Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3132382e3232302e302f32322d3332203d3e2033323538.roa
File: 34352e3132382e3232302e302f32322d3332203d3e2033323538.roa (raw, json)
Hash identifier: fuWRt1C7O7tt/kOL8b2LCV94XgJiwXwovGjQIFkHhWY=
Subject key identifier: 65:DF:1F:38:FA:12:10:49:2A:DC:3D:E0:7A:F5:6F:BF:CF:05:A7:D2
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 74768377CF6D55B7DF4E550471BBDCEDA183E73A
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3132382e3232302e302f32322d3332203d3e2033323538.roa
Signing time: Thu 06 Mar 2025 05:52:09 +0000
ROA not before: Thu 06 Mar 2025 05:47:09 +0000
ROA not after: Thu 05 Mar 2026 05:52:09 +0000
asID: 3258
IP address blocks: 45.128.220.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:76:83:77:cf:6d:55:b7:df:4e:55:04:71:bb:dc:ed:a1:83:e7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Mar 6 05:47:09 2025 GMT
Not After : Mar 5 05:52:09 2026 GMT
Subject: CN=65DF1F38FA1210492ADC3DE07AF56FBFCF05A7D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:02:47:60:7d:c5:37:a7:b9:6c:c0:b7:5d:89:
d3:a2:8d:18:9e:9d:fa:f8:ec:69:6f:31:87:c0:28:
0c:22:22:2f:22:e0:a0:b5:a6:52:ff:8c:a6:e2:73:
5e:b5:93:70:d5:82:9a:cc:01:cd:99:15:b0:d3:d2:
e0:fa:63:c7:eb:ae:9e:d9:6d:a2:e7:9e:9e:ed:c1:
23:9d:40:8d:bd:b6:66:ac:39:b9:59:c8:b2:6c:ab:
19:0e:bf:4a:45:8b:ca:5f:48:e2:4e:01:e1:f2:1c:
f4:d7:85:07:2e:aa:87:0f:af:09:1f:32:d7:dd:d0:
14:ed:e2:91:b9:09:df:06:bc:7e:98:60:b4:31:58:
ef:06:58:67:00:ca:a6:51:e6:ac:45:39:ec:78:8d:
8e:66:66:ca:b8:06:57:73:cc:46:a0:17:c3:aa:52:
27:5c:ab:60:57:82:24:74:84:73:28:6b:a9:b0:ef:
2c:14:a0:c6:6c:2e:82:30:5e:4c:0c:95:37:8b:55:
63:cb:c4:55:f1:97:b8:51:c7:1c:33:b3:42:87:fd:
26:4c:6a:46:0b:86:ee:8f:08:d2:a2:ca:43:76:88:
92:a7:4d:5b:2e:f9:84:43:93:4b:e7:1d:9a:af:24:
4a:e1:5b:31:bd:8b:b3:d3:bf:59:ba:96:dd:b1:c2:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:1F:38:FA:12:10:49:2A:DC:3D:E0:7A:F5:6F:BF:CF:05:A7:D2
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3132382e3232302e302f32322d3332203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.220.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:0f:64:ef:ea:de:e6:f5:d0:4c:03:8d:00:43:d9:43:a7:05:
cc:23:97:bb:69:3d:48:49:9e:97:40:3a:01:62:44:17:a3:aa:
16:21:de:46:5b:c8:c9:8c:76:58:68:af:e1:c0:1b:a6:63:b2:
fb:a7:6a:fe:e4:3a:e4:9e:93:01:e0:b3:30:a7:59:1f:55:04:
3c:4b:b0:48:66:76:0b:f9:ae:6c:fc:40:c4:70:4a:30:dc:76:
80:f1:4f:c6:b7:b3:ab:de:c3:4c:16:09:a1:cc:f0:80:8c:54:
d3:4f:ec:72:5d:21:42:3a:c6:84:4b:4c:15:2f:c7:ba:20:73:
41:c3:1d:9d:06:62:94:cf:3a:a6:19:0c:84:aa:d3:c4:31:68:
7e:85:35:9e:7a:3b:79:b6:42:c4:c8:0f:c6:07:93:2d:dc:27:
97:76:7b:3d:a4:ff:c9:9c:5f:12:e6:65:6e:62:72:bb:cb:59:
96:ee:1e:80:1c:79:f5:66:4b:d8:fa:ec:2d:3b:e1:fd:ac:68:
5d:8a:bd:3b:dc:84:3a:fa:b5:a6:6b:be:dc:a3:6c:d7:9c:a2:
f1:8a:6b:5f:e4:9d:39:73:2f:b4:fc:73:ee:c9:02:5a:22:b4:
60:bc:68:6f:4f:e3:78:b7:21:27:02:65:4e:3d:bc:87:70:c9:
24:d8:f5:39
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIUdHaDd89tVbffTlUEcbvc7aGD5zowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYxYzYxNjM2NGI4OTY1OWVkOWYxOGNiMGFmNzc0MjA0
MzdjYzdkYTAeFw0yNTAzMDYwNTQ3MDlaFw0yNjAzMDUwNTUyMDlaMDMxMTAvBgNV
BAMTKDY1REYxRjM4RkExMjEwNDkyQURDM0RFMDdBRjU2RkJGQ0YwNUE3RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtAkdgfcU3p7lswLddidOijRie
nfr47GlvMYfAKAwiIi8i4KC1plL/jKbic161k3DVgprMAc2ZFbDT0uD6Y8frrp7Z
baLnnp7twSOdQI29tmasOblZyLJsqxkOv0pFi8pfSOJOAeHyHPTXhQcuqocPrwkf
Mtfd0BTt4pG5Cd8GvH6YYLQxWO8GWGcAyqZR5qxFOex4jY5mZsq4BldzzEagF8Oq
Uidcq2BXgiR0hHMoa6mw7ywUoMZsLoIwXkwMlTeLVWPLxFXxl7hRxxwzs0KH/SZM
akYLhu6PCNKiykN2iJKnTVsu+YRDk0vnHZqvJErhWzG9i7PTv1m6lt2xwkYdAgMB
AAGjggG6MIIBtjAdBgNVHQ4EFgQUZd8fOPoSEEkq3D3gevVvv88Fp9IwHwYDVR0j
BBgwFoAUdhxhY2S4llntnxjLCvd0IEN8x9owDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIxLzc2MUM2MTYzNjRC
ODk2NTlFRDlGMThDQjBBRjc3NDIwNDM3Q0M3REEuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kaHhoWTJTNGxsbnRueGpMQ3ZkMElFTjh4OW8uY2VyMGwGCCsGAQUF
BwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjEvMzQz
NTJlMzEzMjM4MmUzMjMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMzMyMzUz
OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2A3DANBgkqhkiG9w0BAQsFAAOCAQEAyw9k7+re5vXQTAON
AEPZQ6cFzCOXu2k9SEmel0A6AWJEF6OqFiHeRlvIyYx2WGiv4cAbpmOy+6dq/uQ6
5J6TAeCzMKdZH1UEPEuwSGZ2C/mubPxAxHBKMNx2gPFPxrezq97DTBYJoczwgIxU
00/scl0hQjrGhEtMFS/HuiBzQcMdnQZilM86phkMhKrTxDFofoU1nno7ebZCxMgP
xgeTLdwnl3Z7PaT/yZxfEuZlbmJyu8tZlu4egBx59WZL2PrsLTvh/axoXYq9O9yE
Ovq1pmu+3KNs15yi8YprX+SdOXMvtPxz7skCWiK0YLxob0/jeLchJwJlTj28h3DJ
JNj1OQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:47 2025 by rpki-client