Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6BR-nohERPJQHb9sq6ONG5s0o2E.roa
File: 6BR-nohERPJQHb9sq6ONG5s0o2E.roa (raw, json)
Hash identifier: EetJD3q84rG12CEQZVm21FHPuW+12xlR+263y5wPND0=
Subject key identifier: E8:14:7E:9E:88:44:44:F2:50:1D:BF:6C:AB:A3:8D:1B:9B:34:A3:61
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01942747385177A8F8D34E8DC78C95DE3469
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6BR-nohERPJQHb9sq6ONG5s0o2E.roa
Signing time: Thu 02 Jan 2025 13:49:26 +0000
ROA not before: Thu 02 Jan 2025 13:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213257
IP address blocks: 109.236.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:38:51:77:a8:f8:d3:4e:8d:c7:8c:95:de:34:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8147e9e884444f2501dbf6caba38d1b9b34a361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:ef:da:b1:1c:b1:a3:dd:bc:c9:71:ba:9b:
2a:1a:4e:dc:19:42:02:4c:a5:2f:c4:f8:91:9b:af:
cc:1f:14:e2:d1:d3:86:48:ab:ef:c3:e9:08:b3:35:
30:c6:6e:5d:28:56:3e:9a:b1:81:80:27:9a:9c:9c:
9e:e8:f9:b5:4f:88:9f:ea:30:98:ac:00:77:03:d5:
6c:eb:33:78:e3:2c:0f:90:42:9c:27:99:f1:c1:06:
96:31:23:06:2b:4c:cc:c6:52:0e:97:94:1b:c0:01:
aa:bd:cc:69:88:60:5b:0c:60:13:9d:60:c9:80:90:
ad:fd:10:55:33:f6:37:e8:b9:9b:1e:8c:cb:05:86:
36:d2:eb:b3:bc:72:e8:5a:1f:a8:37:81:d3:8c:14:
ee:50:d8:fa:d9:01:f0:4d:d3:93:88:d8:d3:60:3f:
f1:46:20:30:8b:6b:80:fe:b1:7e:16:c5:1c:87:71:
10:f2:cf:be:e3:a5:36:02:8a:c7:9c:fa:3c:19:72:
70:01:32:f5:f6:7f:2f:3d:54:27:44:fe:4c:1d:10:
ba:00:dd:a0:4b:2b:38:4b:b7:b7:a0:8a:2b:69:5c:
33:5a:80:79:a5:09:09:fa:08:b6:d0:d8:ab:b3:60:
05:74:d8:05:29:ee:df:cd:91:fa:cf:79:3a:f9:eb:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:14:7E:9E:88:44:44:F2:50:1D:BF:6C:AB:A3:8D:1B:9B:34:A3:61
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6BR-nohERPJQHb9sq6ONG5s0o2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d8:72:66:8d:8f:b5:ef:d3:92:d4:df:7f:4b:77:e5:34:db:
f9:e6:aa:c0:bd:68:33:41:16:a5:2a:0b:77:13:ea:22:0c:6f:
c4:5c:8b:4b:01:ca:97:57:5a:6c:72:23:c3:0d:2c:5f:eb:ea:
fc:91:78:7d:e2:13:65:c1:ea:32:75:fb:c6:68:7d:46:0a:65:
8a:b8:69:5d:3b:22:6b:17:7b:b4:66:ef:e0:c7:30:73:7e:09:
97:a2:93:aa:5c:4b:55:10:dc:4a:3c:51:36:b0:6d:05:33:26:
7b:61:c9:42:80:07:13:24:3a:79:ca:7a:b0:6a:d9:8e:a7:64:
82:75:42:50:be:f4:06:c8:9f:25:68:b1:e3:2c:7c:ee:ac:7c:
40:e8:a0:fc:9b:96:e3:04:5f:0b:8c:eb:a0:33:51:31:05:9e:
38:4f:9d:7f:83:6a:ea:74:dd:f8:98:65:b3:6f:df:31:8c:d7:
e4:77:98:79:a1:b9:10:9c:74:21:ba:41:51:50:ab:74:21:fd:
ac:36:01:3a:5d:28:86:f9:80:5f:9a:6d:44:24:23:bc:7c:b7:
bf:d5:4c:8f:6b:06:1b:0c:21:f6:eb:62:a1:9a:f0:00:a4:98:
9a:69:ea:81:66:8a:44:89:51:b6:3f:21:2e:07:f1:75:9b:16:
30:8e:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:17:04 2025 by rpki-client