Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e203134363138.roa
File: 3134362e31392e3131322e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: 1A/O0jceHye+ft9mj+W+lxmNUFj7p2y/QBQbg1EFuG8=
Subject key identifier: CA:74:6A:7D:F6:F8:5C:5E:DA:25:8C:DA:ED:42:52:B7:0E:6E:DE:4F
Certificate issuer: /CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
Certificate serial: 6FAEA1B518981749D77B7BC3BC4707DB77DC3569
Authority key identifier: 20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer
Subject info access: rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e203134363138.roa
Signing time: Tue 05 Dec 2023 05:53:14 +0000
ROA not before: Tue 05 Dec 2023 05:48:14 +0000
ROA not after: Tue 03 Dec 2024 05:53:14 +0000
asID: 14618
IP address blocks: 146.19.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ae:a1:b5:18:98:17:49:d7:7b:7b:c3:bc:47:07:db:77:dc:35:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
Validity
Not Before: Dec 5 05:48:14 2023 GMT
Not After : Dec 3 05:53:14 2024 GMT
Subject: CN=CA746A7DF6F85C5EDA258CDAED4252B70E6EDE4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:59:a8:01:3b:87:22:3d:84:bb:10:47:d7:
a9:86:87:9b:76:de:58:c3:37:3d:d5:cd:b1:40:4e:
6a:9c:be:af:5f:07:e0:fa:32:ae:5f:d0:9d:ee:98:
48:65:7a:8c:59:0f:f3:74:21:7b:01:ad:12:24:59:
d4:4a:8c:39:73:29:91:2a:29:ed:8a:f5:0d:79:84:
d3:50:bd:4a:8b:4d:0b:18:a0:af:dd:2a:63:29:7b:
cf:89:cc:52:fd:cd:7e:91:d0:39:30:93:6d:e7:dc:
df:89:0b:6b:f3:99:04:83:39:c2:fd:a9:5b:3e:95:
b7:b8:f6:aa:5d:7c:93:6e:94:47:4a:58:5c:5e:da:
bc:3d:54:fe:9c:ec:4d:24:bd:29:0b:c4:88:b3:e2:
b5:39:dd:90:35:11:7f:85:61:5b:2b:5a:50:3e:9f:
75:2d:bb:0f:bd:2b:01:b1:79:d1:30:af:8e:00:2e:
45:09:2b:12:f1:22:15:46:1b:f7:90:b0:df:f2:57:
64:0c:75:d1:7b:f1:c6:4d:9d:72:36:e7:4f:fd:3c:
a6:00:3d:0a:8e:8b:a3:f7:b7:c9:f1:de:fa:88:b5:
53:0b:8d:6c:e6:a9:43:c2:98:c7:7b:8c:28:d4:94:
12:74:89:25:93:1b:67:93:fe:b1:f5:0a:74:5c:2d:
3d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:6A:7D:F6:F8:5C:5E:DA:25:8C:DA:ED:42:52:B7:0E:6E:DE:4F
X509v3 Authority Key Identifier:
keyid:20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/8/20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2f:a1:86:8b:4f:f5:4e:ac:a1:24:c5:1c:41:58:55:2e:b1:
94:dc:86:9d:26:b6:3a:1a:3c:03:43:18:54:58:9b:d2:84:70:
56:10:31:9c:12:cf:78:8c:84:9b:75:9a:4e:36:7d:ed:3e:d6:
a1:5a:b1:c5:e7:d7:41:88:d9:31:32:c2:6d:27:ad:98:33:13:
97:b8:7f:ac:5c:bb:e1:85:1e:45:d8:ef:fc:80:7e:9d:eb:a8:
75:6b:2a:96:40:77:46:5c:1c:2f:62:10:b9:45:85:94:b7:38:
89:5b:13:91:a5:7b:c4:76:77:99:6b:70:d0:6b:c8:ca:d3:2b:
de:ee:c8:52:25:65:8c:51:64:b5:14:91:00:22:b8:51:a2:2f:
48:a0:f9:32:22:87:57:b6:b0:41:75:30:8a:26:fc:cd:5a:03:
92:45:d8:b0:23:19:e5:54:81:98:83:2c:d3:75:e9:ef:2b:a2:
67:32:3c:af:b9:fc:35:10:23:b0:c6:70:05:9a:5c:0a:ce:b2:
fb:84:96:ba:8c:30:39:a8:58:f0:01:6d:a8:ca:8c:e4:59:b8:
b4:34:36:b3:58:53:db:3b:0a:43:58:cd:23:d4:f2:24:a8:42:
aa:8c:50:14:d3:5b:a1:77:3f:e2:84:68:ba:21:7c:9d:dc:8b:
3e:8a:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 13:15:47 2023 by rpki-client on console-ams.rpki-client.org