Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3132382e3232322e302f32342d3234203d3e2038383838.roa
File: 34352e3132382e3232322e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: ++aMy6W0QYcTh1YJe8zpuwt3ct3VhdM1NYL6dQqQikA=
Subject key identifier: 22:93:EE:12:7D:BB:D6:B5:BD:4D:BE:89:55:2D:50:54:1A:39:B4:0B
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 0764C091DA959E6C9C2F1C9C9472C4D376464C2B
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3132382e3232322e302f32342d3234203d3e2038383838.roa
Signing time: Fri 24 Oct 2025 05:55:24 +0000
ROA not before: Fri 24 Oct 2025 05:50:24 +0000
ROA not after: Fri 23 Oct 2026 05:55:24 +0000
asID: 8888
IP address blocks: 45.128.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:64:c0:91:da:95:9e:6c:9c:2f:1c:9c:94:72:c4:d3:76:46:4c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Oct 24 05:50:24 2025 GMT
Not After : Oct 23 05:55:24 2026 GMT
Subject: CN=2293EE127DBBD6B5BD4DBE89552D50541A39B40B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:01:df:dc:30:3c:6a:c0:7f:93:1b:2b:b5:
27:9b:cc:99:5f:15:94:43:b5:80:8b:ae:62:e9:6f:
b1:5b:e7:a1:96:a8:4c:49:e3:38:09:f6:e9:98:5a:
23:af:12:12:60:a9:bf:07:33:ff:44:fb:d9:c3:3b:
2d:f2:38:0e:e2:5d:64:fb:72:c0:a7:c2:a4:c7:0e:
d5:b9:6b:68:47:ad:10:a5:07:97:36:60:e2:83:bf:
a9:bd:e6:40:ac:e9:a2:c6:d2:86:b5:e7:97:e0:33:
48:a6:4a:ce:f4:4f:50:41:99:10:a6:72:29:cf:30:
ca:85:c5:cc:b0:90:e2:3c:1d:db:6e:5a:b4:31:d6:
3e:14:ed:39:b4:48:cd:85:32:3d:85:06:92:87:00:
96:15:fb:aa:a0:11:ea:a6:d7:f7:0c:3e:69:9b:a5:
65:f9:0a:69:bc:db:24:cd:a6:dc:62:4f:51:b3:92:
61:45:4c:f6:86:34:66:60:70:74:3b:f8:88:8f:ee:
9f:f4:a1:47:78:59:ca:2a:ec:a1:77:af:d3:1d:3d:
b0:74:53:3b:bf:c0:0f:ba:d0:05:83:05:11:6e:69:
a1:a5:fb:fc:bf:d8:f7:63:28:5e:04:78:b9:3f:74:
dc:78:75:a5:cc:ef:76:af:2a:15:e6:df:b2:35:7d:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:93:EE:12:7D:BB:D6:B5:BD:4D:BE:89:55:2D:50:54:1A:39:B4:0B
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3132382e3232322e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.222.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:dc:c8:14:5f:14:35:6c:01:74:ee:f9:e6:58:cf:5d:0d:25:
7c:65:b7:4e:c8:00:55:3a:31:a2:1e:5d:c6:98:e5:24:66:4e:
85:54:ff:ae:60:ef:f7:b4:42:6b:ec:18:03:39:20:47:83:57:
79:a3:1b:01:35:ee:f3:d1:d6:c2:87:13:6f:93:69:bd:63:a4:
c4:fa:b4:58:72:45:74:bc:9f:7c:73:2d:ce:99:cf:92:87:dc:
64:60:ee:3b:03:8a:0b:94:b8:47:60:1b:54:89:cf:4c:67:30:
c1:48:aa:c4:2a:37:b4:f5:d1:84:00:94:e3:c8:3e:c0:40:4e:
1d:b1:f6:57:3e:f3:6e:98:18:d9:2e:65:c8:c9:f2:c3:c8:4e:
72:ed:4e:38:32:38:20:bd:8b:e3:18:c6:b7:43:7c:c7:5c:f3:
21:bb:bc:e7:ce:2e:96:a3:ce:c6:54:bd:b4:f5:01:1f:c8:90:
c8:b0:eb:0d:95:56:bf:88:49:83:aa:e7:46:9d:5a:a2:ac:22:
5a:2f:14:44:9d:75:a3:08:6c:36:40:cb:d1:5a:df:12:27:e2:
02:a6:bf:42:4e:55:4c:a0:78:a9:ff:36:7c:34:e2:27:8c:75:
bd:43:f4:3b:98:ca:9b:17:1f:b8:56:e1:e0:49:d3:29:58:06:
6f:ac:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:35:44 2025 by rpki-client