Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/40/3231332e3233322e3233382e302f32342d3234203d3e203134363138.roa
File: 3231332e3233322e3233382e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: AnG4YL6y8K8P5tq7owTTJQgFmsE7MbalpJygKyILMso=
Subject key identifier: 0D:EC:1C:CE:FA:A9:C8:D2:03:2B:9C:EA:69:80:92:E3:ED:01:C2:38
Certificate issuer: /CN=dcd78eab86a4645956b555a449f72cbabfd43b9e
Certificate serial: 085445D3917C5C9724A3884E7EF9D7A96A936198
Authority key identifier: DC:D7:8E:AB:86:A4:64:59:56:B5:55:A4:49:F7:2C:BA:BF:D4:3B:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NeOq4akZFlWtVWkSfcsur_UO54.cer
Subject info access: rsync://0.sb/repo/sb/40/3231332e3233322e3233382e302f32342d3234203d3e203134363138.roa
Signing time: Fri 03 Nov 2023 17:34:48 +0000
ROA not before: Fri 03 Nov 2023 17:29:48 +0000
ROA not after: Fri 01 Nov 2024 17:34:48 +0000
asID: 14618
IP address blocks: 213.232.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:54:45:d3:91:7c:5c:97:24:a3:88:4e:7e:f9:d7:a9:6a:93:61:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd78eab86a4645956b555a449f72cbabfd43b9e
Validity
Not Before: Nov 3 17:29:48 2023 GMT
Not After : Nov 1 17:34:48 2024 GMT
Subject: CN=0DEC1CCEFAA9C8D2032B9CEA698092E3ED01C238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:2d:60:f6:28:59:ad:13:8f:8f:ed:ff:51:
e8:69:4d:a9:93:40:8f:7d:f5:29:05:b4:19:10:e4:
33:36:16:9e:c1:f5:c6:52:4e:14:12:a1:b4:1e:cc:
cc:35:c0:b9:49:09:7e:f4:0d:fe:b6:79:1f:7b:f3:
d8:aa:f0:62:22:6d:1c:3e:41:4c:17:e1:41:48:53:
65:9c:92:e3:49:d9:ec:63:9d:61:f3:64:71:75:0d:
a4:70:97:d3:a2:09:cb:8e:4e:4d:5b:9a:35:e3:fe:
9f:43:cc:d6:d5:be:b3:9e:13:57:4c:0f:5b:bb:82:
e2:12:12:ef:0c:8d:d9:6f:ef:57:16:2b:ca:a5:3d:
46:c0:73:61:c2:2a:d3:f9:da:9a:33:83:e9:bd:2b:
d4:2d:97:4e:7e:c7:c5:eb:dc:79:f7:07:6d:5c:2b:
af:56:92:c4:30:54:30:45:77:82:c3:68:88:26:a9:
f6:f2:36:b4:a8:38:59:de:78:4f:95:86:db:31:e4:
fd:72:4f:98:b4:6a:c6:09:0b:9c:25:17:e8:87:38:
c1:64:a3:18:dd:b6:a3:da:70:bd:2a:c2:19:e8:47:
7e:98:95:ca:25:9e:6e:9b:04:05:da:9c:c3:44:ed:
0b:7e:6e:a7:18:96:86:20:c5:cd:91:62:70:68:7f:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EC:1C:CE:FA:A9:C8:D2:03:2B:9C:EA:69:80:92:E3:ED:01:C2:38
X509v3 Authority Key Identifier:
keyid:DC:D7:8E:AB:86:A4:64:59:56:B5:55:A4:49:F7:2C:BA:BF:D4:3B:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/40/DCD78EAB86A4645956B555A449F72CBABFD43B9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NeOq4akZFlWtVWkSfcsur_UO54.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/40/3231332e3233322e3233382e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e9:7f:26:7f:68:e2:c8:34:d3:07:1f:b5:08:a0:05:ee:47:
c8:6a:a0:4a:01:7e:78:27:3d:88:b6:cc:09:ad:56:cb:9f:53:
87:4e:04:28:35:62:8a:48:89:f5:1d:7a:98:1d:ef:6b:0a:55:
af:64:e3:4a:b8:66:a5:cd:f8:a5:ed:7e:3d:48:ea:cd:23:12:
c1:fe:10:17:fc:34:75:ff:87:b9:cb:f6:f1:6b:0f:f5:22:d8:
82:48:d6:7d:8c:b1:d4:de:8b:10:d7:0b:4e:9a:31:05:37:b8:
41:8e:93:00:a5:94:59:46:6e:66:17:78:a0:6f:53:16:b8:8f:
c6:33:de:d5:7f:75:19:69:b0:f9:1c:1c:fb:7e:ab:1f:e8:8b:
29:2a:e7:5c:a4:b8:41:70:96:fe:db:fe:30:42:e1:14:2d:56:
69:47:f8:17:7d:46:85:c3:65:39:b3:24:72:81:ce:62:44:24:
ca:21:e8:8d:94:17:fc:16:ba:60:bf:18:13:fe:ff:f7:d5:47:
05:40:a7:4d:0c:4c:05:2d:b2:c5:eb:35:86:e9:20:3f:5c:62:
6f:b8:6c:80:1e:10:13:ad:01:84:49:86:04:53:35:39:0d:e1:
90:9a:66:7f:10:f5:67:9a:58:d2:36:70:c1:e1:50:3d:76:bc:
c1:5f:9d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 12:34:10 2023 by rpki-client on console-fra.rpki-client.org