Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kz-BuspR3XAJQcPUOg1-WlyjYz0.roa
File: kz-BuspR3XAJQcPUOg1-WlyjYz0.roa (raw, json)
Hash identifier: fFjvzVGd7dx5j6hqfA8hSSkWKoal4HyJDu3ThZt/WeI=
Subject key identifier: 93:3F:81:BA:CA:51:DD:70:09:41:C3:D4:3A:0D:7E:5A:5C:A3:63:3D
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 093C14AE
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kz-BuspR3XAJQcPUOg1-WlyjYz0.roa
Signing time: Mon 31 Jan 2022 19:12:25 +0000
ROA not before: Mon 31 Jan 2022 19:12:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
89.116.52.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.72.0/22 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
89.116.242.0/23 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.212.0/22 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154932398 (0x93c14ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jan 31 19:12:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=933f81baca51dd700941c3d43a0d7e5a5ca3633d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:5e:c3:b6:b0:0b:ad:ca:87:cb:3f:4a:4c:
80:1b:eb:08:1c:e0:13:80:d7:34:b3:1f:b9:e8:0f:
5c:a6:fe:bb:a2:00:35:e1:af:85:50:4b:92:ca:37:
cf:e2:94:05:a4:50:4a:f4:9e:15:5e:99:ae:42:94:
4b:1d:2a:b6:b9:ac:81:53:0f:75:a5:7b:6e:1f:65:
27:f3:05:7c:ee:0d:60:9d:e1:99:3e:52:0d:97:d9:
ad:c0:ed:03:08:f4:c5:13:01:61:26:26:16:8b:c9:
fe:9e:87:0a:a0:f5:15:4b:c2:50:8f:b9:dc:71:a2:
93:78:17:08:1a:43:06:e9:8e:98:db:93:9a:81:0a:
8f:d3:51:f7:4a:7c:5f:d5:2f:d7:80:66:a5:e6:14:
b5:18:33:57:b5:7a:7c:45:74:0b:4f:5b:59:04:46:
13:98:ca:2a:6b:ff:c1:cc:30:98:54:76:8f:68:be:
67:95:da:8e:7b:d7:49:04:85:48:6a:fc:d4:01:b4:
aa:0d:ec:11:e6:e8:c1:ca:1b:b5:4f:71:f8:59:86:
42:13:20:5c:bc:53:7c:88:7a:91:aa:9a:af:5e:6d:
33:08:55:54:a7:db:6c:d1:56:a5:b8:d1:7a:0d:3c:
35:64:e7:84:a3:58:bc:06:35:6b:9d:ff:ea:cb:de:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3F:81:BA:CA:51:DD:70:09:41:C3:D4:3A:0D:7E:5A:5C:A3:63:3D
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kz-BuspR3XAJQcPUOg1-WlyjYz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.182.0/23
86.38.202.0/23
86.38.246.0/23
89.116.52.0/23
89.116.58.0/23
89.116.68.0/23
89.116.72.0/22
89.116.88.0/23
89.116.106.0/23
89.116.126.0/23
89.116.130.0/23
89.116.146.0-89.116.149.255
89.116.164.0/23
89.116.172.0/23
89.116.180.0-89.116.185.255
89.116.210.0-89.116.215.255
89.116.242.0/23
89.116.246.0/23
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0/22
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.112.0-89.117.117.255
89.117.132.0/22
89.117.142.0/23
89.117.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:63:f4:14:75:e3:18:60:68:d8:ef:c5:40:4e:bb:d1:89:80:
20:93:33:38:f8:df:58:d9:7d:cb:b4:af:7d:4a:c7:e6:4d:42:
89:ed:3e:f4:9c:10:bb:d9:8c:a9:1c:39:d1:ba:73:05:3d:60:
d4:08:2b:26:da:85:99:b3:32:0b:bc:c3:40:4a:51:75:fe:94:
25:1d:32:0c:4a:1b:42:39:4f:00:22:99:ae:f3:8f:36:37:c7:
ea:e3:95:ac:b1:37:7a:36:43:ed:93:f6:65:02:05:20:72:1e:
e3:50:92:2c:d4:45:6e:7d:81:0d:bb:c8:3d:b4:b7:a2:3f:6e:
dd:43:8a:92:fe:6d:93:13:fc:b5:8e:06:8d:fd:8a:bb:b5:aa:
bb:35:2e:8e:22:60:c2:15:de:49:4b:41:f4:db:06:72:5f:ff:
17:da:45:9f:14:c3:ec:6f:5c:a6:7b:c4:f1:a7:56:e8:c4:af:
74:31:90:f7:26:08:15:aa:bf:97:a5:01:03:90:a6:3e:8b:e9:
a4:d4:33:5c:58:fc:45:77:59:19:38:ff:5b:ec:97:7f:71:98:
3a:0c:aa:69:77:d7:5d:f5:a5:88:ad:4e:88:8e:1d:96:75:70:
ea:54:58:ae:74:40:47:9f:25:13:8f:d9:7e:4b:e6:20:01:4d:
ef:1b:fe:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org