Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e203631313338.roa
File: 3138352e3234312e35382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: Kn5XFi7wCS3Sh5Co6BGAbGPQeOlOE52BS3XKEw+Lgr4=
Subject key identifier: A4:48:8E:67:80:F8:64:79:24:00:BC:78:42:EB:5E:10:9A:D6:BB:1E
Certificate issuer: /CN=77223c7df24b51552233edf70edc05faaa74141e
Certificate serial: 2CDF053171EF144B80F97AE81445658788447CAE
Authority key identifier: 77:22:3C:7D:F2:4B:51:55:22:33:ED:F7:0E:DC:05:FA:AA:74:14:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyI8ffJLUVUiM-33DtwF-qp0FB4.cer
Subject info access: rsync://0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e203631313338.roa
Signing time: Sun 04 Jun 2023 13:45:11 +0000
ROA not before: Sun 04 Jun 2023 13:40:11 +0000
ROA not after: Sun 02 Jun 2024 13:45:11 +0000
asID: 61138
IP address blocks: 185.241.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:df:05:31:71:ef:14:4b:80:f9:7a:e8:14:45:65:87:88:44:7c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77223c7df24b51552233edf70edc05faaa74141e
Validity
Not Before: Jun 4 13:40:11 2023 GMT
Not After : Jun 2 13:45:11 2024 GMT
Subject: CN=A4488E6780F864792400BC7842EB5E109AD6BB1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:1a:fb:d2:66:2a:a7:b5:d1:36:6d:0a:1b:
36:c0:1b:d7:6a:14:96:72:02:1d:d9:2c:fd:51:5f:
4a:9d:6c:9d:c7:00:fd:43:c3:9d:bf:1a:d3:f2:7c:
bf:55:ee:bf:3e:76:3d:7b:c5:98:21:11:79:63:d5:
72:79:28:e1:4f:ba:14:b7:f6:cb:ab:ec:ee:6d:9d:
3b:e0:65:3e:f4:0a:9c:f8:40:82:de:4c:c0:d2:e9:
79:32:9f:b6:b4:80:7b:e8:24:70:79:e8:ec:bf:85:
5a:a4:e5:d1:30:16:bf:a0:f9:2c:ea:ef:e0:74:c1:
0f:60:8d:98:27:a5:8b:fc:e9:e4:7f:09:ea:6e:d9:
67:2b:04:ec:4f:f4:c9:5c:cb:94:ae:bb:06:1d:6d:
af:9f:97:78:0a:dd:32:a4:d7:87:04:30:79:98:ce:
ad:d5:c0:24:aa:89:bd:57:43:ad:bc:71:cd:c5:f4:
99:da:41:e7:e0:94:7a:64:54:44:f0:8e:13:2d:a0:
3b:9b:e9:24:72:a1:62:b4:8f:73:07:77:30:06:ca:
59:b7:a8:99:7e:46:3e:48:af:6c:bc:dd:bc:53:e8:
c2:dd:4c:24:1f:49:7e:e4:23:9d:f0:7c:54:28:75:
18:93:93:48:ac:65:4c:be:a8:67:9f:17:22:ca:ff:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:8E:67:80:F8:64:79:24:00:BC:78:42:EB:5E:10:9A:D6:BB:1E
X509v3 Authority Key Identifier:
keyid:77:22:3C:7D:F2:4B:51:55:22:33:ED:F7:0E:DC:05:FA:AA:74:14:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/25/77223C7DF24B51552233EDF70EDC05FAAA74141E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyI8ffJLUVUiM-33DtwF-qp0FB4.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:7f:59:47:05:9d:9f:ae:73:13:d7:e7:97:48:6a:53:e3:9a:
d3:48:ea:4a:eb:3c:98:fc:c2:2e:f2:09:3e:d6:b8:44:ff:92:
92:5f:bc:4b:84:30:9e:e9:fc:a8:c2:7f:a6:55:0e:fa:2f:55:
3c:eb:48:5f:0c:a3:b2:18:f1:87:89:2b:3b:2a:49:1f:c5:95:
85:2e:c3:61:58:8f:6d:f8:9f:b2:3f:0b:80:77:aa:63:9c:19:
61:b9:76:98:ce:2e:95:7e:42:cc:c1:83:4d:6f:53:8b:28:10:
fc:77:33:fd:f7:c2:e4:e5:0f:cf:14:7d:63:0f:09:24:c9:7e:
21:ed:9a:9b:25:e8:8b:40:1d:cc:e8:45:26:65:81:35:f3:af:
aa:d2:b7:e3:64:5f:6f:29:0c:24:de:fa:f5:5d:61:02:7e:cc:
a9:25:a7:1b:61:d2:17:f3:01:fc:7a:02:c8:2e:0d:1e:dd:3f:
d7:ef:8f:34:a2:fb:4f:15:90:dc:8f:11:2c:8b:12:f8:7d:62:
06:42:b3:fa:c1:2c:01:7a:de:c3:42:76:7c:9f:48:07:26:9f:
f5:11:a4:6f:6a:b6:61:db:0d:6a:86:aa:f7:4b:c6:c8:25:f3:
11:08:05:7c:c0:83:f3:97:ad:b4:db:d7:03:cd:30:eb:69:cc:
42:a5:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org