Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/19/3134362e31392e3136332e302f32342d3234203d3e2033323538.roa
File: 3134362e31392e3136332e302f32342d3234203d3e2033323538.roa (raw, json)
Hash identifier: ZuE+jXXdT6bmA+MX8R6dEGggvkdzPlNExkQrvQEIPQ4=
Subject key identifier: FB:84:EF:7B:C1:D7:FA:24:67:9E:32:0D:A5:E8:37:EC:10:33:79:7C
Certificate issuer: /CN=338beb75b4dfe20926d69c4bc72a2ad3cf632c0e
Certificate serial: 5209207171A7D968B05F45F9AF40F125F74F30BB
Authority key identifier: 33:8B:EB:75:B4:DF:E2:09:26:D6:9C:4B:C7:2A:2A:D3:CF:63:2C:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4vrdbTf4gkm1pxLxyoq089jLA4.cer
Subject info access: rsync://0.sb/repo/sb/19/3134362e31392e3136332e302f32342d3234203d3e2033323538.roa
Signing time: Tue 26 Sep 2023 11:19:05 +0000
ROA not before: Tue 26 Sep 2023 11:14:05 +0000
ROA not after: Tue 24 Sep 2024 11:19:05 +0000
asID: 3258
IP address blocks: 146.19.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:09:20:71:71:a7:d9:68:b0:5f:45:f9:af:40:f1:25:f7:4f:30:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338beb75b4dfe20926d69c4bc72a2ad3cf632c0e
Validity
Not Before: Sep 26 11:14:05 2023 GMT
Not After : Sep 24 11:19:05 2024 GMT
Subject: CN=FB84EF7BC1D7FA24679E320DA5E837EC1033797C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:93:3c:71:84:fc:ea:5d:d2:8c:46:e7:62:
d5:d8:f1:85:14:3d:24:31:81:52:c3:1d:40:78:59:
e8:d1:88:57:d7:ac:cd:c2:0d:1b:d7:cb:29:8c:a9:
5a:0b:df:d9:87:fb:f9:82:39:c7:a0:14:3a:af:5a:
e6:4f:bb:72:d6:06:f1:d7:89:0f:5d:b7:17:e1:56:
8a:09:65:a8:07:9f:1a:eb:54:54:fb:d4:26:8f:15:
78:7d:62:0e:a6:fb:f2:94:68:85:eb:58:58:a2:a8:
97:04:90:92:c7:ae:20:65:f5:71:90:c4:c7:bc:a0:
11:ca:e2:74:76:4d:af:43:2e:2a:e8:7f:81:53:4a:
a9:70:65:78:2f:6a:28:e7:ab:2f:ba:3d:9a:6d:4d:
fa:10:07:d6:30:c3:8f:80:97:29:d4:81:d2:ca:84:
f2:98:cf:89:dc:32:60:ae:d2:71:d2:8c:1c:a2:31:
44:19:ba:61:22:2c:1e:9b:fa:cf:86:e7:d2:a0:2f:
5a:35:dc:5b:d1:23:c4:a6:a0:69:a5:45:41:1a:a5:
57:72:d3:d6:01:0e:cf:cb:4f:d2:ae:70:0b:f4:f8:
e4:d8:5b:31:ff:08:f6:fb:60:02:0b:80:f8:e9:e4:
5d:53:b4:e4:d0:55:73:c3:e7:06:5c:3c:d0:89:7b:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:84:EF:7B:C1:D7:FA:24:67:9E:32:0D:A5:E8:37:EC:10:33:79:7C
X509v3 Authority Key Identifier:
keyid:33:8B:EB:75:B4:DF:E2:09:26:D6:9C:4B:C7:2A:2A:D3:CF:63:2C:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/19/338BEB75B4DFE20926D69C4BC72A2AD3CF632C0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4vrdbTf4gkm1pxLxyoq089jLA4.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/19/3134362e31392e3136332e302f32342d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fe:34:23:2f:f4:26:f9:bb:e4:fd:f4:bd:f3:89:ad:dd:2a:
c9:a3:bc:46:f7:b8:00:ae:57:b2:5a:be:1e:3a:d5:d8:20:d7:
e7:53:1f:98:db:0f:42:a2:3b:67:34:56:2d:a7:99:fd:e1:5a:
e7:36:a7:6f:29:64:cb:24:1e:b8:67:bb:20:d9:d5:6f:97:d2:
80:a3:09:56:ca:b7:97:39:7e:15:31:ee:b7:d3:53:30:08:81:
63:95:cf:37:d3:a3:bc:d2:f1:d2:a3:90:85:bb:90:66:d7:b5:
39:42:fd:2d:7e:3f:92:f2:c7:04:bc:79:e1:c6:f2:4a:e9:a6:
29:da:ed:10:fd:7e:34:f2:42:2e:6a:5d:ac:4a:ef:ce:c9:df:
77:41:d3:6f:a9:61:a9:87:02:55:77:b0:b2:ab:f3:e8:4e:a9:
ad:94:e6:e3:d3:b6:6f:f1:47:ff:ee:a4:f1:90:b8:cb:b1:4c:
9d:fd:ca:2a:a0:d3:35:a0:96:c1:20:7f:0c:61:a3:fe:69:e4:
07:31:b1:94:cc:78:f2:49:e2:cd:73:db:9a:e7:37:59:23:e6:
a8:e8:b3:b6:db:f5:82:2d:5c:4e:0f:52:3c:43:da:90:7b:cd:
e4:31:2b:68:6a:c1:5e:0a:a1:90:6d:d4:71:37:a0:62:d7:74:
11:ae:1e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 12:37:11 2023 by rpki-client on console-ams.rpki-client.org