Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/pvLMo_kSAO13mthbJ2YMm8-J22c.roa
File: pvLMo_kSAO13mthbJ2YMm8-J22c.roa (raw, json)
Hash identifier: uDY4Rng+np605c3pcKEbQ6qHjAVlleCUaguv4CKNY+0=
Subject key identifier: A6:F2:CC:A3:F9:12:00:ED:77:9A:D8:5B:27:66:0C:9B:CF:89:DB:67
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019613F55F73B2F737C4D0224808A4A2C5E0
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/pvLMo_kSAO13mthbJ2YMm8-J22c.roa
Signing time: Tue 08 Apr 2025 05:52:49 +0000
ROA not before: Tue 08 Apr 2025 05:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 5.8.66.0/23 maxlen: 23
5.101.92.0/22 maxlen: 22
5.188.10.0/23 maxlen: 23
5.188.48.0/23 maxlen: 23
5.188.60.0/23 maxlen: 23
46.161.26.0/24 maxlen: 24
46.161.41.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:f5:5f:73:b2:f7:37:c4:d0:22:48:08:a4:a2:c5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 8 05:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6f2cca3f91200ed779ad85b27660c9bcf89db67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:9e:31:db:b6:ce:08:83:5d:13:dc:4c:10:
6d:d9:47:bd:b7:cb:1c:dc:17:0d:64:15:88:7b:cb:
b2:19:2c:30:64:d1:4b:5a:ac:c1:a8:a1:ce:b1:cf:
07:ab:da:09:4b:f2:65:7d:e9:45:00:89:b7:72:fc:
a3:28:cc:f9:d6:5e:73:e2:a7:f3:24:7b:ac:b1:af:
bd:5c:c6:13:38:9f:0c:a1:56:e8:7b:64:5f:2a:8c:
d1:56:79:22:7b:1f:82:3a:9d:34:82:a1:ca:75:18:
59:2a:1d:e3:72:c2:7a:21:e2:ed:35:be:3f:92:3e:
5f:dd:a6:0c:29:c1:1f:ec:94:56:ec:d6:b9:3e:69:
c9:46:f6:1e:26:18:b9:c0:dc:ae:6a:e7:38:8b:86:
9a:6e:1b:d1:f9:06:28:cd:61:2f:b0:73:15:c6:fc:
2c:53:6a:9e:b2:e9:76:76:c2:bd:03:c4:7a:1c:e3:
35:ec:88:24:da:e3:25:02:b6:93:86:db:96:2f:52:
3d:be:b2:7e:3d:43:b9:ed:45:50:9e:ab:8f:bd:17:
2a:cd:5b:55:a2:35:5c:1d:2a:82:c7:ff:e8:18:91:
43:54:dd:68:16:91:cb:51:f5:01:c9:d8:f8:85:60:
b0:d5:74:e6:34:5f:ac:7b:61:4e:d7:d9:5d:60:0f:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F2:CC:A3:F9:12:00:ED:77:9A:D8:5B:27:66:0C:9B:CF:89:DB:67
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/pvLMo_kSAO13mthbJ2YMm8-J22c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.66.0/23
5.101.92.0/22
5.188.10.0/23
5.188.48.0/23
5.188.60.0/23
46.161.26.0/24
46.161.41.0/24
91.243.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:48:91:39:68:db:cf:da:2d:b6:ac:f9:5a:a7:b5:26:b7:61:
de:07:f3:3e:83:3c:c1:59:e7:2a:b3:b9:27:04:0f:f1:6b:12:
fd:86:c8:9d:04:9e:0d:a3:15:8a:5e:21:74:1d:b1:4b:59:6f:
08:24:43:1c:05:11:32:9e:2d:88:0d:e3:f3:d2:23:d6:6a:9f:
d2:01:20:95:85:46:11:ec:be:71:ba:db:96:13:39:ad:10:1e:
3d:00:a5:6e:0b:38:84:25:e2:84:1c:93:b4:16:3c:bf:7e:60:
f0:07:bb:b4:23:df:c4:91:e3:eb:32:4a:cc:49:02:19:b4:11:
16:c3:86:e2:4f:4a:ea:ac:e1:57:74:53:45:4a:72:b1:2f:b9:
8c:fc:f5:88:ad:f8:4d:01:64:6a:f6:2e:b8:d7:dd:4e:2f:10:
65:b4:6a:30:91:ae:e8:fb:80:8d:03:f3:ee:b1:ef:44:29:48:
45:5b:5a:0a:14:67:0e:11:0b:04:d7:c3:d5:2f:8a:82:9a:76:
1e:32:44:19:f2:1c:ac:a4:04:dc:30:35:36:3b:81:22:13:2e:
45:f6:e0:eb:3e:ce:53:ce:ce:b5:44:2a:e0:64:5b:45:0f:92:
69:9c:17:f7:ba:de:9d:99:f3:4e:e2:ec:b4:e5:ad:ef:37:aa:
f6:a0:b0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net