Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/37382e33312e3231312e302f32342d3234203d3e2038383838.roa
File: 37382e33312e3231312e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: C2j/hCXHv+Vavh99ypHNAOEpOysz53yXfEf1hJhI5nE=
Subject key identifier: 76:24:65:14:87:F5:BC:1B:4E:5B:D9:AF:35:46:D4:63:FC:E8:08:FD
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 123E46367AB4046B866962E91F0140413F11D505
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/37382e33312e3231312e302f32342d3234203d3e2038383838.roa
Signing time: Wed 27 Nov 2024 14:51:54 +0000
ROA not before: Wed 27 Nov 2024 14:46:54 +0000
ROA not after: Wed 26 Nov 2025 14:51:54 +0000
asID: 8888
IP address blocks: 78.31.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3e:46:36:7a:b4:04:6b:86:69:62:e9:1f:01:40:41:3f:11:d5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Nov 27 14:46:54 2024 GMT
Not After : Nov 26 14:51:54 2025 GMT
Subject: CN=7624651487F5BC1B4E5BD9AF3546D463FCE808FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:11:bb:46:ca:d3:b0:b8:47:4c:6e:1d:1b:
33:c4:fe:8c:c7:c1:71:4a:a1:14:cb:4a:38:2f:d3:
1d:d7:fa:83:66:b7:90:cd:d3:de:ef:bb:6b:a3:cb:
f5:61:e4:7f:75:31:3a:5e:a5:da:98:15:ed:01:85:
e4:3b:ba:f3:10:e0:a3:4e:a5:cd:34:21:55:29:e0:
76:23:a6:c3:48:d7:1c:d7:67:41:ff:88:48:9e:25:
a3:8a:76:48:9f:9c:2e:e8:12:3b:8e:dc:02:3b:dc:
46:e8:01:ae:cb:79:ac:aa:85:85:c2:1e:ad:75:d2:
dd:1e:0c:c5:f4:08:ee:78:1d:93:3b:0e:e0:c2:6a:
94:f6:29:a8:d4:2b:36:83:49:8b:bf:07:36:76:24:
7a:fe:ea:74:37:c7:8a:24:a9:ba:2d:13:ce:d4:0b:
ae:45:a4:ab:3a:d0:cb:14:71:9e:9e:65:db:67:4c:
01:db:19:4f:a9:16:84:9c:ef:8f:71:72:24:7f:d3:
14:15:bb:5d:c1:26:b3:14:c5:4c:d7:44:e3:e0:6c:
9b:13:5c:3e:1a:85:0b:67:35:4f:b3:44:7d:2e:1e:
05:b5:c8:95:77:7e:78:bb:13:85:ec:71:bd:9f:ad:
b3:bb:84:62:3f:9f:a8:7f:0d:3e:94:7c:11:fb:34:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:24:65:14:87:F5:BC:1B:4E:5B:D9:AF:35:46:D4:63:FC:E8:08:FD
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/37382e33312e3231312e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:fd:62:61:a6:ad:7f:c4:5d:59:f0:1a:f4:6a:78:c6:4f:7d:
9e:d4:0d:8f:47:85:b2:dc:a8:b5:fc:86:9d:24:be:8a:b8:9e:
cb:30:7d:32:b9:57:5b:97:a6:11:60:66:7f:80:fb:9c:72:68:
a5:e4:8e:f5:b1:b2:3a:66:cd:e3:25:48:14:0a:f1:e8:95:f5:
19:84:9f:ae:29:46:47:f3:43:25:e1:b3:18:0c:7e:5c:88:c6:
20:25:e6:a5:87:8c:96:d0:be:a2:6c:4d:3b:3f:5f:62:9c:74:
88:8c:f1:6c:e5:2a:aa:ec:d2:f6:bc:77:c6:f3:6c:8e:f9:53:
be:ca:15:3d:2c:b4:75:e1:f6:a1:64:ce:27:b9:91:47:35:59:
86:11:50:c0:d9:9a:1f:61:34:7b:fb:8c:68:84:c9:95:8a:7c:
2e:03:b9:b6:41:d0:c9:c6:9c:af:11:e6:00:29:42:1b:2d:2d:
b7:2b:02:29:e9:c1:f6:16:1d:7d:6b:d9:3f:b8:fc:86:6e:f9:
ad:f4:15:05:a2:af:0c:fa:9f:0b:75:db:14:6b:64:4e:14:98:
ff:ed:57:30:88:86:35:2e:c9:fb:4d:5b:63:60:d7:07:cb:e0:
03:c3:f3:85:3e:9e:7d:f9:c1:8b:ab:c3:b9:40:ca:4d:4a:c2:
45:ab:da:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:15:14 2025 by rpki-client