Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e2038383838.roa
File: 39342e3132342e37392e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: BN0yN3wqY8GQK3aggJszsc+WEY52z8NtLeJIcUs5U5Y=
Subject key identifier: DF:55:93:78:49:E9:FD:EE:AB:99:04:15:FD:30:68:B0:61:71:1E:D6
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 1A4C192F3F70AA7E44B522693BFA02EC8935E306
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e2038383838.roa
Signing time: Tue 24 Dec 2024 06:52:00 +0000
ROA not before: Tue 24 Dec 2024 06:47:00 +0000
ROA not after: Tue 23 Dec 2025 06:52:00 +0000
asID: 8888
IP address blocks: 94.124.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:4c:19:2f:3f:70:aa:7e:44:b5:22:69:3b:fa:02:ec:89:35:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Dec 24 06:47:00 2024 GMT
Not After : Dec 23 06:52:00 2025 GMT
Subject: CN=DF55937849E9FDEEAB990415FD3068B061711ED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:e1:80:37:f0:37:23:48:2c:fa:27:ab:72:
56:2e:b0:87:40:79:4a:ee:5c:d6:88:20:db:5f:d1:
60:1e:09:99:86:85:9c:e7:1d:ff:01:36:d6:14:5c:
7c:fc:ee:b4:2e:8f:99:95:a4:ce:33:51:bb:a5:f4:
24:a7:b5:34:7f:81:9d:4c:11:2a:aa:7c:78:b8:e4:
c5:b2:62:72:44:ee:fa:f5:48:dc:24:9b:da:6e:bc:
d0:eb:d1:b1:71:4d:96:c2:49:9d:0a:16:30:73:ef:
2a:89:f3:f4:c5:68:b2:9e:59:d1:17:ea:1d:d8:22:
df:5a:f3:47:c5:9e:cc:f7:e0:b1:3a:2e:8e:26:df:
ca:5d:0e:7d:c2:05:7c:e6:51:40:2d:9c:50:0b:d4:
0f:51:f2:57:07:3b:6e:24:49:aa:c0:1d:f4:3e:f0:
c6:18:3a:70:a0:af:62:d3:93:3b:46:34:ea:86:49:
e2:f4:75:a3:95:c9:6a:4b:02:6c:d1:c8:9e:bf:c2:
be:9d:0c:00:9e:3f:b7:3f:9b:8b:af:c3:f8:a9:43:
1b:a7:0a:9a:0e:fe:5b:c0:e5:60:14:28:ef:fe:79:
d3:9b:07:8f:33:33:3b:99:c8:0b:8a:c2:c1:4c:ab:
91:8b:38:46:b2:52:e0:6d:8d:32:95:81:2a:48:98:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:55:93:78:49:E9:FD:EE:AB:99:04:15:FD:30:68:B0:61:71:1E:D6
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9e:a2:6a:ca:a6:37:99:9e:1e:23:34:41:47:87:36:ca:e4:
5b:ee:fa:e7:e7:fd:8e:e3:31:5a:c7:59:8f:ec:19:54:cb:a5:
cc:b3:86:be:f3:6f:7b:83:a4:77:05:a3:ed:03:df:87:f4:3e:
aa:0b:a8:b6:4d:6f:1b:be:95:de:5c:52:72:ef:0b:75:13:24:
8b:4b:63:b3:38:89:b7:c8:74:26:d1:24:3b:83:14:38:da:01:
06:5a:98:2b:b8:10:a4:b9:36:bd:87:21:4b:27:72:e9:63:74:
2f:cb:d5:05:f7:d8:1c:71:67:7f:3c:09:64:16:16:03:4a:c6:
23:93:94:e6:da:99:a5:61:9e:11:6b:74:3d:ac:b4:be:72:6a:
41:36:1b:85:69:ee:3a:aa:9b:16:a9:b2:76:9d:86:dd:a6:69:
55:03:1f:d0:b1:d5:9d:14:37:cb:15:04:d8:aa:aa:4e:30:cf:
28:b0:da:6f:5e:be:e2:fb:98:cf:d4:8c:94:a2:68:85:b9:2f:
e1:27:d8:2f:ed:74:f2:8b:97:5c:02:8f:2d:43:c3:d5:b1:77:
aa:8c:ad:5a:c0:29:f2:e9:a8:50:d5:40:0c:26:03:d9:9d:34:
8c:cd:10:d0:ac:55:c8:80:52:e6:a4:59:53:a3:d4:2b:f4:08:
a8:55:77:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:32 2025 by rpki-client