Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e203134363138.roa
File: 39312e3231332e31372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: K1fS5GCqYIASXW1esPtQiefVy4GsjRsMG1mqJqn04no=
Subject key identifier: 0E:9B:53:95:81:70:D4:D5:D0:19:C2:EF:55:45:67:4A:66:87:AB:CD
Certificate issuer: /CN=680f28bc2b39c5cbc7083bebf6425a7e904b16e7
Certificate serial: 4608ED13F645B1FA3EA77B6994338B77AA4F7774
Authority key identifier: 68:0F:28:BC:2B:39:C5:CB:C7:08:3B:EB:F6:42:5A:7E:90:4B:16:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA8ovCs5xcvHCDvr9kJafpBLFuc.cer
Subject info access: rsync://0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e203134363138.roa
Signing time: Fri 03 Nov 2023 17:33:31 +0000
ROA not before: Fri 03 Nov 2023 17:28:31 +0000
ROA not after: Fri 01 Nov 2024 17:33:31 +0000
asID: 14618
IP address blocks: 91.213.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:08:ed:13:f6:45:b1:fa:3e:a7:7b:69:94:33:8b:77:aa:4f:77:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680f28bc2b39c5cbc7083bebf6425a7e904b16e7
Validity
Not Before: Nov 3 17:28:31 2023 GMT
Not After : Nov 1 17:33:31 2024 GMT
Subject: CN=0E9B53958170D4D5D019C2EF5545674A6687ABCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:71:39:05:4a:ee:e2:a0:b3:db:06:66:37:e8:
f5:77:a4:16:4b:82:23:68:ac:0e:bb:37:80:ea:04:
95:9e:34:46:a3:99:d0:3f:77:71:c7:a7:bd:5f:ff:
8b:af:7c:77:32:21:7f:5b:ae:26:9b:a9:37:43:92:
04:2d:57:37:89:23:cb:93:11:8e:04:63:13:93:38:
42:39:0b:ae:17:44:a9:8a:ed:ed:95:03:05:00:3d:
87:d2:8b:79:e3:5c:22:2a:5b:0c:ab:61:a0:fb:31:
84:7a:ea:ee:34:78:2e:f7:0c:d1:ba:97:dd:45:9b:
d6:a6:1d:c2:5c:a2:63:7b:17:af:cb:3f:a6:b0:3b:
94:40:24:31:54:9e:e9:c2:80:02:6a:d4:cc:ab:80:
14:f8:5e:d4:53:1d:89:62:89:c3:3d:d0:5a:04:7b:
ea:6b:5d:45:df:81:fb:df:c0:86:4e:cd:60:31:8f:
52:9d:a6:2e:60:8c:3b:77:f0:d8:85:54:f0:3d:ab:
4c:89:98:6a:31:bb:36:1b:46:da:f9:f3:fa:f1:99:
84:4f:09:57:95:6c:20:53:31:bd:6e:07:92:c8:ba:
b4:a6:26:5f:03:9c:44:b6:59:e5:e1:d4:12:12:6e:
cc:b4:f8:65:64:05:0a:55:d4:3b:2f:9a:c2:c0:01:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9B:53:95:81:70:D4:D5:D0:19:C2:EF:55:45:67:4A:66:87:AB:CD
X509v3 Authority Key Identifier:
keyid:68:0F:28:BC:2B:39:C5:CB:C7:08:3B:EB:F6:42:5A:7E:90:4B:16:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/24/680F28BC2B39C5CBC7083BEBF6425A7E904B16E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA8ovCs5xcvHCDvr9kJafpBLFuc.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.17.0/24
Signature Algorithm: sha256WithRSAEncryption
62:86:e1:28:bf:f7:38:60:f4:86:3d:af:5c:2f:4d:b5:52:a4:
d6:3e:41:d8:22:78:6a:70:07:95:e0:13:70:48:bb:1b:28:2f:
2a:e0:f5:2c:76:4c:b5:f0:96:9d:b1:be:75:dd:b2:be:fe:83:
3e:a2:6c:64:14:01:2c:02:b7:5f:cf:ed:a8:12:bd:0f:db:27:
f0:fc:08:44:1c:c6:52:38:70:71:0b:49:6c:b3:0b:bd:ea:a9:
82:6e:ec:b8:3d:75:0b:37:2f:f2:d3:af:ed:07:41:1a:fb:1c:
bc:90:b3:11:89:74:7d:7a:48:1b:f8:d5:40:e4:1d:3c:32:fd:
12:fd:12:a5:7d:2a:3a:f1:f0:fe:e7:bb:64:5f:5e:52:b2:43:
50:b5:35:5a:90:d1:e3:90:32:93:1c:73:7e:36:af:6c:c6:95:
44:90:83:a6:59:38:50:a4:8d:96:a7:e3:a9:c0:a1:17:36:42:
3a:d3:68:c2:b8:7d:15:63:97:80:4e:9b:95:6c:3f:ee:a7:6f:
6c:90:40:e3:04:b0:ba:eb:c9:e6:98:a0:f4:f4:62:84:36:d2:
1e:9f:f2:09:c1:49:43:6f:20:27:6d:66:0f:ba:d7:08:8a:96:
75:43:4a:85:7c:74:ae:8c:c8:1b:fb:06:04:cd:44:ee:83:4b:
d0:5d:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org