Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e20313937373330.roa
File: 3134362e31392e3131322e302f32342d3234203d3e20313937373330.roa (raw, json)
Hash identifier: zE1aWg6ptHN80Ar+QIpuUVjP658S+VKAUtmizbep29Y=
Subject key identifier: D3:03:91:DB:58:A6:B4:0C:7F:45:56:66:14:E8:A2:FF:1F:E6:4B:CF
Certificate issuer: /CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
Certificate serial: 78E34AA8773B204D2AE52E175D6D48C5E9D13146
Authority key identifier: 20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer
Subject info access: rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e20313937373330.roa
Signing time: Tue 05 Dec 2023 05:35:03 +0000
ROA not before: Tue 05 Dec 2023 05:30:03 +0000
ROA not after: Tue 03 Dec 2024 05:35:03 +0000
asID: 197730
IP address blocks: 146.19.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e3:4a:a8:77:3b:20:4d:2a:e5:2e:17:5d:6d:48:c5:e9:d1:31:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
Validity
Not Before: Dec 5 05:30:03 2023 GMT
Not After : Dec 3 05:35:03 2024 GMT
Subject: CN=D30391DB58A6B40C7F45566614E8A2FF1FE64BCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:5b:43:2a:ad:cf:76:3c:5f:97:85:88:1a:
39:56:1a:11:7e:64:00:68:5d:6c:7e:c9:bd:aa:46:
d0:d9:2f:a9:aa:f0:24:31:cf:7a:08:0d:64:a9:b0:
7e:a0:8f:b2:92:fe:fe:d1:89:0b:0a:06:a6:e6:b3:
0a:0b:c7:d4:70:48:18:d6:fc:14:88:b3:e1:90:0b:
4e:ff:72:8f:a0:7f:a5:ba:a2:60:53:b0:68:8d:9a:
95:ba:c3:b7:24:3f:5a:5c:13:2f:a3:e1:a5:da:a0:
70:96:7c:9b:00:ab:71:f5:c0:46:92:c1:f9:26:14:
1a:fd:16:88:9e:d4:64:a6:eb:fc:22:9b:db:83:5d:
84:bf:2f:eb:b7:a3:a5:4c:92:06:c5:4a:78:bc:c6:
c2:a0:71:ec:de:32:6d:5f:bd:00:e6:61:ca:68:55:
99:24:42:c2:02:3e:f5:65:35:8d:a0:66:c2:80:6c:
54:95:31:3a:ce:82:a5:e7:42:23:d4:a3:eb:a2:a5:
54:d4:ff:99:33:fb:d2:3d:17:30:1d:39:a5:bf:2a:
2e:a3:a7:5f:40:fb:9e:10:c8:49:6c:8b:66:8e:91:
e0:fe:7c:81:c5:14:2c:3d:7a:71:e6:0b:85:dc:a6:
2d:db:19:92:c6:42:bc:7b:67:8e:35:80:ed:e8:31:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:03:91:DB:58:A6:B4:0C:7F:45:56:66:14:E8:A2:FF:1F:E6:4B:CF
X509v3 Authority Key Identifier:
keyid:20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/8/20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e20313937373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.112.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ec:1e:90:dc:62:29:3a:43:50:da:fe:9e:b2:ee:39:97:b8:
13:bf:d0:61:22:17:35:cf:93:4b:87:83:e7:18:a6:e8:e8:f1:
bf:39:99:15:f4:b4:26:72:86:b0:00:6b:53:f3:39:59:7b:48:
44:6a:68:51:d7:07:d0:f5:1f:7a:5d:f5:da:52:f8:de:bf:e1:
b3:ed:4a:5c:24:57:da:73:ae:ee:df:1e:30:21:31:07:00:67:
88:f3:40:73:91:bb:e8:b0:08:98:6d:1c:b6:bb:67:dc:ed:fc:
78:05:24:0b:fc:b4:48:1f:ce:59:28:75:48:50:bd:62:1c:94:
ec:00:af:2e:0e:01:2b:18:c2:3b:7b:0c:cd:78:5c:37:1f:95:
34:d1:83:a4:7a:80:05:0b:77:e0:b2:0e:7d:8d:4f:f6:1b:05:
fb:e9:95:10:b9:5c:f8:e0:84:72:ec:07:58:87:39:60:af:02:
76:af:c3:6e:89:e1:55:d5:d1:1e:7b:d9:ed:e6:4e:87:07:ac:
e7:1d:8b:d2:d9:d7:21:1a:7b:b7:e3:e0:e3:b2:f3:6c:6c:9e:
97:f3:a9:6a:3e:97:5e:ac:54:1a:95:1b:fb:ab:a4:61:11:e5:
25:c7:6c:04:d9:3c:af:a9:b0:34:6e:a9:1b:60:18:ee:3b:06:
6e:89:80:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 13:15:47 2023 by rpki-client on console-ams.rpki-client.org