Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/3134362e31392e302e302f32342d3234203d3e2038383838.roa
File: 3134362e31392e302e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: l462BIQ/tSzO6Zk3E4YvJo4+0xUGQksUVCqC9Uky4/k=
Subject key identifier: 0C:08:A8:0F:67:87:88:91:C5:C3:2F:8F:62:DC:E9:C6:79:60:11:B9
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 6A69F6594C0EF3849A9B1814B6BDD48D0D68333C
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/3134362e31392e302e302f32342d3234203d3e2038383838.roa
Signing time: Fri 25 Jul 2025 10:52:39 +0000
ROA not before: Fri 25 Jul 2025 10:47:39 +0000
ROA not after: Fri 24 Jul 2026 10:52:39 +0000
asID: 8888
IP address blocks: 146.19.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:69:f6:59:4c:0e:f3:84:9a:9b:18:14:b6:bd:d4:8d:0d:68:33:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Jul 25 10:47:39 2025 GMT
Not After : Jul 24 10:52:39 2026 GMT
Subject: CN=0C08A80F67878891C5C32F8F62DCE9C6796011B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:b7:ed:57:45:53:c8:21:3f:b1:54:7e:10:
ab:a0:7e:8b:59:cc:3c:ee:ff:24:d3:47:fa:5f:67:
2e:56:4a:a9:61:cc:fe:25:4f:5e:71:37:f7:bf:16:
59:a6:38:16:cd:78:3a:ca:b4:51:af:9b:41:e9:97:
62:d3:b3:5f:99:34:f9:eb:b8:45:76:11:5f:60:62:
0c:30:84:3f:1b:27:33:3b:24:0d:fd:d5:db:08:f0:
e3:99:63:26:de:ce:15:25:62:76:0b:bf:66:ba:8b:
84:1c:58:c4:6f:20:31:43:eb:1c:f6:96:ce:3d:83:
1c:95:b6:43:0e:1b:a9:8c:8d:9c:35:61:12:56:62:
e1:25:4b:c3:53:27:7e:e8:30:56:5b:70:79:39:1a:
54:69:fc:e9:ef:f3:98:a9:19:e7:f8:8e:e6:61:d6:
0a:c2:26:54:70:fe:ec:36:61:b9:ba:5f:1a:bb:14:
31:fe:63:7a:95:a4:89:bf:1e:02:0b:be:5e:b2:a7:
ca:ba:3d:c7:6a:fb:23:3e:d4:d1:85:ef:77:5b:5a:
fd:0a:17:9a:30:27:6e:de:2e:8c:75:76:67:67:52:
67:48:4a:15:c4:75:44:bd:41:29:61:b7:9b:40:24:
8e:d6:69:d8:50:64:3d:8b:69:1e:1e:dd:0f:91:bc:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:08:A8:0F:67:87:88:91:C5:C3:2F:8F:62:DC:E9:C6:79:60:11:B9
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/3134362e31392e302e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.0.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b6:51:cb:d4:12:9f:a1:15:9b:17:92:e3:f3:c6:44:6b:18:
a0:22:9d:6c:d8:97:e9:76:0e:1a:e4:5c:59:06:f8:cd:ba:2f:
c6:68:23:9c:cc:b3:eb:df:10:0a:d4:75:83:7d:fc:99:9c:23:
0e:a2:22:0e:b6:a3:46:bd:01:02:eb:b0:d5:c3:6d:c1:1f:39:
54:78:28:b9:01:a3:af:98:44:6a:e9:b2:30:00:0d:f5:8c:35:
51:96:fb:58:d0:32:ca:54:fe:0d:f8:7b:04:d7:a6:a6:a5:7d:
69:ae:d0:ab:d9:ec:68:50:b5:55:8c:0f:dc:7b:fd:21:a8:2d:
0a:68:19:c6:5c:35:2d:d3:9c:0d:9e:16:7e:c7:a2:50:97:b3:
b7:b9:15:e3:97:55:5e:04:62:4c:1c:84:5e:f5:39:dd:21:a8:
2f:90:d5:be:14:43:86:94:b8:32:f2:33:5d:b8:57:73:62:e6:
8d:6e:db:42:e8:7d:e9:0d:6b:75:0e:08:a8:89:f2:42:71:e7:
91:28:6a:de:00:cc:7f:18:51:c5:89:a3:8b:39:2f:ef:b9:b4:
f0:ac:cf:ea:dc:c6:d6:00:71:d5:fd:01:cc:a1:6a:4b:db:c3:
54:71:28:a5:87:c2:e7:09:24:74:ba:08:a9:38:07:12:08:37:
6c:61:f3:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:47:50 2025 by rpki-client