Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e2038383838.roa
File: 3138352e3132322e3230372e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: SRM5EkJ55sE0zdgt8GPQqJTPsb0RcFZs5Fizp9/9HZk=
Subject key identifier: 8A:9A:1E:E3:EC:D1:3D:CA:5D:F5:F0:67:DF:26:FC:7C:1A:6D:C4:57
Certificate issuer: /CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
Certificate serial: 4DC97D408520CB54966AEF158DBAD04E15BDC02C
Authority key identifier: 75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer
Subject info access: rsync://0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e2038383838.roa
Signing time: Fri 22 Sep 2023 10:19:37 +0000
ROA not before: Fri 22 Sep 2023 10:14:37 +0000
ROA not after: Fri 20 Sep 2024 10:19:37 +0000
asID: 8888
IP address blocks: 185.122.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c9:7d:40:85:20:cb:54:96:6a:ef:15:8d:ba:d0:4e:15:bd:c0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
Validity
Not Before: Sep 22 10:14:37 2023 GMT
Not After : Sep 20 10:19:37 2024 GMT
Subject: CN=8A9A1EE3ECD13DCA5DF5F067DF26FC7C1A6DC457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:24:01:8c:b4:1f:01:26:af:4f:5f:1d:b4:
74:5b:d2:69:33:1b:a3:08:ee:0c:c6:9c:9f:ac:ee:
14:00:ca:27:15:43:27:3f:97:1c:df:dc:a2:61:f9:
a2:27:e3:24:b8:06:02:05:1c:09:2b:b6:b6:00:63:
d5:b8:0a:d5:10:a9:a3:69:b4:8e:c4:01:6e:a0:b2:
db:39:f1:2e:aa:51:22:49:65:fe:6b:20:5f:79:b9:
64:43:70:85:88:00:42:a1:c7:61:65:27:f5:c5:68:
ec:61:1d:6e:d7:b6:a4:6b:f3:24:32:90:32:4b:90:
8b:8e:b9:f8:6d:8c:e3:b6:84:9d:91:5a:86:f0:f2:
37:26:12:3c:77:70:03:31:7b:5e:da:ed:db:83:19:
d5:45:11:d7:55:e0:a6:66:e9:8e:2e:3a:66:bf:53:
5d:41:33:39:7c:e6:7d:2a:22:84:d2:ca:d5:e6:09:
43:fd:cf:ac:9a:9d:5b:00:f7:5a:05:01:6d:e3:c5:
72:3b:e6:fd:13:47:40:0a:4e:9f:e7:80:8f:ff:0d:
2d:f9:92:29:65:a5:5f:ad:e3:85:9f:f8:0b:68:aa:
28:92:c8:be:07:6a:c9:7d:8b:04:b9:fb:ee:2d:f7:
d8:a6:05:8e:57:3f:18:f4:98:be:fe:85:5e:ca:12:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9A:1E:E3:EC:D1:3D:CA:5D:F5:F0:67:DF:26:FC:7C:1A:6D:C4:57
X509v3 Authority Key Identifier:
keyid:75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/29/7542E5AC037FDD3DD15E6579917FA4EC50F4621E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.207.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e4:30:b9:76:b9:c7:17:2d:fd:9b:fe:38:15:64:51:0d:88:
f2:2f:da:b1:57:c3:7e:71:a7:2b:f9:01:4d:40:4a:56:c6:0e:
68:94:d9:e5:56:55:18:0f:2b:dc:bc:0a:ac:d5:c3:e8:51:78:
b7:d0:17:99:3c:4f:b1:70:73:a5:50:08:54:32:05:02:f1:e0:
fd:e9:aa:85:88:ca:7f:47:6b:80:41:d8:0c:ab:6d:32:98:0f:
75:f8:17:2f:44:0b:f3:43:2d:5b:8a:fd:9d:9e:f9:6c:40:db:
af:a6:ec:74:af:5a:48:6f:8b:d2:69:62:a7:c9:ce:b5:e9:81:
19:66:6d:5f:4f:0b:a7:83:5e:94:bf:f3:42:b8:eb:06:f6:8b:
1e:1c:32:93:0d:cf:fc:b8:44:84:49:51:08:7f:68:58:3d:7d:
2b:af:b1:cd:2d:12:dd:68:18:9f:1b:22:44:5e:66:14:fc:99:
22:6e:82:c7:bf:0a:a3:d2:e1:e9:7d:24:a9:a7:e7:b1:4d:91:
89:4a:90:1d:42:96:b0:ba:d0:9c:a3:6c:88:55:da:bb:6c:47:
a2:1e:37:e1:21:5d:28:d4:b9:b1:85:5d:5b:80:41:84:ba:6e:
75:a0:98:be:7b:35:6d:56:ae:62:13:30:d7:d7:81:47:a4:0e:
1b:aa:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 17:17:02 2024 by rpki-client on console-ams.rpki-client.org