Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/33312e32342e38362e302f32342d3234203d3e20313336383937.roa
File: 33312e32342e38362e302f32342d3234203d3e20313336383937.roa (raw, json)
Hash identifier: oWuvyPZbWuXKSvdl7Xmd1baX4HSfEJAfVTP5L+hgTqo=
Subject key identifier: 8C:FD:93:2F:70:FF:75:BD:F7:9F:2E:FC:67:1F:76:79:01:CC:AB:8C
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 60F7B620F8545FA572B2728AE321C6761735C328
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/33312e32342e38362e302f32342d3234203d3e20313336383937.roa
Signing time: Mon 30 Dec 2024 15:30:41 +0000
ROA not before: Mon 30 Dec 2024 15:25:41 +0000
ROA not after: Mon 29 Dec 2025 15:30:41 +0000
asID: 136897
IP address blocks: 31.24.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f7:b6:20:f8:54:5f:a5:72:b2:72:8a:e3:21:c6:76:17:35:c3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Dec 30 15:25:41 2024 GMT
Not After : Dec 29 15:30:41 2025 GMT
Subject: CN=8CFD932F70FF75BDF79F2EFC671F767901CCAB8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:60:52:ad:57:f3:11:8b:8c:5a:e4:9e:40:
17:b5:d0:4b:96:5e:41:42:5c:f4:53:64:9a:84:df:
11:ed:a0:1d:b2:d3:11:c0:83:07:e1:29:e1:d3:83:
c9:f5:ce:f9:b5:62:b7:df:ca:90:f5:19:ca:7d:a0:
73:8f:5c:1f:c4:37:bf:8f:36:aa:5b:81:6a:b4:88:
bf:4c:89:d2:b9:4c:62:c7:5d:6d:65:a2:d4:d4:7f:
c5:78:d2:6e:3d:34:65:dc:80:5b:2f:c7:87:65:49:
ef:52:2d:75:51:66:28:57:9d:a2:83:b8:9b:57:b5:
7c:ba:86:6d:2e:93:b9:49:ca:de:62:fa:4f:f1:03:
67:eb:8c:c6:21:a8:3c:b4:06:b3:63:41:49:7a:52:
fd:7b:4e:8c:95:ff:98:09:d4:75:8d:fc:98:a2:81:
e0:da:56:da:05:b1:cb:d7:15:27:a6:0a:5c:70:43:
02:db:61:a4:aa:e6:5e:c1:6f:ea:80:78:87:96:ae:
95:67:ac:33:c7:a0:eb:ac:a2:76:b5:f5:5f:0d:84:
a5:a0:b4:4a:e1:7e:01:42:b6:1e:af:7a:42:1d:ce:
ff:2a:f1:53:71:d1:11:63:17:28:0b:4d:b7:b6:20:
9d:fd:7f:87:8a:01:92:41:7b:1d:46:bb:e1:40:76:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:93:2F:70:FF:75:BD:F7:9F:2E:FC:67:1F:76:79:01:CC:AB:8C
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/33312e32342e38362e302f32342d3234203d3e20313336383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ad:f2:64:8b:5b:a9:e5:a1:ae:c3:42:a2:a2:96:53:5a:9f:
b8:73:e1:a8:0b:3e:68:bb:74:6b:cf:60:6e:0e:97:9f:fa:ac:
3f:cf:7d:f2:86:f9:64:be:28:8a:f5:0f:d9:76:91:6f:96:f4:
ad:09:b5:c8:ff:3a:14:2b:cb:ed:00:e1:45:3b:a6:0f:ee:0b:
f6:48:8f:a7:f5:5a:e4:16:e2:86:b5:2e:c1:5b:fd:9c:f6:e6:
89:bd:af:a8:29:9d:87:9d:cd:d4:ba:bb:9f:42:f7:ed:59:40:
95:42:b8:58:87:77:59:e8:a0:5e:89:2c:f0:d7:6a:9a:8f:78:
5b:5f:c9:a4:d9:fc:19:7c:90:66:4f:a4:9e:83:fe:79:66:aa:
86:5c:2e:52:06:bd:14:4b:67:81:84:df:bb:2e:fa:54:0a:33:
e4:11:05:0e:69:54:af:83:d0:dd:73:72:90:dc:cc:55:df:ff:
83:2d:e0:b9:35:cf:a7:3a:46:f7:4f:2c:ff:a0:55:f1:97:74:
ad:4a:40:2d:2a:57:12:c6:97:da:97:e1:68:87:c7:e5:ba:92:
0d:fa:19:55:13:92:3b:8e:1e:74:85:0d:c7:a5:a1:b3:70:6c:
bc:ec:cf:d2:10:33:4e:08:d5:b1:27:d7:40:2a:ac:d1:08:22:
d4:31:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:49 2025 by rpki-client