Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e20313336383937.roa
File: 3138352e3132322e3230372e302f32342d3234203d3e20313336383937.roa (raw, json)
Hash identifier: AQrx9XqrPzpb9JYDkZWkL3be4eyPwHH0ao4V7wfOV4U=
Subject key identifier: 17:5B:4E:26:A8:90:3F:93:0F:3D:C0:4D:75:71:DE:52:DA:D3:57:7F
Certificate issuer: /CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
Certificate serial: 2CDCDB15B7ED8F3DE0FB00D6DC65F30F12B2C646
Authority key identifier: 75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer
Subject info access: rsync://0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e20313336383937.roa
Signing time: Fri 10 Mar 2023 09:13:56 +0000
ROA not before: Fri 10 Mar 2023 09:08:56 +0000
ROA not after: Fri 08 Mar 2024 09:13:56 +0000
asID: 136897
IP address blocks: 185.122.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:dc:db:15:b7:ed:8f:3d:e0:fb:00:d6:dc:65:f3:0f:12:b2:c6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
Validity
Not Before: Mar 10 09:08:56 2023 GMT
Not After : Mar 8 09:13:56 2024 GMT
Subject: CN=175B4E26A8903F930F3DC04D7571DE52DAD3577F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:2d:c6:35:81:83:c6:48:f3:72:1e:e3:2e:
04:7b:57:7e:c4:7a:23:4d:ac:b4:7f:60:23:e6:a2:
11:35:4d:4c:f7:33:21:f9:f5:15:66:98:28:76:c1:
f7:2e:2f:73:69:55:0b:54:9a:26:53:63:d0:84:57:
4d:68:66:8c:61:34:a2:ce:ae:c5:bd:9f:7a:05:ec:
13:b9:32:b2:9e:7d:44:fc:ed:15:5e:b1:a4:c7:dc:
ea:4e:ba:cf:3d:d6:7a:f2:b7:ea:91:38:7d:17:e4:
dc:2d:7c:7a:76:77:f7:0f:f0:d2:3d:c5:a4:1d:a8:
62:95:e1:92:5f:88:8f:e5:87:26:17:99:3f:58:31:
a7:92:e0:92:e0:e5:8c:53:95:71:6d:13:78:2d:aa:
b6:ce:de:58:5f:30:bc:bd:7d:15:65:25:00:3f:e6:
a0:c3:a6:5d:95:9b:55:bd:a0:a3:e0:f2:08:5f:1a:
fa:49:7a:4a:da:57:dc:5f:29:40:ce:21:2a:ab:2e:
9e:a2:be:e2:f1:97:34:c8:cc:5b:51:89:86:fd:f4:
29:ad:01:3c:08:09:8d:c1:9d:bd:45:1a:69:e2:78:
cf:32:6e:24:65:51:d6:b1:73:a7:30:d5:49:4d:5f:
75:40:01:61:4b:85:a4:12:5e:ae:8a:b2:0e:dd:3f:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:4E:26:A8:90:3F:93:0F:3D:C0:4D:75:71:DE:52:DA:D3:57:7F
X509v3 Authority Key Identifier:
keyid:75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/29/7542E5AC037FDD3DD15E6579917FA4EC50F4621E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e20313336383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.207.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d6:b0:d9:70:5e:1d:48:b2:52:81:3d:a1:6b:c5:25:55:e2:
e9:37:ba:5f:99:36:84:1a:02:85:d9:dc:63:df:58:08:50:98:
25:d5:2e:a5:54:33:aa:d3:bc:09:e4:af:19:6e:91:87:59:52:
df:4d:d7:0a:f5:dc:ee:13:39:17:06:03:43:90:5c:0a:ba:a7:
ac:68:22:af:7e:00:f8:51:e5:09:71:b5:56:5d:80:ca:46:2a:
92:04:67:66:7c:0c:06:d8:95:6f:2f:5f:22:59:ef:b6:f4:e5:
4d:27:65:b1:90:7e:be:de:50:ef:78:20:77:6e:56:ee:70:7e:
72:5d:b5:30:ad:75:d7:a0:06:00:36:d2:47:58:fa:ff:0e:87:
d9:8a:b4:45:78:c5:f4:d7:e5:c2:0b:c0:5f:31:45:e7:7e:1d:
62:ad:89:2d:a7:71:0a:e9:ef:3a:ca:ff:39:40:db:48:fa:66:
c3:d0:6c:7d:bc:20:db:35:df:b0:a5:26:cf:16:31:2c:43:5d:
0c:31:00:a3:03:ae:04:ed:6f:ab:60:c6:7c:ea:1c:a3:57:a8:
4f:7a:e7:be:82:12:1f:23:f6:1d:f9:08:a3:0b:9b:4f:23:f7:
94:96:c0:0e:53:83:4c:38:34:11:65:e7:76:0e:d0:86:04:6d:
c4:01:b5:aa
-----BEGIN CERTIFICATE-----
MIIEtjCCA56gAwIBAgIULNzbFbftjz3g+wDW3GXzDxKyxkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU0MmU1YWMwMzdmZGQzZGQxNWU2NTc5OTE3ZmE0ZWM1
MGY0NjIxZTAeFw0yMzAzMTAwOTA4NTZaFw0yNDAzMDgwOTEzNTZaMDMxMTAvBgNV
BAMTKDE3NUI0RTI2QTg5MDNGOTMwRjNEQzA0RDc1NzFERTUyREFEMzU3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUi3GNYGDxkjzch7jLgR7V37E
eiNNrLR/YCPmohE1TUz3MyH59RVmmCh2wfcuL3NpVQtUmiZTY9CEV01oZoxhNKLO
rsW9n3oF7BO5MrKefUT87RVesaTH3OpOus891nryt+qROH0X5NwtfHp2d/cP8NI9
xaQdqGKV4ZJfiI/lhyYXmT9YMaeS4JLg5YxTlXFtE3gtqrbO3lhfMLy9fRVlJQA/
5qDDpl2Vm1W9oKPg8ghfGvpJekraV9xfKUDOISqrLp6ivuLxlzTIzFtRiYb99Cmt
ATwICY3Bnb1FGmnieM8ybiRlUdaxc6cw1UlNX3VAAWFLhaQSXq6Ksg7dP4XdAgMB
AAGjggHAMIIBvDAdBgNVHQ4EFgQUF1tOJqiQP5MPPcBNdXHeUtrTV38wHwYDVR0j
BBgwFoAUdULlrAN/3T3RXmV5kX+k7FD0Yh4wDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzI5Lzc1NDJFNUFDMDM3
RkREM0REMTVFNjU3OTkxN0ZBNEVDNTBGNDYyMUUuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kVUxsckFOXzNUM1JYbVY1a1gtazdGRDBZaDQuY2VyMHIGCCsGAQUF
BwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjkvMzEz
ODM1MmUzMTMyMzIyZTMyMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMz
NjM4MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALl6zzANBgkqhkiG9w0BAQsFAAOCAQEAlNaw2XBe
HUiyUoE9oWvFJVXi6Te6X5k2hBoChdncY99YCFCYJdUupVQzqtO8CeSvGW6Rh1lS
303XCvXc7hM5FwYDQ5BcCrqnrGgir34A+FHlCXG1Vl2AykYqkgRnZnwMBtiVby9f
IlnvtvTlTSdlsZB+vt5Q73ggd25W7nB+cl21MK1116AGADbSR1j6/w6H2Yq0RXjF
9NflwgvAXzFF534dYq2JLadxCunvOsr/OUDbSPpmw9Bsfbwg2zXfsKUmzxYxLENd
DDEAowOuBO1vq2DGfOoco1eoT3rnvoISHyP2HfkIowubTyP3lJbADlODTDg0EWXn
dg7QhgRtxAG1qg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org