Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3134322e3136352e302f32342d3234203d3e2034373835.roa
File: 34352e3134322e3136352e302f32342d3234203d3e2034373835.roa (raw, json)
Hash identifier: 5DU8RAm2Pe1j3VzzI9ygsOSm4jRImI8/dwc6G24VJoY=
Subject key identifier: 4A:9D:95:29:EC:2C:90:8E:86:5B:30:C3:B9:3A:69:BE:95:21:62:23
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 50DC7A46266BE5F82C0B92C561BB6DB491D79B6D
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3134322e3136352e302f32342d3234203d3e2034373835.roa
Signing time: Fri 25 Jul 2025 10:52:38 +0000
ROA not before: Fri 25 Jul 2025 10:47:38 +0000
ROA not after: Fri 24 Jul 2026 10:52:38 +0000
asID: 4785
IP address blocks: 45.142.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:dc:7a:46:26:6b:e5:f8:2c:0b:92:c5:61:bb:6d:b4:91:d7:9b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Jul 25 10:47:38 2025 GMT
Not After : Jul 24 10:52:38 2026 GMT
Subject: CN=4A9D9529EC2C908E865B30C3B93A69BE95216223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:1b:3b:44:ba:20:de:1f:44:39:c5:ad:5c:
9b:a0:e3:7a:45:12:e7:be:4e:21:80:75:db:79:86:
f9:a7:cf:cc:2b:2b:46:9c:b4:f0:6c:5a:26:80:2a:
82:f6:f3:b4:0c:e0:f2:5e:0c:b4:f0:6c:0a:b3:ad:
c4:a5:5c:7b:ca:1a:c5:bc:71:24:52:41:48:f5:6a:
68:5c:29:d7:fe:82:94:01:18:49:e0:18:e6:1b:8a:
03:36:f4:8c:66:d1:10:13:e0:b6:39:a0:5c:ee:9c:
32:b7:b9:c7:2d:d2:20:5d:e9:a2:7c:e0:3a:23:7c:
cc:c8:1d:01:61:ab:9f:f6:82:7a:f6:19:7c:3d:4b:
29:3b:2b:0b:37:36:c2:0d:1c:d3:2d:ce:db:02:32:
8d:0f:20:1d:1b:45:d0:3f:2e:85:e2:a9:68:65:e2:
a0:69:70:d6:92:7a:f0:b4:1f:01:98:d4:c4:52:1a:
02:3a:f2:67:3a:92:65:65:1d:0c:47:69:18:d4:76:
00:2c:94:72:2c:7f:87:76:f8:2d:8d:cf:41:08:21:
5c:96:6d:56:11:b2:72:29:be:5c:91:26:a1:c2:c0:
4d:df:4e:89:a9:51:fb:76:35:4c:f9:eb:6d:3e:63:
5d:7c:16:17:46:f0:7e:71:4f:ff:de:6c:46:02:1c:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9D:95:29:EC:2C:90:8E:86:5B:30:C3:B9:3A:69:BE:95:21:62:23
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3134322e3136352e302f32342d3234203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.165.0/24
Signature Algorithm: sha256WithRSAEncryption
69:64:f0:1f:8d:eb:c0:1c:2d:81:71:64:54:03:7b:d6:62:70:
f3:36:75:52:03:bc:f5:2d:2a:ad:5c:15:ec:c3:3f:7d:e0:f9:
72:8b:05:5d:cd:cc:d4:f1:da:22:6a:65:4b:e3:97:bd:99:57:
82:8a:c8:0d:c3:d7:ec:ab:90:e3:2e:88:55:6a:37:24:be:fd:
ba:63:12:7c:e0:49:50:b5:e9:c3:41:c5:60:25:7c:10:01:80:
d0:1b:5e:86:6e:8a:b6:f5:91:5c:a4:63:b1:07:e4:80:24:d0:
46:37:22:a1:31:48:c2:a7:e1:e0:79:2e:e9:94:32:b8:a9:54:
02:a2:a8:28:e4:37:8a:28:23:39:25:03:81:97:f8:df:0c:1e:
48:f2:cf:bc:41:d2:25:89:5d:fa:fd:e5:ef:78:c1:63:27:81:
e6:c2:43:9d:d0:3a:16:d0:d4:5f:43:f4:a5:d7:f2:1f:43:28:
c5:8b:89:c0:21:ce:ed:00:28:1c:95:82:98:e2:2b:d1:ae:50:
69:9e:f0:71:84:54:0e:e2:e3:ca:24:7e:b0:5d:9c:5d:9d:89:
41:4f:4c:e9:ca:65:c5:cd:f1:74:d4:c0:b3:a8:4c:ad:86:e8:
77:13:65:4d:65:1a:ca:39:ca:35:58:44:d6:2e:d5:a5:85:66:
7f:ca:16:6f
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIUUNx6RiZr5fgsC5LFYbtttJHXm20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYxYzYxNjM2NGI4OTY1OWVkOWYxOGNiMGFmNzc0MjA0
MzdjYzdkYTAeFw0yNTA3MjUxMDQ3MzhaFw0yNjA3MjQxMDUyMzhaMDMxMTAvBgNV
BAMTKDRBOUQ5NTI5RUMyQzkwOEU4NjVCMzBDM0I5M0E2OUJFOTUyMTYyMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBxs7RLog3h9EOcWtXJug43pF
Eue+TiGAddt5hvmnz8wrK0actPBsWiaAKoL287QM4PJeDLTwbAqzrcSlXHvKGsW8
cSRSQUj1amhcKdf+gpQBGEngGOYbigM29Ixm0RAT4LY5oFzunDK3ucct0iBd6aJ8
4DojfMzIHQFhq5/2gnr2GXw9Syk7Kws3NsINHNMtztsCMo0PIB0bRdA/LoXiqWhl
4qBpcNaSevC0HwGY1MRSGgI68mc6kmVlHQxHaRjUdgAslHIsf4d2+C2Nz0EIIVyW
bVYRsnIpvlyRJqHCwE3fTompUft2NUz5620+Y118FhdG8H5xT//ebEYCHJFzAgMB
AAGjggG6MIIBtjAdBgNVHQ4EFgQUSp2VKewskI6GWzDDuTppvpUhYiMwHwYDVR0j
BBgwFoAUdhxhY2S4llntnxjLCvd0IEN8x9owDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIxLzc2MUM2MTYzNjRC
ODk2NTlFRDlGMThDQjBBRjc3NDIwNDM3Q0M3REEuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kaHhoWTJTNGxsbnRueGpMQ3ZkMElFTjh4OW8uY2VyMGwGCCsGAQUF
BwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjEvMzQz
NTJlMzEzNDMyMmUzMTM2MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3Mzgz
NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2OpTANBgkqhkiG9w0BAQsFAAOCAQEAaWTwH43rwBwtgXFk
VAN71mJw8zZ1UgO89S0qrVwV7MM/feD5cosFXc3M1PHaImplS+OXvZlXgorIDcPX
7KuQ4y6IVWo3JL79umMSfOBJULXpw0HFYCV8EAGA0Btehm6KtvWRXKRjsQfkgCTQ
RjcioTFIwqfh4Hku6ZQyuKlUAqKoKOQ3iigjOSUDgZf43wweSPLPvEHSJYld+v3l
73jBYyeB5sJDndA6FtDUX0P0pdfyH0MoxYuJwCHO7QAoHJWCmOIr0a5QaZ7wcYRU
DuLjyiR+sF2cXZ2JQU9M6cplxc3xdNTAs6hMrYbodxNlTWUayjnKNVhE1i7VpYVm
f8oWbw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:59:49 2025 by rpki-client