Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e203136353039.roa
File: 3134362e31392e3131322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: DJWuOBgr6HtU3vOSU6Idrojmbog9S50TfqPyQB3hO8o=
Subject key identifier: 32:47:AE:ED:70:D2:7A:F6:36:96:09:D8:60:18:00:D2:D2:82:2F:21
Certificate issuer: /CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
Certificate serial: 7414C4C04A784FCF962086085BB2DE358EB1E7E4
Authority key identifier: 20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer
Subject info access: rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e203136353039.roa
Signing time: Tue 05 Dec 2023 05:53:31 +0000
ROA not before: Tue 05 Dec 2023 05:48:31 +0000
ROA not after: Tue 03 Dec 2024 05:53:31 +0000
asID: 16509
IP address blocks: 146.19.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:14:c4:c0:4a:78:4f:cf:96:20:86:08:5b:b2:de:35:8e:b1:e7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
Validity
Not Before: Dec 5 05:48:31 2023 GMT
Not After : Dec 3 05:53:31 2024 GMT
Subject: CN=3247AEED70D27AF6369609D8601800D2D2822F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:f7:c4:84:66:2c:48:7f:1f:db:b8:02:f6:
bb:f6:56:de:0e:f9:02:0e:72:9b:ec:73:93:9e:08:
6c:91:d3:1b:27:44:dd:ad:f1:30:61:ac:65:40:2e:
11:fb:ed:d3:34:59:95:ab:e4:00:a4:25:77:3d:22:
b2:79:6f:a1:97:b9:cf:af:b4:6b:c3:53:3e:68:46:
50:94:2b:b0:76:7b:44:42:11:a3:da:f5:55:c6:96:
32:ac:7c:c5:f8:ca:ad:4d:b5:ae:25:5b:ac:a2:31:
68:53:4f:ad:39:c0:08:c8:1c:0b:2a:62:30:f4:39:
10:cd:02:08:68:30:1b:02:0f:97:bd:bf:56:54:4a:
7f:bb:36:9d:43:91:87:e5:76:0a:08:a8:cd:1f:98:
cf:70:65:b8:ba:49:c4:b9:7e:6c:4f:94:9b:9a:a4:
c4:c0:1c:d2:33:d9:f9:0a:67:0d:d1:d2:52:40:fa:
68:c7:7c:f2:1b:a7:25:d4:1d:10:10:ab:9f:43:75:
41:cd:fc:28:93:ad:cd:39:8e:9b:b8:a3:22:af:28:
5e:4f:0d:70:d2:4d:a0:31:9b:20:79:a3:9f:49:9a:
1b:ea:50:80:33:d3:ae:61:8c:a4:e7:19:fb:f7:80:
11:56:fe:39:72:bd:4d:59:78:70:68:ae:1f:0f:47:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:47:AE:ED:70:D2:7A:F6:36:96:09:D8:60:18:00:D2:D2:82:2F:21
X509v3 Authority Key Identifier:
keyid:20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/8/20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.112.0/24
Signature Algorithm: sha256WithRSAEncryption
45:fe:13:f2:77:b7:b1:ef:fc:fe:6b:92:61:24:de:cc:06:0d:
5e:a1:27:2e:8b:1d:5e:70:82:7c:84:a9:43:ea:f0:9a:10:b0:
c0:19:11:e3:a9:58:d6:56:4e:2e:d0:78:b4:78:12:da:38:a1:
d0:71:3b:25:4b:e0:c6:b9:fe:27:7e:84:7c:fe:ab:48:97:d4:
ab:ec:eb:1a:3a:0d:48:7e:9c:fc:26:fd:d1:b2:8d:30:28:f3:
ed:d3:7a:f4:73:96:20:8f:c7:a2:0f:c8:9c:14:0b:1b:c6:55:
ac:84:ac:2c:a8:20:e2:d3:81:7c:eb:f4:0d:ba:1d:da:6e:73:
87:41:9b:c4:f0:de:7b:c4:29:52:72:cf:b6:08:a3:37:43:9b:
d2:31:a1:e2:82:ff:74:2f:5d:1a:70:e7:a8:ba:28:b6:c5:78:
b4:1a:8d:c8:8b:db:e4:93:cc:ea:03:6a:cd:2c:c4:09:b4:8b:
2a:47:72:a2:01:a3:3e:22:f9:02:88:de:3d:03:07:4c:fb:36:
48:fc:ba:a8:1c:53:b0:9a:01:c1:24:d4:22:3c:d3:16:14:90:
bb:ee:b7:fa:25:86:89:7a:93:8a:ee:8a:9d:5d:df:18:f3:77:
7d:bc:a6:b4:da:0d:d3:55:b4:e8:d5:c3:0c:17:99:55:f2:0b:
bd:2b:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 13:15:47 2023 by rpki-client on console-ams.rpki-client.org