Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e20313337323633.roa
File: 3138352e3132322e3230372e302f32342d3234203d3e20313337323633.roa (raw, json)
Hash identifier: rE/KKwPsQ4X+nYIUHPRdnnqucCDpSiRswTatLjs6Lu8=
Subject key identifier: A3:3A:43:49:3B:67:21:1D:A7:96:C0:01:E5:8D:CB:A0:ED:4C:43:14
Certificate issuer: /CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
Certificate serial: 3E05B3055699A57503ED651A9D4621AEA4D2CA61
Authority key identifier: 75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer
Subject info access: rsync://0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e20313337323633.roa
Signing time: Mon 17 Apr 2023 03:18:37 +0000
ROA not before: Mon 17 Apr 2023 03:13:37 +0000
ROA not after: Mon 15 Apr 2024 03:18:37 +0000
asID: 137263
IP address blocks: 185.122.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:05:b3:05:56:99:a5:75:03:ed:65:1a:9d:46:21:ae:a4:d2:ca:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
Validity
Not Before: Apr 17 03:13:37 2023 GMT
Not After : Apr 15 03:18:37 2024 GMT
Subject: CN=A33A43493B67211DA796C001E58DCBA0ED4C4314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:53:98:2d:fd:ac:7d:3d:ae:56:89:2b:05:
95:85:fe:7b:c6:9f:93:34:39:b7:25:af:b4:0d:07:
c4:98:1a:e4:de:ff:6d:3d:e5:c8:8d:23:40:cf:b2:
bd:4d:48:27:9f:f6:29:d2:1a:d6:40:35:e9:09:68:
c6:f8:e9:42:06:4a:27:ba:83:37:cb:f1:78:bc:f1:
30:f7:35:a0:e9:d3:ca:01:fb:23:48:ed:d8:d0:0f:
36:1e:1d:1e:60:55:91:71:22:c4:e4:1f:44:1b:14:
f5:4d:a6:59:83:4e:b5:1c:43:ec:a8:ad:39:e4:0c:
c6:90:87:15:45:ac:ef:0e:f9:fd:44:bc:7f:da:e2:
21:0f:f0:a4:b0:e7:4e:f3:4e:cb:39:27:27:81:fa:
67:de:75:e3:45:7b:45:49:15:c3:d6:fe:b7:2b:c6:
36:04:13:ce:8d:ab:9d:0a:ed:59:3a:5a:4c:a5:b9:
4e:eb:c3:9b:4a:aa:43:8f:26:dd:6b:d7:a0:69:0e:
f7:77:ee:f7:82:e3:7d:e0:32:86:57:dd:11:23:fb:
ec:76:f1:55:aa:a6:56:a1:da:51:b4:42:e5:80:8a:
8a:27:49:23:fb:46:f2:37:82:3a:50:29:93:1e:dc:
af:72:01:db:dd:1f:ac:9c:0a:0d:33:85:3b:d6:4f:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3A:43:49:3B:67:21:1D:A7:96:C0:01:E5:8D:CB:A0:ED:4C:43:14
X509v3 Authority Key Identifier:
keyid:75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/29/7542E5AC037FDD3DD15E6579917FA4EC50F4621E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e20313337323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.207.0/24
Signature Algorithm: sha256WithRSAEncryption
22:28:94:c3:4f:5e:96:fe:38:2c:9a:05:01:b1:58:9b:cc:8d:
63:69:17:76:e8:91:06:d3:e0:7b:51:e2:07:09:e7:eb:6b:a6:
12:7f:49:da:72:6c:b2:21:d5:76:25:0a:56:7a:ff:bc:d6:7c:
f6:e4:55:98:c1:29:b3:70:f7:03:c8:f6:5d:4f:34:24:81:7d:
d9:21:a8:ce:a5:97:a7:97:75:44:72:bc:b0:6c:71:d1:59:2e:
fc:9a:17:68:e6:03:54:f1:41:13:3e:6f:7f:01:59:45:ae:bf:
d7:94:b5:2c:24:67:9d:fb:d4:50:f2:05:80:b9:4d:13:d8:1a:
a4:52:00:67:c4:ec:56:cc:1d:55:58:80:da:7e:91:fd:88:4a:
10:da:c2:6d:2a:92:38:73:92:01:52:01:22:08:33:20:d0:8d:
42:28:62:3d:31:2a:1e:1d:90:f4:33:87:30:84:ab:a8:55:69:
56:39:af:12:3c:74:1f:e5:ba:2d:e9:f7:68:a6:d4:db:aa:db:
47:7a:c2:93:6b:89:1c:8d:a5:98:52:c3:55:64:d6:03:d3:b0:
97:11:c5:23:72:50:54:3d:44:69:61:70:e8:e3:63:41:63:6e:
6f:11:a7:72:67:82:fc:28:ce:f6:34:1d:8a:2c:57:e6:11:d8:
9d:94:2c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 17:17:02 2024 by rpki-client on console-ams.rpki-client.org