Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/326131313a383038333a343a3a2f34382d3438203d3e203233393539.roa
File: 326131313a383038333a343a3a2f34382d3438203d3e203233393539.roa (raw, json)
Hash identifier: UtCrqIL7eDgs+7iFNhqc4eipkNZ0WmRzD7bk4K9U3AI=
Subject key identifier: FA:84:3A:63:39:0D:E6:EF:54:F1:8D:50:84:E9:72:69:34:F3:F4:E5
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 43ABCDC9E93C803C6E7F885871B186BB17F56A4F
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/326131313a383038333a343a3a2f34382d3438203d3e203233393539.roa
Signing time: Mon 24 Mar 2025 13:07:19 +0000
ROA not before: Mon 24 Mar 2025 13:02:19 +0000
ROA not after: Mon 23 Mar 2026 13:07:19 +0000
asID: 23959
IP address blocks: 2a11:8083:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ab:cd:c9:e9:3c:80:3c:6e:7f:88:58:71:b1:86:bb:17:f5:6a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Mar 24 13:02:19 2025 GMT
Not After : Mar 23 13:07:19 2026 GMT
Subject: CN=FA843A63390DE6EF54F18D5084E9726934F3F4E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:52:db:3a:bb:96:96:60:c3:f6:35:b3:0f:
16:e9:38:a2:8b:83:29:61:3f:60:a7:11:45:c4:a0:
d8:6a:d8:f7:00:66:80:ea:5d:ab:45:ca:98:e1:ea:
d0:1f:47:fe:da:45:d6:a6:51:d2:d2:5e:4b:62:ca:
b0:f1:1a:80:d3:66:b1:30:2d:6a:f4:8c:02:b5:23:
0b:43:c3:bb:08:8f:8b:84:25:af:64:07:e8:06:3e:
4b:aa:49:e2:2d:c0:2f:1f:c7:18:9b:04:1d:1d:43:
c6:f2:2a:d8:70:10:6e:a3:4c:70:ff:3d:e4:64:e2:
ba:08:c4:35:3c:d0:ca:83:1b:de:13:9b:58:b4:38:
a7:b7:67:37:a1:10:f6:bd:75:8c:00:5d:6e:7c:c7:
1b:b6:27:4c:ad:ea:63:d1:6e:0b:4d:c5:16:dc:59:
8a:04:4c:69:c6:80:63:9a:4a:48:16:54:8a:24:29:
92:6f:bc:e9:33:46:53:61:69:a3:21:87:6d:dc:f5:
e1:a8:ef:5b:39:94:08:25:01:45:22:99:f6:b6:7c:
93:83:36:14:6d:96:50:40:5b:19:b6:0d:9f:6e:3b:
d7:5b:b0:a2:fa:b1:9c:36:ee:3d:76:3e:21:63:08:
e4:95:21:87:63:17:a9:41:5b:b1:87:e5:71:61:5b:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:84:3A:63:39:0D:E6:EF:54:F1:8D:50:84:E9:72:69:34:F3:F4:E5
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a383038333a343a3a2f34382d3438203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8083:4::/48
Signature Algorithm: sha256WithRSAEncryption
11:db:6c:1b:f3:70:e4:f5:22:37:17:de:07:48:06:ba:03:e7:
d6:64:55:b1:54:89:ec:83:5d:86:fd:29:79:0e:d5:ad:52:e6:
ae:75:33:b1:88:87:fd:19:45:9f:08:04:03:b6:28:a2:0c:84:
c7:e0:b0:2f:dc:bc:f7:be:78:92:1d:db:8c:eb:8f:4e:60:ea:
2c:78:c8:e4:42:5d:de:33:f4:d5:57:b5:79:bb:c9:f4:19:0c:
52:8d:99:11:9a:27:ad:1e:bb:af:a0:b1:40:66:70:d5:3c:81:
fa:94:e0:66:3c:2b:d0:af:97:e1:c6:bf:ec:a3:cd:c5:5d:b9:
d0:43:f9:f7:4f:cb:b8:6d:70:da:51:bd:17:ff:c9:08:c7:81:
2d:bc:b7:3a:51:3c:b6:2c:a3:09:3b:5b:85:68:f0:ae:52:40:
48:87:77:dd:28:89:11:4e:da:27:33:6c:d5:21:c7:2d:72:79:
e2:47:3b:4e:69:d9:4e:ad:da:f4:cf:3f:be:c2:32:93:d2:17:
e9:ee:99:00:7f:24:53:61:42:ab:67:83:83:48:68:b6:c7:ac:
c0:e6:51:14:0d:cc:f3:ae:48:4a:c6:07:ca:a0:94:9b:9f:27:
f4:9d:27:7d:af:ce:71:4c:71:c1:3f:1f:2e:3c:4c:87:1c:17:
42:6c:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:28 2025 by rpki-client