Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/31/3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa
File: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (raw, json)
Hash identifier: FpHK28DpD9l5nAIcc3Ek41mdlViQ6T8gQOW6vTGtWWg=
Subject key identifier: 07:C6:EA:6F:5C:41:49:23:B3:E2:AC:95:2A:65:CE:A9:84:AB:23:EB
Certificate issuer: /CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62
Certificate serial: 2358F463EFC8719B7E933D3BFC2CA7D7B6CD3EFD
Authority key identifier: 81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer
Subject info access: rsync://0.sb/repo/sb/31/3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa
Signing time: Thu 26 Dec 2024 11:52:02 +0000
ROA not before: Thu 26 Dec 2024 11:47:02 +0000
ROA not after: Thu 25 Dec 2025 11:52:02 +0000
asID: 43357
IP address blocks: 103.136.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:58:f4:63:ef:c8:71:9b:7e:93:3d:3b:fc:2c:a7:d7:b6:cd:3e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124B5E0000
Validity
Not Before: Dec 26 11:47:02 2024 GMT
Not After : Dec 25 11:52:02 2025 GMT
Subject: CN=07C6EA6F5C414923B3E2AC952A65CEA984AB23EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:f5:a8:f6:d4:d7:82:15:c8:0f:0e:f1:84:
1b:9e:bc:64:21:75:ad:80:52:62:ed:4c:72:e9:71:
a9:72:11:ff:8e:58:1a:fa:2a:b3:1c:2c:4a:24:9c:
e0:93:ed:2b:df:f3:af:64:0e:4f:ae:d8:ae:52:6c:
7d:c2:d7:1e:19:7e:4a:8d:ad:b3:3c:83:3d:9e:1b:
5e:43:4a:30:cd:fd:13:7d:d9:5f:18:4c:42:c7:48:
74:9d:f6:9d:2b:6e:0f:f0:5b:92:80:51:9d:d4:95:
bb:85:9d:67:fe:a8:4a:10:95:74:c7:52:b5:e1:ae:
fa:90:0c:88:5c:54:b6:0f:c6:35:ba:df:08:c6:b7:
aa:18:20:5b:a2:f4:39:ed:3d:09:2f:b1:85:45:73:
96:ab:d7:bb:08:e6:f4:0f:3d:91:1e:dc:1b:3d:03:
ee:c6:04:f6:b5:cd:a6:62:5c:53:22:19:1f:e3:9f:
3d:5b:d8:cb:ca:82:a9:ef:13:81:40:17:3a:e2:34:
c7:f9:c1:c0:0c:b4:a7:a4:e8:ec:40:4b:08:01:b8:
59:46:4f:5e:79:2c:ea:2f:6a:f8:8d:2e:8b:ec:eb:
44:ab:19:ec:eb:77:bf:08:b9:7c:f7:2c:88:b6:82:
85:02:c5:9a:95:e9:ff:42:01:79:e2:1c:fb:b4:dd:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C6:EA:6F:5C:41:49:23:B3:E2:AC:95:2A:65:CE:A9:84:AB:23:EB
X509v3 Authority Key Identifier:
keyid:81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/31/3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:94:59:59:79:76:e5:fa:06:c6:6d:8b:47:85:3c:cc:94:e4:
85:3c:ef:65:dc:4b:ea:07:04:d2:fe:9f:d7:ca:f5:42:c6:3f:
bd:70:6f:5c:eb:97:7e:f5:77:a2:9b:15:88:04:8e:7b:cf:d0:
81:4d:15:a3:73:61:87:7e:59:09:16:78:03:a8:8a:b4:98:3d:
33:4c:24:18:41:fa:95:b1:eb:92:5b:e7:60:0a:c1:dc:e2:f1:
79:aa:f7:9d:58:f7:17:9c:b1:0d:b7:c1:21:3a:30:b5:70:a8:
47:72:e0:14:8b:be:ba:dc:1a:b8:3d:01:2a:30:83:76:af:21:
59:9f:e0:fd:eb:0e:8a:7b:f2:ba:78:6e:18:a9:79:3e:18:4b:
dc:76:d7:fa:59:dd:e5:ab:b3:ef:2f:10:aa:0c:b2:75:1a:36:
80:04:17:5b:aa:05:4e:0a:c4:6c:b9:4b:0a:bd:96:fb:5b:3b:
dd:8c:5b:14:29:1d:26:5a:ba:01:fc:38:39:c4:86:36:aa:92:
9a:36:2d:0d:b8:e8:1b:6a:1f:0b:c7:63:ef:42:37:4b:9b:5f:
a4:16:25:dd:25:19:ad:8f:00:9a:4e:24:ad:f5:bd:ca:b3:70:
17:32:01:99:8e:19:27:e3:fa:19:67:d1:6e:ed:da:7b:3d:ed:
1e:8f:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:51 2025 by rpki-client