Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3134322e3136342e302f32342d3234203d3e20323130343239.roa
File: 34352e3134322e3136342e302f32342d3234203d3e20323130343239.roa (raw, json)
Hash identifier: SSNUKRRpP2cfpRseMdy38jiDfpe+v4anPO8oBX8j+S0=
Subject key identifier: DC:EE:F7:64:F2:FA:A3:15:3F:2C:21:F1:4B:CC:84:48:8C:B3:B2:77
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 3FF234EB26C78E1E6B141FCAF0D697C410850DC4
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3134322e3136342e302f32342d3234203d3e20323130343239.roa
Signing time: Tue 01 Apr 2025 10:52:18 +0000
ROA not before: Tue 01 Apr 2025 10:47:18 +0000
ROA not after: Tue 31 Mar 2026 10:52:18 +0000
asID: 210429
IP address blocks: 45.142.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 14:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f2:34:eb:26:c7:8e:1e:6b:14:1f:ca:f0:d6:97:c4:10:85:0d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Apr 1 10:47:18 2025 GMT
Not After : Mar 31 10:52:18 2026 GMT
Subject: CN=DCEEF764F2FAA3153F2C21F14BCC84488CB3B277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ca:b8:45:70:be:80:ca:c7:6c:bd:ae:bf:b5:
2f:78:29:f2:87:be:6c:54:f9:f4:9e:63:78:1f:01:
50:dd:7d:82:53:fe:cb:b9:50:ae:62:3c:50:00:c5:
52:06:af:6b:d7:b0:3c:d8:4c:10:06:1b:8c:67:f7:
31:13:ac:57:6d:9e:26:2b:21:36:27:c4:4c:5c:3a:
ec:81:9d:0d:33:e2:e6:cd:3b:4e:a0:a0:b8:ea:1f:
63:7c:b0:b0:52:db:89:3d:5b:93:53:4c:c3:77:85:
ed:d3:67:4e:13:0a:de:b2:49:0c:64:2d:91:d6:43:
e5:89:3d:54:68:89:88:ef:73:89:b4:02:80:a8:da:
75:ce:5d:60:c4:8c:5c:a0:05:ef:c7:07:e2:c1:b8:
80:3f:e9:a2:34:03:6e:70:63:f3:ff:82:30:0a:14:
0d:6c:d6:2f:85:a8:05:a8:ce:12:4c:e8:5a:e0:94:
fa:a5:d5:c4:2b:d3:ce:9d:6b:47:e2:85:6d:dd:25:
18:a5:5a:10:f4:45:7b:a3:62:ca:32:05:af:76:2f:
1e:43:f3:5e:65:c8:98:b7:b6:98:20:73:1b:ca:8e:
3e:8f:45:b9:6a:10:ec:f9:7e:d9:72:84:3c:18:00:
89:5a:54:bd:d6:63:01:e1:86:12:54:27:cb:db:1b:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:F7:64:F2:FA:A3:15:3F:2C:21:F1:4B:CC:84:48:8C:B3:B2:77
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3134322e3136342e302f32342d3234203d3e20323130343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:fa:b8:13:3b:b3:a1:5e:c8:cd:a1:4a:aa:49:bd:05:eb:3c:
88:24:f9:e5:cd:8d:5b:bc:47:c7:c2:29:be:a7:cf:66:d2:34:
1d:f3:dc:26:37:04:70:30:54:d5:56:fe:be:ff:d0:cd:ce:d2:
fe:c6:b6:e2:1a:8c:1c:28:c6:f3:bf:33:a7:54:6c:47:2f:5f:
5d:d0:e5:d1:c8:43:fb:c7:65:26:9f:15:55:9a:84:e8:37:c6:
69:87:7e:e1:72:2d:f4:81:95:29:97:33:0b:12:d5:d3:04:73:
03:23:c0:a0:60:26:4a:d5:61:15:fd:86:a5:ae:d8:bc:42:4a:
9d:89:60:98:b7:40:69:cf:74:98:23:7a:32:c9:b0:e8:33:7b:
f3:73:e1:05:68:0c:11:99:76:ed:ad:76:91:f4:2e:82:30:0a:
b0:fa:9d:60:74:df:39:a3:93:c4:8f:2e:33:2f:a7:51:fd:7d:
bb:ba:5e:8c:19:c0:90:cd:ac:44:f9:30:a2:f6:68:b5:de:67:
f1:c8:78:d4:2b:65:05:37:8b:57:7b:90:5d:2d:89:7d:70:01:
77:dd:3f:36:94:ca:9e:b2:e3:ac:82:ae:1c:33:ff:24:7b:d2:
d7:d2:b0:4f:66:25:23:cc:52:16:eb:ba:93:5c:33:6a:56:ba:
ce:5e:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:11:51 2025 by rpki-client