Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/326131313a343a3a2f33322d3438203d3e2038383838.roa
File: 326131313a343a3a2f33322d3438203d3e2038383838.roa (raw, json)
Hash identifier: FEgUArpY9QDIPqvCa5MPgOHoh9/PssDMBldIU2hRx70=
Subject key identifier: 07:2D:1F:14:D3:F9:B5:CA:4D:30:F5:8D:DC:20:40:04:8B:36:AB:1F
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 03D266DFFF0D071E98DCDEAB75D04B2330D78DF6
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/326131313a343a3a2f33322d3438203d3e2038383838.roa
Signing time: Fri 25 Jul 2025 10:52:38 +0000
ROA not before: Fri 25 Jul 2025 10:47:38 +0000
ROA not after: Fri 24 Jul 2026 10:52:38 +0000
asID: 8888
IP address blocks: 2a11:4::/32 maxlen: 48
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d2:66:df:ff:0d:07:1e:98:dc:de:ab:75:d0:4b:23:30:d7:8d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Jul 25 10:47:38 2025 GMT
Not After : Jul 24 10:52:38 2026 GMT
Subject: CN=072D1F14D3F9B5CA4D30F58DDC2040048B36AB1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:b0:1a:75:b7:51:db:e9:71:cd:92:f2:ec:
3a:09:55:ff:2d:0e:08:73:ad:48:8b:b4:4a:05:39:
3b:fe:d1:46:1a:35:2d:f7:0c:70:66:3b:24:21:e8:
08:8c:f1:8f:f0:97:65:df:9d:44:e5:66:8c:a3:0e:
e4:d2:54:05:13:8e:53:dd:78:86:d4:67:50:8a:d2:
05:94:d0:44:4c:cc:51:8d:87:61:ce:eb:c8:36:d1:
36:db:82:a8:e8:90:42:a7:ca:60:bc:a4:4b:54:f5:
2e:17:4e:e4:bd:4d:0a:2e:d7:c5:4d:b2:a5:a6:40:
22:60:c0:a5:ea:8e:1e:f0:84:da:39:3b:2e:66:13:
c8:6a:92:d1:52:da:14:d4:6a:87:be:2a:5c:0a:6a:
47:4b:a8:6d:c1:ac:84:3b:c6:f1:90:50:59:e8:f5:
3c:42:bd:c6:85:13:fc:18:0b:4b:38:4f:d8:ff:21:
12:14:ad:fa:91:17:60:a3:9a:f1:9e:98:92:66:41:
93:18:40:3e:4f:ce:e5:93:c3:8c:a3:e0:a8:23:64:
97:b5:15:96:dd:fd:2c:0b:30:b8:e3:5d:64:c8:f8:
fc:c2:dc:56:a1:a3:36:ef:9b:18:0a:76:c3:5b:34:
02:5a:9b:ec:26:f1:2b:fd:05:de:ca:dc:df:61:b1:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2D:1F:14:D3:F9:B5:CA:4D:30:F5:8D:DC:20:40:04:8B:36:AB:1F
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a343a3a2f33322d3438203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4::/32
Signature Algorithm: sha256WithRSAEncryption
90:d1:2d:71:aa:e4:4d:29:dd:70:1a:f4:5e:4f:4c:d2:5b:43:
08:97:9c:7e:d2:98:8d:69:67:b8:dc:71:70:57:0c:79:5c:44:
7c:d8:6f:4d:bc:fb:b4:b6:45:a5:9b:28:eb:87:cd:fe:77:09:
9c:88:50:cb:0f:fd:b4:c6:70:79:e0:ee:9b:32:a9:c1:fd:80:
50:b6:f0:1f:4d:25:e6:54:c4:63:69:1a:1f:81:f4:39:3a:c0:
bd:f3:04:02:ef:88:e4:37:a2:c8:28:2e:0a:d1:0f:ee:8f:f3:
6a:d4:7e:8a:29:4c:ea:4f:68:6b:53:b5:81:d7:f4:d9:c4:3d:
2b:45:8e:76:38:08:47:0f:67:e6:35:bf:e6:3b:1f:5a:01:c5:
5b:56:8e:94:7d:2e:b4:44:69:75:b0:67:a4:10:36:d3:c1:1d:
fe:05:8c:9f:e6:bd:be:56:65:9a:15:af:42:f5:21:59:15:26:
be:1a:93:9a:69:60:be:ed:35:c9:f5:2d:1e:48:1f:34:7c:97:
88:41:5a:6b:1a:c9:da:30:b5:38:b0:71:b9:f2:fd:72:d6:82:
36:c2:af:a6:92:78:cd:6a:ec:7c:cb:9c:82:1c:71:f5:24:de:
c5:b1:e8:cb:79:0d:ee:9e:dc:fc:4e:13:30:78:d0:01:8f:7f:
a5:31:0c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:33:40 2025 by rpki-client