Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3132382e3232332e302f32342d3234203d3e203432383331.roa
File: 34352e3132382e3232332e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: 8ZExzXjxeHjhrgKdmE3qmrFifK1XbZKwED13+OyFJ58=
Subject key identifier: 7F:A4:4B:6D:53:33:55:00:29:DF:04:4E:BC:77:C1:A8:98:02:56:AB
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 7722C4F79F353CC76039EE1DA5CC1D585F89FFFA
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3132382e3232332e302f32342d3234203d3e203432383331.roa
Signing time: Thu 06 Mar 2025 05:52:09 +0000
ROA not before: Thu 06 Mar 2025 05:47:09 +0000
ROA not after: Thu 05 Mar 2026 05:52:09 +0000
asID: 42831
IP address blocks: 45.128.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:22:c4:f7:9f:35:3c:c7:60:39:ee:1d:a5:cc:1d:58:5f:89:ff:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Mar 6 05:47:09 2025 GMT
Not After : Mar 5 05:52:09 2026 GMT
Subject: CN=7FA44B6D5333550029DF044EBC77C1A8980256AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:4a:13:79:ac:da:f2:72:a5:6a:1a:a1:9b:
9d:e3:24:c9:95:28:2a:3f:e8:d7:ac:3b:bb:06:97:
dd:62:c7:2a:6d:66:95:89:41:cc:b2:30:b5:08:11:
9e:dd:b0:c9:5b:1e:32:ea:8f:c6:c1:a9:6b:a0:a5:
98:11:be:68:ab:d3:a5:95:3a:fa:6d:44:ca:20:52:
fb:01:1c:b0:0f:d5:92:0e:e3:c0:f0:a2:b9:d9:44:
5a:35:da:53:4f:83:68:b2:95:c8:7c:b3:59:04:25:
13:8c:46:d9:9f:56:51:ef:8b:5c:c8:b6:91:0e:01:
93:49:c8:e4:e2:21:55:c5:aa:9b:6b:19:f7:04:fa:
6e:bf:90:ff:a6:23:b4:77:0c:db:ce:ee:ce:de:2d:
0e:2c:9c:71:b1:71:20:f7:2c:24:3d:93:be:ed:0f:
44:de:42:f5:ec:eb:a8:ea:97:05:e8:6f:15:e5:62:
2f:91:69:f1:37:92:ab:a2:f1:1b:19:94:53:6d:a2:
ac:7a:2d:44:eb:a1:fe:17:ca:3d:cf:8c:68:2c:3b:
5e:1d:d3:b3:26:80:ea:da:a8:4b:fd:cb:05:9e:84:
97:d8:7f:62:7d:3e:75:82:fd:1e:cb:82:82:de:5f:
cb:57:df:9f:3c:38:37:e3:7b:67:77:b6:72:6c:37:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A4:4B:6D:53:33:55:00:29:DF:04:4E:BC:77:C1:A8:98:02:56:AB
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3132382e3232332e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.223.0/24
Signature Algorithm: sha256WithRSAEncryption
57:58:67:59:f4:16:cf:a2:86:c1:06:10:37:f9:42:4d:a1:bf:
52:49:06:95:2f:22:ae:6f:c2:aa:92:27:ab:2c:83:94:c5:1d:
f9:a5:02:af:74:fb:8a:8a:91:e9:1e:f5:5d:ff:f1:a3:7d:2e:
da:2f:38:37:03:41:eb:c5:92:72:c0:0f:c8:e2:84:90:15:af:
f1:54:8a:80:1b:a4:70:11:c2:57:d5:8c:8d:34:8b:97:3b:24:
aa:16:23:de:40:32:20:29:9e:ed:1d:a0:da:3f:0d:ff:8b:b2:
5d:25:f2:b4:12:d8:c7:37:9c:c7:8f:24:1d:dc:20:14:0f:53:
3d:d4:19:f8:72:53:02:2f:11:08:c6:1b:c4:32:ba:3c:13:22:
ab:2a:48:fa:b2:22:ca:16:2b:81:83:f4:fe:d7:01:e7:f6:e6:
88:78:2a:ed:c3:d1:75:3d:a9:02:8f:0f:11:fb:8f:3a:b8:60:
1e:61:f0:e2:2e:ac:6b:f1:f3:06:56:69:f2:29:cf:10:ed:dc:
12:f6:73:f6:a5:2f:63:f9:b5:60:ee:e1:e4:4f:d5:34:45:5f:
15:5e:27:96:93:53:19:95:f9:1b:14:06:72:9d:fa:13:e2:10:
78:00:65:1b:56:4e:fd:ab:72:82:3e:a2:37:53:e8:4a:42:4f:
f3:b0:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:47 2025 by rpki-client