Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/6m7j2x5GGq7W52qf5FgsTL2uZFM.roa
File: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (raw, json)
Hash identifier: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=
Subject key identifier: EA:6E:E3:DB:1E:46:1A:AE:D6:E7:6A:9F:E4:58:2C:4C:BD:AE:64:53
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 01942748576B7059F784D1851F41B5E50AB7
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/6m7j2x5GGq7W52qf5FgsTL2uZFM.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50975
IP address blocks: 109.75.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:57:6b:70:59:f7:84:d1:85:1f:41:b5:e5:0a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea6ee3db1e461aaed6e76a9fe4582c4cbdae6453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:ed:3a:cb:e5:6b:26:5d:ec:3c:c7:3a:5d:
0a:3c:03:3d:aa:99:d6:0a:6f:3b:7f:76:e9:37:c9:
44:f4:9b:82:f1:68:e7:66:b5:9c:c2:75:ff:b6:b3:
16:85:65:8e:b1:25:63:7d:81:06:3b:ef:b0:06:bd:
28:b1:7e:cc:45:e3:bd:09:04:0e:b5:c2:fd:b2:43:
6d:88:29:92:b8:62:24:3c:10:8b:0d:2b:0c:29:79:
79:48:61:42:e3:d6:75:7e:4d:36:77:ef:bb:fa:3a:
45:80:aa:53:95:74:12:16:3d:e3:b4:d6:4d:36:fa:
a6:38:19:98:4f:9f:28:b6:82:70:cf:9a:66:17:41:
db:25:ef:a5:6d:09:53:d8:90:2b:cb:37:7a:91:ae:
56:e6:32:34:a3:38:59:65:6b:b0:2b:c6:0b:75:9a:
eb:16:0e:26:31:d2:8d:66:ff:71:8a:2b:39:a5:07:
35:60:cd:4a:4c:ac:38:86:17:5f:3a:45:bc:b8:24:
a8:0d:71:05:f4:40:df:99:a0:c5:ce:32:a1:5f:f9:
27:e5:fe:9b:a0:04:6c:76:32:54:d6:8d:64:0a:c6:
5a:2d:8f:9a:47:d6:eb:6c:d6:4f:51:7c:8e:9b:20:
b2:13:a2:33:58:1c:2e:e7:56:e0:52:b0:b8:64:69:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6E:E3:DB:1E:46:1A:AE:D6:E7:6A:9F:E4:58:2C:4C:BD:AE:64:53
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/6m7j2x5GGq7W52qf5FgsTL2uZFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.75.0.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:92:a1:38:54:03:15:9d:c6:37:23:ec:6c:b7:04:41:ba:31:
c2:54:8b:13:4b:75:ef:d9:95:4c:f4:15:a6:c6:58:ec:3c:14:
9c:97:d0:03:d8:43:a0:7d:b6:c4:9d:f3:6e:7f:23:a3:4b:c3:
f5:06:e8:8f:bf:63:63:64:0d:da:84:58:6f:0a:8d:34:1d:c7:
c6:41:94:aa:bc:a3:eb:a6:d3:48:ee:01:96:b5:5a:36:c9:1f:
5b:95:ff:e8:d8:ca:cf:58:44:19:80:9c:2f:4d:ec:eb:f3:8e:
21:d7:96:bb:7f:97:23:d3:54:41:25:6a:9f:30:78:45:a3:49:
5a:04:8a:d8:c4:51:60:63:d6:70:4f:6b:1d:46:86:3c:88:55:
94:b6:89:6d:19:dd:d7:84:bc:1c:06:e5:bd:36:49:ad:14:95:
d4:dd:27:1e:54:ec:82:c8:2e:21:8c:9b:48:1d:11:d1:bd:10:
80:e2:b8:76:8c:55:0a:ec:52:de:e0:95:e4:d0:f4:05:66:30:
03:93:91:34:81:05:1b:12:16:c8:1a:01:15:89:68:c9:ef:29:
30:dc:70:bf:20:73:67:e9:ff:1f:cc:68:fd:f5:d4:86:2f:de:
73:21:07:fb:a3:af:bf:68:91:30:e2:70:d6:04:ee:e3:c6:40:
7d:ab:38:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSFdrcFn3hNGFH0G15Qq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYTRlMzYzOTc0YjJlZjkwZWNiMDUzNDBhZjVkYWY2YjI0
MTYwY2IwHhcNMjUwMTAyMTM1MDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTZlZTNkYjFlNDYxYWFlZDZlNzZhOWZlNDU4MmM0Y2JkYWU2NDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNjtOsvlayZd7DzHOl0KPAM9qpnW
Cm87f3bpN8lE9JuC8WjnZrWcwnX/trMWhWWOsSVjfYEGO++wBr0osX7MReO9CQQO
tcL9skNtiCmSuGIkPBCLDSsMKXl5SGFC49Z1fk02d++7+jpFgKpTlXQSFj3jtNZN
NvqmOBmYT58otoJwz5pmF0HbJe+lbQlT2JAryzd6ka5W5jI0ozhZZWuwK8YLdZrr
Fg4mMdKNZv9xiis5pQc1YM1KTKw4hhdfOkW8uCSoDXEF9EDfmaDFzjKhX/kn5f6b
oARsdjJU1o1kCsZaLY+aR9brbNZPUXyOmyCyE6IzWBwu51bgUrC4ZGmSRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpu49seRhqu1udqn+RYLEy9rmRTMB8GA1UdIwQY
MBaAFGuk42OXSy75DssFNAr12vayQWDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMt
ZWNkN2ZlZTdjMWIwLzEvNm03ajJ4NUdHcTdXNTJxZjVGZ3NUTDJ1WkZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMtZWNkN2ZlZTdjMWIw
LzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbUsAMA0G
CSqGSIb3DQEBCwUAA4IBAQBvkqE4VAMVncY3I+xstwRBujHCVIsTS3Xv2ZVM9BWm
xljsPBScl9AD2EOgfbbEnfNufyOjS8P1BuiPv2NjZA3ahFhvCo00HcfGQZSqvKPr
ptNI7gGWtVo2yR9blf/o2MrPWEQZgJwvTezr844h15a7f5cj01RBJWqfMHhFo0la
BIrYxFFgY9ZwT2sdRoY8iFWUtoltGd3XhLwcBuW9NkmtFJXU3SceVOyCyC4hjJtI
HRHRvRCA4rh2jFUK7FLe4JXk0PQFZjADk5E0gQUbEhbIGgEViWjJ7ykw3HC/IHNn
6f8fzGj99dSGL95zIQf7o6+/aJEw4nDWBO7jxkB9qzin
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:17 2025 by rpki-client