Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/6d09b3-3890-4424-9a1c-bbff55c4a341/1/KqfXcEOWV3LMgRa30ugutBXOeSc.roa
File: KqfXcEOWV3LMgRa30ugutBXOeSc.roa (raw, json)
Hash identifier: DUQcfu5E5h8pDgITTvgRShcFEvhe+eiaeKSDna5b7K8=
Subject key identifier: 2A:A7:D7:70:43:96:57:72:CC:81:16:B7:D2:E8:2E:B4:15:CE:79:27
Certificate issuer: /CN=708b04c13e439101dc4fa7bf7827b46ac9a83695
Certificate serial: 09E97B60
Authority key identifier: 70:8B:04:C1:3E:43:91:01:DC:4F:A7:BF:78:27:B4:6A:C9:A8:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIsEwT5DkQHcT6e_eCe0asmoNpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/6d09b3-3890-4424-9a1c-bbff55c4a341/1/KqfXcEOWV3LMgRa30ugutBXOeSc.roa
Signing time: Sat 01 Jan 2022 12:57:40 +0000
ROA not before: Sat 01 Jan 2022 12:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200780
IP address blocks: 93.177.69.0/24 maxlen: 24
93.177.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166296416 (0x9e97b60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708b04c13e439101dc4fa7bf7827b46ac9a83695
Validity
Not Before: Jan 1 12:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2aa7d77043965772cc8116b7d2e82eb415ce7927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:78:a9:5a:7d:9b:15:e9:65:76:8e:0a:6b:
7d:da:87:30:1b:f4:bd:2d:2d:0d:d7:82:75:ee:d6:
56:a3:2f:6e:8a:1a:a9:30:2f:e4:e7:ac:79:cf:68:
a5:16:3e:16:f5:37:30:88:c5:78:5c:b4:c5:20:66:
f1:72:ec:34:74:1f:5e:ac:85:e6:b8:09:d7:f9:be:
47:e5:11:8c:dc:03:0f:27:93:f1:7d:8a:fd:f1:5e:
97:16:56:a3:df:b4:c5:7e:c1:44:58:67:61:f9:35:
06:bf:02:7d:eb:b9:b7:f5:09:e3:63:a7:ff:e8:05:
e7:ed:57:3a:4c:31:b6:a4:56:cc:0e:a3:cb:9f:3d:
46:c4:13:46:6b:2f:f6:b2:79:bb:cd:2e:37:ab:cb:
41:b6:bb:05:bc:a6:32:e0:57:4b:a2:ec:d1:7f:0a:
1e:b7:d9:39:e5:e6:ab:8b:74:4e:86:c8:af:09:92:
f5:4b:09:ee:c7:80:b4:94:d2:7e:42:2d:6e:69:f6:
07:b0:3e:75:3d:f5:e8:50:9a:c4:87:85:90:11:61:
92:6f:97:a1:82:dc:7b:07:bc:2b:2b:b9:16:72:f6:
5d:dd:36:c6:d7:36:9a:28:16:7d:16:ba:49:44:b7:
f4:4a:69:f9:f7:3c:3f:6e:f1:be:86:51:04:6f:c7:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A7:D7:70:43:96:57:72:CC:81:16:B7:D2:E8:2E:B4:15:CE:79:27
X509v3 Authority Key Identifier:
keyid:70:8B:04:C1:3E:43:91:01:DC:4F:A7:BF:78:27:B4:6A:C9:A8:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIsEwT5DkQHcT6e_eCe0asmoNpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/6d09b3-3890-4424-9a1c-bbff55c4a341/1/KqfXcEOWV3LMgRa30ugutBXOeSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/6d09b3-3890-4424-9a1c-bbff55c4a341/1/cIsEwT5DkQHcT6e_eCe0asmoNpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.69.0-93.177.71.255
Signature Algorithm: sha256WithRSAEncryption
1f:e9:8a:40:f4:7c:6c:62:81:55:33:1a:b8:15:87:d9:89:4a:
e0:b0:d6:1a:44:24:5b:20:36:66:e9:ca:61:a9:23:34:67:85:
f8:a9:5c:b1:14:01:42:02:a9:27:3d:95:08:fb:3c:b0:da:04:
55:26:2c:18:1b:07:19:e1:20:b3:43:f5:c2:8a:32:01:86:85:
89:a8:b7:94:30:86:6f:40:fd:91:35:19:2e:bb:7f:dc:13:37:
68:72:55:2b:3e:e0:26:25:5c:84:af:06:62:e2:20:e3:22:3a:
c7:bc:14:8f:33:9e:79:a8:bd:a5:7f:78:da:9b:89:80:02:27:
53:b8:0c:1f:9e:04:cf:e8:32:8a:9f:f5:c8:8f:57:92:66:8d:
58:c2:da:77:a3:e8:4b:97:c5:30:6f:27:36:23:ed:6f:1f:17:
88:4d:1c:64:df:6d:d3:37:43:34:dc:67:bd:4a:a8:a3:34:f4:
bd:ad:42:72:2f:c0:d2:a3:84:8d:f2:7d:25:22:6c:13:cc:03:
df:d1:ab:bc:8f:10:f8:aa:6e:30:6b:c1:25:e6:e3:a3:66:f7:
88:0a:49:27:ce:62:d1:46:24:d3:80:d3:65:38:a0:e8:58:40:
a3:06:e7:5e:8e:d6:f3:a5:77:04:63:d1:cf:ee:5f:70:e4:2a:
08:14:b8:fb
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIECel7YDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MDhiMDRjMTNlNDM5MTAxZGM0ZmE3YmY3ODI3YjQ2YWM5YTgzNjk1MB4XDTIyMDEw
MTEyNTc0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmFhN2Q3NzA0Mzk2
NTc3MmNjODExNmI3ZDJlODJlYjQxNWNlNzkyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALoNeKlafZsV6WV2jgprfdqHMBv0vS0tDdeCde7WVqMvbooa
qTAv5Oesec9opRY+FvU3MIjFeFy0xSBm8XLsNHQfXqyF5rgJ1/m+R+URjNwDDyeT
8X2K/fFelxZWo9+0xX7BRFhnYfk1Br8Cfeu5t/UJ42On/+gF5+1XOkwxtqRWzA6j
y589RsQTRmsv9rJ5u80uN6vLQba7BbymMuBXS6Ls0X8KHrfZOeXmq4t0TobIrwmS
9UsJ7seAtJTSfkItbmn2B7A+dT316FCaxIeFkBFhkm+XoYLcewe8Kyu5FnL2Xd02
xtc2migWfRa6SUS39Epp+fc8P27xvoZRBG/HfmcCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQqp9dwQ5ZXcsyBFrfS6C60Fc55JzAfBgNVHSMEGDAWgBRwiwTBPkORAdxP
p794J7Rqyag2lTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NJc0V3VDVEa1FIY1Q2ZV9lQ2UwYXNtb05wVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNmQwOWIzLTM4OTAtNDQyNC05YTFjLWJiZmY1NWM0YTM0MS8x
L0txZlhjRU9XVjNMTWdSYTMwdWd1dEJYT2VTYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NmQwOWIzLTM4OTAtNDQyNC05YTFjLWJiZmY1NWM0YTM0MS8xL2NJc0V3VDVEa1FI
Y1Q2ZV9lQ2UwYXNtb05wVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAXbFFAwQDXbFAMA0GCSqGSIb3
DQEBCwUAA4IBAQAf6YpA9HxsYoFVMxq4FYfZiUrgsNYaRCRbIDZm6cphqSM0Z4X4
qVyxFAFCAqknPZUI+zyw2gRVJiwYGwcZ4SCzQ/XCijIBhoWJqLeUMIZvQP2RNRku
u3/cEzdoclUrPuAmJVyErwZi4iDjIjrHvBSPM555qL2lf3jam4mAAidTuAwfngTP
6DKKn/XIj1eSZo1Ywtp3o+hLl8Uwbyc2I+1vHxeITRxk323TN0M03Ge9SqijNPS9
rUJyL8DSo4SN8n0lImwTzAPf0au8jxD4qm4wa8El5uOjZveICkknzmLRRiTTgNNl
OKDoWECjBudejtbzpXcEY9HP7l9w5CoIFLj7
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:58 2025 by rpki-client