Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/12/3231322e32332e3139362e302f32342d3234203d3e203633303233.roa
File: 3231322e32332e3139362e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier: Knn0ymqc3cCWrEMZKd5hiyA3KPvrnAA27wED5S8S5y8=
Subject key identifier: D7:28:C1:AA:D5:7A:C8:74:CE:44:39:0D:B5:6E:FB:C1:E0:6B:DA:EC
Certificate issuer: /CN=bfdae77ef8bd76a392c17c4dc6277486a49f819e
Certificate serial: 5B1762FF0D23FF793D13EFCFF9A5BEAD1F742E67
Authority key identifier: BF:DA:E7:7E:F8:BD:76:A3:92:C1:7C:4D:C6:27:74:86:A4:9F:81:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9rnfvi9dqOSwXxNxid0hqSfgZ4.cer
Subject info access: rsync://0.sb/repo/sb/12/3231322e32332e3139362e302f32342d3234203d3e203633303233.roa
Signing time: Fri 22 Sep 2023 10:19:43 +0000
ROA not before: Fri 22 Sep 2023 10:14:43 +0000
ROA not after: Fri 20 Sep 2024 10:19:43 +0000
asID: 63023
IP address blocks: 212.23.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:17:62:ff:0d:23:ff:79:3d:13:ef:cf:f9:a5:be:ad:1f:74:2e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfdae77ef8bd76a392c17c4dc6277486a49f819e
Validity
Not Before: Sep 22 10:14:43 2023 GMT
Not After : Sep 20 10:19:43 2024 GMT
Subject: CN=D728C1AAD57AC874CE44390DB56EFBC1E06BDAEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:fc:fb:0b:d2:48:58:0b:e1:d5:f8:a4:5b:
93:bd:d7:f6:4c:e6:7f:a5:68:77:14:66:3f:e4:40:
a9:9f:67:47:9a:44:ad:fd:6d:ac:29:6a:b7:55:77:
4a:8a:5f:82:b8:26:ae:45:f8:57:f9:ef:16:c1:b2:
0d:c8:92:d4:d6:e5:1f:fe:33:62:7f:27:d9:0b:b2:
2c:c2:0e:a5:24:85:68:fa:4a:70:93:9a:10:64:6c:
5f:06:2c:01:2c:f1:4f:0d:da:da:dc:3c:c1:5d:b8:
d6:28:b6:78:87:49:b4:fe:bd:da:87:e5:86:ce:cb:
9a:2d:2e:ec:fe:f5:11:0c:41:0a:57:fa:a3:18:58:
7f:ef:97:4b:29:16:1d:77:34:c5:c4:f4:8a:af:0d:
db:8d:c6:78:5f:bd:94:e1:fe:af:a2:f5:4e:9e:23:
87:57:db:15:52:02:1a:f8:6e:3b:a4:7d:66:d4:ea:
73:9f:ac:74:7f:5c:3b:ea:22:59:3d:2f:61:76:b7:
53:89:b4:ab:d0:02:ac:a7:a6:bb:7e:e8:9a:2d:af:
bb:ac:d0:9b:ab:68:a6:db:e2:83:49:99:ea:ea:2f:
0b:03:d3:ac:bf:7b:4e:2c:6c:17:70:99:c9:87:aa:
19:bd:07:be:0a:b4:c1:cb:dc:d3:ff:4d:c3:92:4c:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:28:C1:AA:D5:7A:C8:74:CE:44:39:0D:B5:6E:FB:C1:E0:6B:DA:EC
X509v3 Authority Key Identifier:
keyid:BF:DA:E7:7E:F8:BD:76:A3:92:C1:7C:4D:C6:27:74:86:A4:9F:81:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/12/BFDAE77EF8BD76A392C17C4DC6277486A49F819E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9rnfvi9dqOSwXxNxid0hqSfgZ4.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/12/3231322e32332e3139362e302f32342d3234203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.196.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f5:bd:78:e4:7c:45:e6:12:89:9d:47:98:55:9c:c5:61:21:
ee:a5:c6:69:cb:a9:f0:7c:56:37:7e:1b:9e:ef:3a:21:67:28:
4b:9d:d2:86:4a:c2:d0:17:bf:ac:39:67:3a:43:02:8d:fd:9c:
0a:c3:46:5b:58:9e:f2:f9:29:03:a5:7f:6d:85:c2:e8:3d:97:
f8:b9:ac:cc:01:59:9a:61:b8:cd:5c:c0:9b:50:8d:23:2f:59:
dc:21:cf:1b:30:77:69:46:67:74:aa:69:77:24:7e:0e:b4:d8:
3f:7e:e9:e8:cf:85:96:88:33:95:72:b5:b5:e0:4c:8c:da:e9:
df:79:e9:c6:03:af:2e:4c:4b:0d:e6:35:94:7d:cc:85:15:63:
90:e0:1e:8b:6b:69:6f:65:32:80:e0:ff:fa:f5:5d:92:56:76:
19:23:dd:b0:d2:e4:a1:d5:42:61:bf:48:60:6f:a1:40:09:93:
20:72:96:b1:64:5c:9b:74:c8:85:0c:51:c5:db:08:a1:32:9d:
73:e9:ee:57:8c:3a:1b:ad:ab:0c:1a:d0:fa:e1:98:c0:33:a4:
d3:73:e0:39:f3:dd:84:f3:cd:8a:c6:41:0e:fb:44:ee:ec:48:
fa:73:a5:75:44:b5:34:ec:be:68:cc:90:8e:2b:2b:2f:4f:43:
6d:83:93:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org