Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/KazKYiwx7c2SZIPxflACoikB3xA.roa
File: KazKYiwx7c2SZIPxflACoikB3xA.roa (raw, json)
Hash identifier: PnHWweKzRoOgyzNT3qH+waADc7wkuG2FOMK70hFqxLo=
Subject key identifier: 29:AC:CA:62:2C:31:ED:CD:92:64:83:F1:7E:50:02:A2:29:01:DF:10
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 01856ED4BCD8B107C5AE3F332725F660F0A6
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/KazKYiwx7c2SZIPxflACoikB3xA.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 193.142.36.0/22 maxlen: 24
91.132.124.0/23 maxlen: 23
212.87.216.0/24 maxlen: 24
212.87.219.0/24 maxlen: 24
212.87.218.0/24 maxlen: 24
93.177.94.0/23 maxlen: 24
93.177.94.0/24 maxlen: 24
93.177.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bc:d8:b1:07:c5:ae:3f:33:27:25:f6:60:f0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29acca622c31edcd926483f17e5002a22901df10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:e4:3a:40:54:4e:61:54:25:7b:85:92:7a:
e4:5b:c3:7b:d9:bd:49:8d:bc:53:37:68:77:f5:3e:
a2:47:9d:08:16:86:86:fb:fc:75:5b:53:43:54:77:
71:4a:75:ab:31:00:79:0c:0b:21:14:36:2d:7e:31:
e5:a0:14:dc:0f:41:6e:a6:6f:24:25:f6:59:47:85:
56:b4:4d:56:5f:da:e3:1a:9e:2a:db:6b:6a:a9:6a:
e4:fa:ac:af:e9:b7:62:33:67:57:32:e9:ac:5f:50:
0b:f2:3a:46:55:27:04:39:6d:d6:e0:25:8b:9c:25:
43:d5:39:9d:8d:87:37:cf:7b:42:47:12:da:79:83:
48:be:58:11:54:35:24:84:5d:30:51:47:08:85:ad:
3f:25:92:31:07:5c:e0:f4:47:27:60:43:2f:7e:81:
3c:fd:3c:b3:2a:a3:50:a1:83:cf:74:ea:d4:42:76:
07:3f:ad:4b:35:d9:a2:bc:c6:c7:18:c1:fe:8a:fd:
4c:dd:47:dd:a5:cd:81:35:c0:98:71:fb:df:73:30:
62:9a:95:9b:ea:aa:1d:3b:a7:c4:8a:33:ea:08:2a:
82:80:fa:c1:82:db:24:ca:06:74:ec:28:e9:95:18:
e4:0f:09:43:ab:88:69:e9:65:5e:45:b1:4a:54:95:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AC:CA:62:2C:31:ED:CD:92:64:83:F1:7E:50:02:A2:29:01:DF:10
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/KazKYiwx7c2SZIPxflACoikB3xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.124.0/23
93.177.94.0/23
193.142.36.0/22
212.87.216.0/24
212.87.218.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:1c:3b:5a:61:ca:5d:60:ed:6b:24:a6:a6:1e:98:b0:10:d9:
87:a3:13:a4:87:fa:f1:f0:91:c6:d9:b2:08:0f:7c:ef:17:42:
5d:93:1c:39:b8:4a:07:01:fa:c9:51:ce:42:73:8d:1e:8f:81:
2c:18:c0:ab:78:2c:34:4c:e6:0d:a1:68:fa:11:c6:fd:12:8f:
b0:73:d4:df:f1:c5:f1:d9:f5:bf:56:b6:2f:38:f9:ee:b5:ed:
5d:20:b8:02:87:b7:21:cb:9f:3a:92:3d:3b:b7:e2:87:c3:08:
ab:67:9b:4f:f9:e6:da:56:be:7f:6b:04:64:ec:08:a3:73:00:
43:cd:79:6a:31:e5:03:08:0f:87:18:e0:75:b6:d0:fc:81:0a:
8c:77:08:36:18:3d:4f:fb:6a:d1:4a:fb:5f:f8:97:a0:72:26:
8d:94:b5:2a:59:13:34:8e:0f:5d:f3:bb:30:02:18:b7:af:7b:
67:76:a1:df:f6:34:4e:46:a0:8e:cb:c0:6d:08:2a:ef:e1:f9:
aa:7d:71:77:31:d7:3e:0d:1f:89:15:47:ce:15:71:61:3e:0a:
18:1c:46:93:1f:48:22:a2:d4:ae:73:45:2e:cf:94:e3:cc:17:
46:a7:8c:1d:6e:f5:6f:72:10:60:86:d6:24:40:41:d2:0b:f8:
e9:83:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:32:37 2025 by rpki-client