Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/326131313a373a3a2f33322d3438203d3e2038383838.roa
File: 326131313a373a3a2f33322d3438203d3e2038383838.roa (raw, json)
Hash identifier: /SAUZ1k4eX8L1yaDa6G7I9/pVyjhf/s+58s5E13PVOU=
Subject key identifier: 8A:41:AC:ED:14:1B:49:45:6A:25:1E:4B:49:BD:D7:55:2C:EB:1D:E1
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 70FFEAADC7849D0A55F4CFCD9424F0A25153325F
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/326131313a373a3a2f33322d3438203d3e2038383838.roa
Signing time: Fri 25 Jul 2025 10:52:38 +0000
ROA not before: Fri 25 Jul 2025 10:47:38 +0000
ROA not after: Fri 24 Jul 2026 10:52:38 +0000
asID: 8888
IP address blocks: 2a11:7::/32 maxlen: 48
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ff:ea:ad:c7:84:9d:0a:55:f4:cf:cd:94:24:f0:a2:51:53:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Jul 25 10:47:38 2025 GMT
Not After : Jul 24 10:52:38 2026 GMT
Subject: CN=8A41ACED141B49456A251E4B49BDD7552CEB1DE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:fa:54:9f:71:63:b5:0e:37:27:14:5f:3f:
59:19:2b:a0:33:19:05:52:4a:97:f1:6c:0f:e1:a7:
2b:9c:20:a6:26:d7:3b:df:d6:b3:39:3f:39:ea:ce:
7f:04:da:18:8c:7f:4e:15:cb:e7:03:5c:03:a2:fe:
52:fb:27:02:0c:76:ce:20:d4:58:0c:cc:99:27:80:
a4:98:c7:a6:bc:df:08:f4:77:28:e4:43:bd:2d:6d:
ad:61:99:6b:d3:1d:0a:4c:a6:72:9d:e1:4a:70:2a:
2e:62:fa:aa:7d:1e:d1:7c:30:a3:5b:61:80:39:01:
e6:33:72:7b:4a:ff:06:bd:78:81:46:e1:68:a6:6e:
b4:39:16:d1:cf:92:5b:14:e7:b7:01:86:c0:90:3b:
d5:29:d9:37:52:62:f9:42:e1:88:20:7c:8b:26:0e:
cd:4b:77:be:63:12:f3:74:54:bf:5f:32:16:ad:18:
37:66:a1:74:d7:c8:15:59:58:7a:c5:33:78:61:93:
18:70:f5:ac:35:da:45:aa:a7:8a:25:8b:b9:63:60:
e0:5e:d0:35:98:a2:1a:d9:fd:57:67:3e:3f:af:04:
a9:67:2d:21:d5:71:a7:82:92:fe:29:a9:d1:86:6c:
1d:44:94:66:f9:ec:f2:f5:09:e3:aa:75:8a:37:ad:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:41:AC:ED:14:1B:49:45:6A:25:1E:4B:49:BD:D7:55:2C:EB:1D:E1
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a373a3a2f33322d3438203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7::/32
Signature Algorithm: sha256WithRSAEncryption
11:69:19:c9:80:98:1e:ac:26:b7:57:ad:f0:e6:4c:66:f3:57:
d9:3a:a9:fc:43:2c:e0:51:1d:de:b9:29:f4:8d:d2:91:a8:1a:
4b:a6:cd:0c:72:97:35:9f:d5:94:5a:e0:2a:35:4e:bf:fd:7f:
22:17:5f:e4:78:20:fa:d7:2e:ff:1e:6b:b2:86:ab:ea:5b:a0:
5e:cc:61:9a:d0:ed:86:65:fe:a6:fa:ea:3e:96:eb:54:e6:56:
11:cb:3f:a3:88:ed:b7:b9:3d:d9:a7:45:7e:cd:42:76:50:58:
84:17:84:47:23:02:d7:5a:58:41:60:20:12:83:30:58:ce:ba:
01:8c:40:fc:eb:36:7f:1d:22:f4:48:f9:ff:af:2e:3d:3c:fb:
ab:a1:d5:d6:be:9b:a6:77:36:d2:2a:30:6f:de:30:61:81:9b:
16:2b:22:43:41:7d:c8:59:32:cd:0f:b0:e9:ee:8b:5e:69:4b:
b0:96:c0:25:54:8b:fe:ba:e8:dc:1c:67:0f:35:26:50:37:f9:
f3:b5:21:c2:35:c1:92:2e:5d:13:b2:18:7c:fb:7a:93:20:9f:
00:e5:87:8a:ec:23:f7:00:47:38:58:bd:cf:d1:8d:36:87:ed:
66:13:7e:3c:c6:f2:e4:30:fb:15:50:27:c3:90:81:68:49:f7:
0c:1f:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:35:51 2025 by rpki-client