Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/39312e3232302e32352e302f32342d3234203d3e20313937373330.roa
File: 39312e3232302e32352e302f32342d3234203d3e20313937373330.roa (raw, json)
Hash identifier: pDHUsmfQu2o6VogHMb2jThAWJ0dmt5wLSg1kCjEckqg=
Subject key identifier: ED:14:39:54:E5:11:D2:89:AA:9D:1D:9C:E4:45:7F:1C:56:9D:C5:6D
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 2212EE02835E9BD34DE6E01FD332D0D2AF4593A2
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/39312e3232302e32352e302f32342d3234203d3e20313937373330.roa
Signing time: Mon 30 Dec 2024 15:30:42 +0000
ROA not before: Mon 30 Dec 2024 15:25:42 +0000
ROA not after: Mon 29 Dec 2025 15:30:42 +0000
asID: 197730
IP address blocks: 91.220.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:12:ee:02:83:5e:9b:d3:4d:e6:e0:1f:d3:32:d0:d2:af:45:93:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Dec 30 15:25:42 2024 GMT
Not After : Dec 29 15:30:42 2025 GMT
Subject: CN=ED143954E511D289AA9D1D9CE4457F1C569DC56D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:79:d3:17:4c:6d:e1:ec:7d:44:19:dc:9e:
14:87:41:fd:53:05:e1:6d:62:88:ae:c7:10:b0:d5:
0f:10:33:cf:ab:6b:7d:c3:22:66:c1:aa:1d:92:b7:
1f:7c:9d:db:c6:09:6e:27:f7:ad:7d:d7:9f:53:05:
c5:4b:0e:a4:d3:69:d0:7a:b7:2f:6d:e9:b8:71:84:
94:1c:fa:be:94:25:47:8e:0f:cb:ea:87:7f:90:c0:
34:11:5d:b5:7f:78:51:e0:a3:96:99:1f:1e:89:31:
9c:76:9b:aa:82:fd:a2:a0:b6:66:74:2d:ee:11:82:
36:f7:66:b6:97:ea:64:fb:8e:71:33:69:29:8f:60:
67:3a:f1:01:f1:72:0f:c6:fc:11:36:f5:f5:2d:9e:
95:6d:3b:86:b3:ef:3f:97:f2:80:de:cf:32:e4:8a:
08:9c:ec:ac:a2:08:e2:40:12:13:0d:8e:21:98:1e:
7e:31:c8:3d:79:f7:45:1f:ed:2d:db:13:38:a6:03:
12:e8:bc:b2:f7:ef:5e:c1:85:55:52:af:9b:e6:ab:
a1:42:fc:98:83:51:6d:28:a4:57:ed:d3:73:bd:e5:
de:ea:1e:c7:c0:dc:cb:ac:68:6b:21:a9:f5:8a:d5:
60:cb:65:d3:f6:a9:c1:e9:2d:36:ab:a7:77:bc:34:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:14:39:54:E5:11:D2:89:AA:9D:1D:9C:E4:45:7F:1C:56:9D:C5:6D
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/39312e3232302e32352e302f32342d3234203d3e20313937373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.25.0/24
Signature Algorithm: sha256WithRSAEncryption
52:4c:93:d3:eb:01:04:4d:91:8b:3e:42:15:ca:cb:ee:95:3f:
7f:4d:8f:b0:3d:b3:ff:71:60:40:6a:c2:2b:fe:d3:c8:d2:c6:
a1:e8:c5:09:19:02:34:54:b3:e5:c3:02:d8:83:af:3b:90:d9:
52:b4:05:dc:a4:8f:ce:72:ee:38:45:6f:58:bf:cf:35:9f:7a:
f5:e1:59:65:12:61:22:dd:87:d4:85:1d:3e:e1:5f:5f:7e:0b:
38:22:b1:34:64:b8:e5:9e:2a:a8:47:e7:30:3b:f0:3b:f7:4f:
c1:75:fa:2a:37:cb:51:03:be:7e:98:dc:bb:2c:7d:45:6d:fa:
0b:94:3c:04:e9:de:42:b0:9b:bb:e9:08:2d:50:95:94:79:e8:
20:05:37:c2:3a:4b:6b:e1:a8:64:73:0a:cf:c0:3e:a4:ae:30:
df:ab:3e:cb:db:af:d0:c7:5a:aa:4f:6a:93:7d:9d:54:7d:57:
b0:37:1e:c3:47:a3:be:be:a1:34:e2:3c:1d:68:78:e5:cf:8e:
2a:b7:05:ae:98:32:a4:60:26:48:66:8a:38:c3:44:92:04:aa:
f1:b8:06:84:14:7b:3f:39:3e:ac:95:dc:19:58:4f:53:41:25:
3a:64:24:cd:a2:3d:2a:66:8a:91:5e:33:ee:e3:a9:06:cf:fa:
97:b5:e1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:20:57 2025 by rpki-client