:E2:7C:CE:18:A7:F7:05:16:66
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.35.0/24
                  46.202.61.0/24
                  46.202.66.0/24
                  46.202.70.0/24
                  46.202.75.0/24
                  46.203.107.0/24
                  46.203.112.0/24
                  46.203.114.0/24
                  46.203.148.0/24
                  46.203.151.0/24
                  46.203.168.0/22
                  46.203.173.0-46.203.175.255
                  46.203.177.0-46.203.183.255
                  46.203.187.0/24
                  46.203.208.0/24
                  91.124.17.0/24
                  91.124.19.0/24
                  91.124.34.0/24
                  91.124.38.0/24
                  91.124.40.0/21
                  91.124.116.0/24
                  91.124.118.0/24
                  91.124.168.0/23
                  91.124.201.0/24
                  91.124.207.0/24
                  92.112.5.0-92.112.7.255
                  92.112.9.0/24
                  92.112.48.0/23
                  92.112.89.0/24
                  92.112.106.0/23
                  92.112.131.0/24
                  92.112.142.0/24
                  92.112.147.0/24
                  92.112.158.0/24
                  92.113.10.0/24
                  92.113.14.0/24
                  92.113.46.0-92.113.48.255
                  92.113.100.0/24
                  92.113.227.0/24
                  95.134.0.0-95.134.6.255
                  95.134.16.0/21
                  95.134.28.0-95.134.35.255
                  95.134.40.0/22
                  95.134.48.0/21
                  95.134.60.0-95.134.71.255
                  95.134.76.0-95.134.78.255
                  95.134.86.0/23
                  95.134.89.0-95.134.94.255
                  95.134.96.0/19
                  95.134.129.0-95.134.130.255
                  95.134.132.0/23
                  95.134.135.0-95.134.143.255
                  95.134.149.0/24
                  95.134.152.0-95.134.179.255
                  95.134.182.0-95.134.187.255
                  95.134.192.0/20
                  95.134.212.0/22
                  95.134.220.0/22
                  95.135.39.0-95.135.41.255
                  95.135.50.0/24
                  95.135.52.0/23
                  95.135.56.0/23
                  95.135.59.0/24
                  95.135.61.0/24
                  95.135.70.0/24
                  95.135.72.0/24
                  95.135.76.0/22
                  95.135.82.0-95.135.85.255
                  95.135.94.0/23
                  95.135.101.0/24
                  95.135.105.0-95.135.110.255
                  95.135.116.0-95.135.118.255
                  95.135.124.0/23
                  95.135.127.0/24
                  95.135.132.0-95.135.134.255
                  95.135.137.0/24
                  95.135.139.0-95.135.141.255
                  95.135.144.0/24
                  95.135.191.0/24
                  95.135.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:39:44:49:7a:63:15:05:89:fc:10:ad:f7:e3:18:dc:76:e3:
         bf:e6:bd:51:99:79:61:9d:c3:cc:16:f9:02:e1:0d:d9:65:72:
         d1:94:e0:18:28:c4:f9:30:99:54:76:1c:71:42:05:89:12:d4:
         4a:7d:e8:8d:dd:59:2a:29:f2:8a:13:79:b2:c2:7a:1f:17:89:
         8b:e6:9c:f3:17:ad:13:fe:c6:ee:69:6e:62:2f:24:c5:42:53:
         ea:4c:c9:de:c7:7d:c1:e1:83:3a:25:2f:15:73:e7:46:b5:ff:
         00:19:6a:9e:49:68:71:e0:aa:e9:54:6d:a0:47:92:49:c6:0b:
         34:3c:8c:aa:50:39:fc:73:81:5b:35:88:6d:74:f2:58:50:c4:
         34:b0:de:3c:a7:a5:8c:92:90:10:77:8b:07:69:13:bc:18:a8:
         3e:ed:ec:f8:1a:41:95:d0:08:65:bb:f5:fd:3d:df:54:a8:c0:
         c6:4e:6a:98:4b:b6:21:bf:96:5f:de:ae:1b:29:bb:49:b4:d0:
         5d:2f:73:55:7c:55:01:7f:9e:b0:d0:49:06:9e:33:20:8e:d6:
         ec:4e:0b:1b:ee:e5:09:46:2b:99:db:66:ff:09:44:ab:f8:b3:
         31:0c:c3:85:a6:b1:cd:26:ce:8d:c7:35:50:36:a3:12:bd:04:
         5d:31:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:43:13 2025 by rpki-client