Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/38/323430333a373163303a3a2f33322d3438203d3e2033323538.roa
File: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (raw, json)
Hash identifier: cjzUEIjY3Ip4OQBaUxkt83Wx9KlSyUClKBS92gKykpc=
Subject key identifier: 48:44:53:22:5B:6F:1D:E9:02:53:99:E0:73:E0:12:94:19:41:2A:E1
Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909
Certificate serial: 1BD85306F0311F0D96A304F2F8FB07EF93FB9464
Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer
Subject info access: rsync://0.sb/repo/sb/38/323430333a373163303a3a2f33322d3438203d3e2033323538.roa
Signing time: Fri 10 May 2024 08:47:01 +0000
ROA not before: Fri 10 May 2024 08:42:01 +0000
ROA not after: Fri 09 May 2025 08:47:01 +0000
asID: 3258
IP address blocks: 2403:71c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d8:53:06:f0:31:1f:0d:96:a3:04:f2:f8:fb:07:ef:93:fb:94:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4CC0000
Validity
Not Before: May 10 08:42:01 2024 GMT
Not After : May 9 08:47:01 2025 GMT
Subject: CN=484453225B6F1DE9025399E073E0129419412AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:9a:fa:c7:13:22:85:bb:1a:f6:39:26:e0:
b7:f0:2c:fc:9e:ff:7a:50:87:e3:9a:68:f7:df:c3:
ee:ff:c5:be:81:5f:77:64:fa:a9:7c:db:4d:96:01:
5d:2d:aa:32:a8:67:71:7b:98:26:83:d6:57:b3:f7:
b1:26:b9:15:46:3c:49:ba:05:59:76:6f:40:f2:eb:
dd:af:d2:f7:ea:88:91:21:84:0c:da:98:28:14:57:
11:38:e5:1a:ac:46:7b:9d:04:77:b3:70:28:c2:63:
c9:82:51:3a:fe:e5:e2:bf:3f:7d:2b:5d:0b:bf:05:
f2:6d:7c:1c:9c:19:f7:42:0e:d8:20:e3:8a:99:be:
5f:d7:d4:a0:82:85:97:5b:a9:80:e7:88:78:a8:68:
f7:de:84:c1:f1:82:fd:19:82:c0:bc:4d:87:85:e0:
b0:3a:06:71:77:85:8c:16:88:fd:4c:82:40:f0:36:
16:3b:8c:4e:d8:bc:b3:92:c6:1f:a5:18:33:19:9f:
6f:a0:ce:9f:58:56:6b:0c:11:71:14:4d:11:99:57:
5b:d5:11:d3:c2:8a:63:a7:94:80:31:77:18:5a:82:
75:87:5a:6d:1b:e2:ed:e4:81:bb:c0:41:7e:af:39:
23:f2:04:01:b7:fe:aa:1f:d8:c8:a5:a7:70:81:63:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:44:53:22:5B:6F:1D:E9:02:53:99:E0:73:E0:12:94:19:41:2A:E1
X509v3 Authority Key Identifier:
keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/38/323430333a373163303a3a2f33322d3438203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:71c0::/32
Signature Algorithm: sha256WithRSAEncryption
93:4f:a3:67:74:9e:72:24:b0:55:9b:b8:99:14:41:2b:cc:44:
20:03:e6:86:5e:35:37:f7:68:88:06:5c:36:e8:7b:ef:6e:62:
91:7c:2c:35:d8:89:fa:cc:82:cf:22:ab:b2:be:4d:f6:05:41:
7c:d0:b5:0c:4c:37:f4:7d:a9:e2:17:4d:bd:91:3b:e9:66:7b:
c6:17:7c:83:6e:f1:00:24:9a:8f:d3:8f:4e:6a:68:83:40:28:
88:0f:d0:12:72:b3:a1:fc:99:1d:10:3f:3a:87:51:2a:d2:4d:
07:c5:29:37:02:61:c1:c3:fc:35:6c:18:6f:34:ad:c4:be:42:
cf:41:25:85:e2:86:2b:9f:d6:b9:58:ce:0f:c5:95:11:b2:98:
14:68:82:84:e5:17:c1:63:b5:37:ea:41:d8:71:bb:7c:3d:b7:
1b:72:f4:d2:08:9b:b9:e9:9c:80:34:b6:6d:1a:1a:fd:5e:58:
72:71:13:4a:4a:ef:fe:32:ac:82:0f:e2:fc:98:81:c7:3b:af:
de:83:de:25:04:8c:e6:d5:20:1b:f3:c6:51:4e:a6:ab:38:39:
e4:cb:52:d9:74:b9:34:a3:48:b2:42:7e:b7:7f:48:57:90:39:
c6:54:9a:7c:d1:41:76:d8:62:a0:ec:31:5f:69:4a:ce:cf:9a:
57:92:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:08 2025 by rpki-client