Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3132382e3232322e302f32342d3234203d3e203535393333.roa
File: 34352e3132382e3232322e302f32342d3234203d3e203535393333.roa (raw, json)
Hash identifier: 5Soz9u0gqRFjI68ZC24As1f8U3aOaWLl0X4Qsi8n5o8=
Subject key identifier: DA:07:7C:EC:9A:79:EB:6F:C5:6E:64:5E:33:DD:B5:8C:3E:F2:D6:D3
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 6436D4FF6622A3D430BBFEECD0E0DC252FD0DB1D
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3132382e3232322e302f32342d3234203d3e203535393333.roa
Signing time: Thu 06 Mar 2025 05:52:10 +0000
ROA not before: Thu 06 Mar 2025 05:47:10 +0000
ROA not after: Thu 05 Mar 2026 05:52:10 +0000
asID: 55933
IP address blocks: 45.128.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:36:d4:ff:66:22:a3:d4:30:bb:fe:ec:d0:e0:dc:25:2f:d0:db:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Mar 6 05:47:10 2025 GMT
Not After : Mar 5 05:52:10 2026 GMT
Subject: CN=DA077CEC9A79EB6FC56E645E33DDB58C3EF2D6D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:79:76:21:42:e1:be:2f:bc:22:fb:64:62:
68:8d:ba:de:ce:5f:bc:12:86:17:78:d7:04:f4:ea:
29:9b:ce:0c:f8:7f:cd:b9:60:e3:c2:b3:42:b8:7a:
52:8b:11:7a:6a:8f:d9:a9:37:c5:d7:57:d1:91:f4:
c7:be:94:aa:97:ac:9e:47:75:c3:a9:fb:ff:ef:a7:
f4:16:af:81:5c:20:8b:27:e7:c6:6a:8c:b2:8b:30:
63:dc:d8:a2:46:4d:f9:28:6f:79:aa:1f:c1:7b:84:
fc:68:f3:8b:cd:10:06:94:f2:96:a4:f9:75:67:2a:
30:13:a4:93:95:f7:8d:f4:d7:ad:94:6f:f6:a5:3c:
2b:d8:09:c6:4f:d1:7c:98:e1:31:33:46:7b:fc:50:
23:3e:90:0b:13:37:41:64:0f:eb:bb:30:c3:54:9d:
f4:97:a6:38:20:10:09:e0:52:c8:f7:6e:f9:28:65:
b8:5b:86:bb:1b:91:98:d1:51:2b:af:29:88:ba:bd:
cb:eb:64:f0:f5:00:47:b8:dd:4b:73:2a:32:dd:53:
d1:47:9c:24:26:52:ae:48:83:ce:fa:14:83:b6:e2:
44:dc:ba:bc:67:02:ea:db:b2:b4:96:2b:14:d7:2e:
97:8b:03:20:f4:fd:d9:5c:13:3e:68:a7:4f:33:1a:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:07:7C:EC:9A:79:EB:6F:C5:6E:64:5E:33:DD:B5:8C:3E:F2:D6:D3
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3132382e3232322e302f32342d3234203d3e203535393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.222.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e6:f5:1a:62:e2:73:3e:45:88:15:92:5e:c3:d2:d4:8e:c2:
33:b2:c3:1f:98:03:cc:b4:8c:23:6e:a2:af:16:a2:bb:d6:7a:
61:8c:49:50:c9:03:77:f2:e5:2f:94:7a:53:35:c0:8a:62:3c:
02:84:dd:42:d6:55:e7:87:95:7e:b5:a6:35:4e:63:01:75:fc:
4c:2a:c7:f1:ed:aa:09:16:dd:7e:12:8b:08:77:28:54:14:a3:
47:58:2e:57:72:a6:a9:20:9c:2e:da:44:8d:8e:f8:8d:07:87:
76:c1:2b:d0:0b:d9:73:85:8b:a1:82:3e:71:75:41:ef:6b:a8:
38:3d:79:db:f1:f0:58:3b:c3:3e:bd:d2:cb:8d:f8:62:ed:dc:
bc:17:40:44:79:d4:00:6b:34:b6:ee:8b:06:4e:7c:0b:78:08:
43:04:cb:48:3d:c0:a0:33:46:83:38:06:7d:30:4a:7f:11:49:
19:f1:57:eb:15:3f:e5:30:35:73:5f:4b:e1:8a:20:b3:92:e3:
73:e6:66:48:ef:59:e1:26:f8:17:04:fc:e3:32:f7:15:5e:66:
ed:3e:67:e3:f1:2d:ec:99:8c:b1:d7:74:9d:9b:83:49:b6:97:
82:f3:2b:31:41:48:8f:6e:35:b0:ee:aa:cc:fa:f4:e3:df:2d:
0c:1b:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:05 2025 by rpki-client on console.sobornost.net