
Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3132382e3232302e302f32342d3234203d3e2039333132.roa
File: 34352e3132382e3232302e302f32342d3234203d3e2039333132.roa (raw, json)
Hash identifier: zkizj4pCRL/FKJqn3BPOxxXR4IAyGNQhoYZPTG5rYAg=
Subject key identifier: 86:A4:B5:1C:2E:79:B2:04:67:08:0E:0F:13:D9:B9:7E:D5:26:89:8D
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 4A89E0B12EDBCA68A8CBD42A1A4D145B314EEBDA
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3132382e3232302e302f32342d3234203d3e2039333132.roa
Signing time: Tue 22 Jul 2025 08:56:12 +0000
ROA not before: Tue 22 Jul 2025 08:51:12 +0000
ROA not after: Tue 21 Jul 2026 08:56:12 +0000
asID: 9312
IP address blocks: 45.128.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:89:e0:b1:2e:db:ca:68:a8:cb:d4:2a:1a:4d:14:5b:31:4e:eb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Jul 22 08:51:12 2025 GMT
Not After : Jul 21 08:56:12 2026 GMT
Subject: CN=86A4B51C2E79B20467080E0F13D9B97ED526898D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:5d:e9:12:f3:a4:09:a8:d0:f9:d6:84:1c:
55:48:d2:37:83:8a:a9:a1:36:56:23:6d:f3:d6:e5:
6a:b0:d6:f4:a2:98:f0:77:6e:7c:76:c5:94:84:66:
88:07:0a:3f:3a:e8:9b:01:b1:35:60:b9:89:90:14:
09:36:95:e4:89:8d:16:6e:65:2e:65:07:68:d3:6e:
05:06:ef:58:b9:24:2e:ed:27:97:b8:68:43:b6:6a:
cf:d7:20:5f:6c:b0:a4:9d:1c:ea:3c:e5:d5:c0:dc:
aa:a9:1f:d7:88:f2:9c:70:c0:d2:6d:73:01:45:e3:
18:40:93:6a:3f:6d:d5:6d:e0:3c:4f:50:c8:88:f4:
2e:8c:02:9e:ef:5d:56:fe:32:8c:ed:ff:ab:fa:e7:
ae:6e:70:c1:0c:a2:3d:15:14:30:67:78:17:86:45:
d4:a8:0e:b6:55:34:c2:85:40:77:3d:9d:c1:e8:ef:
83:5e:da:1a:f7:40:3a:b0:86:d4:b2:c6:3a:4a:7c:
36:51:75:78:a8:5e:cd:b9:5c:e0:81:e8:84:11:de:
ad:48:44:91:99:8e:d6:a2:c4:ae:dc:ce:cd:8d:2e:
c1:4d:fc:b9:9c:5e:fa:d8:01:a2:ff:90:ef:73:e8:
53:54:cc:21:11:23:d5:15:6b:cb:bb:94:bf:6c:b1:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A4:B5:1C:2E:79:B2:04:67:08:0E:0F:13:D9:B9:7E:D5:26:89:8D
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3132382e3232302e302f32342d3234203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:08:b9:c5:25:ae:9b:8c:48:64:eb:92:10:03:5a:95:d8:6a:
00:bd:b9:8c:9c:44:9c:55:3b:c6:52:69:c9:50:29:6d:a7:d8:
a4:8f:14:ad:4c:01:53:e3:d0:d7:f0:e6:e6:75:a4:96:18:49:
e0:15:18:b0:27:49:ff:d4:fa:14:b6:15:8f:84:1f:f2:51:5f:
9f:15:eb:4f:04:96:82:ae:e5:37:2c:77:f8:04:b9:26:2b:11:
a5:80:62:5e:97:03:d1:28:ba:04:c4:71:77:69:13:d6:73:6f:
4f:06:8a:92:f9:e8:13:b3:9d:8a:3c:64:90:bc:8a:24:25:a4:
c8:a9:73:c7:e9:69:90:2e:fc:b6:f8:f6:7d:75:31:fc:08:c6:
82:e8:d0:27:2a:4e:1e:fd:18:20:e3:6c:6f:7c:c5:a3:8f:1d:
de:05:95:09:e0:46:4c:65:00:11:96:cc:a8:de:02:b4:86:aa:
12:d3:84:77:e5:82:87:fb:7f:06:cd:05:53:59:32:b1:bf:ea:
ac:b5:d2:ff:1a:23:94:3a:80:59:10:4c:39:33:1a:86:47:aa:
43:8c:68:49:9c:26:a1:cf:ff:41:44:02:a7:ff:23:d8:23:0d:
c1:5d:5c:b0:9f:c8:1e:d0:8d:cf:32:ff:f0:29:e6:ea:0c:2c:
3b:80:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:23 2025 by rpki-client