Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
File: 34352e3134322e3136362e302f32342d3234203d3e203233393539.roa (raw, json)
Hash identifier: SoInFCGSroeNZW3zC7T+0A3Th+CM+V3tJkj3Zll/kJM=
Subject key identifier: 55:1C:8E:01:3E:10:39:57:5D:7C:5A:71:FD:A2:C5:B7:04:0D:CC:3F
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 4CEE49CF41062B489FF5382FE246EA8E397A99DD
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
Signing time: Fri 25 Jul 2025 10:52:38 +0000
ROA not before: Fri 25 Jul 2025 10:47:38 +0000
ROA not after: Fri 24 Jul 2026 10:52:38 +0000
asID: 23959
IP address blocks: 45.142.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ee:49:cf:41:06:2b:48:9f:f5:38:2f:e2:46:ea:8e:39:7a:99:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Jul 25 10:47:38 2025 GMT
Not After : Jul 24 10:52:38 2026 GMT
Subject: CN=551C8E013E1039575D7C5A71FDA2C5B7040DCC3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:07:15:08:0c:f1:86:73:e8:b7:a4:9f:5f:
9d:0e:b5:fa:bb:a1:c9:a7:74:cf:98:24:b0:da:66:
10:cd:dd:e5:47:7e:0a:c3:b7:19:a0:ae:ce:3a:3a:
f0:6e:ef:58:18:87:5d:5d:bc:74:63:8c:e9:d3:16:
44:5b:f2:a1:9f:4a:07:61:9c:27:fe:96:7d:e0:9e:
03:cd:9f:b0:ba:ef:96:6b:d6:c2:0d:28:60:24:b4:
28:a2:aa:e0:dc:ab:4a:d0:a4:99:53:b6:d0:b5:4e:
8b:eb:ef:aa:32:55:71:12:7b:b8:1f:dc:43:14:ff:
ae:15:e9:38:0e:29:b8:6b:d4:9c:9e:02:58:cc:d3:
45:f2:05:65:90:fc:a6:ea:f7:d9:83:07:3d:45:2d:
a4:d2:87:4e:a6:8d:20:06:fb:21:f3:e1:21:f8:ec:
ba:4b:ea:9e:29:97:33:75:a8:de:78:31:0d:c3:78:
17:17:28:7e:aa:41:c9:1f:0e:85:6c:7b:6f:59:17:
cf:3f:01:47:19:a5:25:b3:0b:b1:cb:65:63:94:ab:
eb:da:98:c7:e2:d1:5b:06:9d:ab:3e:27:cb:67:54:
23:ee:1b:53:c5:d0:5a:cb:53:39:98:d1:1a:b6:1f:
42:d5:8f:de:28:f3:3e:26:98:96:a7:72:a2:80:36:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1C:8E:01:3E:10:39:57:5D:7C:5A:71:FD:A2:C5:B7:04:0D:CC:3F
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.166.0/24
Signature Algorithm: sha256WithRSAEncryption
30:44:fe:18:c4:62:40:1b:1b:30:a9:ff:d1:b6:75:2b:1a:02:
be:39:44:26:bd:c3:c1:14:f8:ae:48:d9:89:5c:57:4f:dc:2a:
ab:04:8b:14:95:ea:c2:4c:93:e3:bc:08:3f:9f:cc:85:74:dd:
0b:c0:c9:9c:6d:7f:d1:da:ec:d7:8f:4e:4c:8a:a0:d0:8e:c3:
aa:71:6f:68:a1:20:89:75:ce:a0:e7:e1:6c:4f:25:80:30:11:
38:f4:b1:ef:5d:f7:e2:61:de:ec:ed:07:f0:e0:38:b7:08:8b:
59:7a:e0:94:01:63:f7:ba:e5:f5:88:48:27:d8:01:67:f6:d8:
9c:ca:71:aa:79:da:66:bf:bc:e7:ba:28:87:9c:97:4f:dc:e0:
0f:33:8b:66:f5:07:e9:73:cd:82:30:a6:8f:2e:08:ea:dd:9d:
f2:09:1b:58:c7:6a:14:76:ad:f2:df:79:1c:9c:46:79:20:e3:
ec:81:c7:7e:27:97:bc:9f:05:8a:11:2d:9d:31:ea:4c:ce:80:
f9:53:ce:f5:35:7e:9e:01:84:de:9a:ec:15:e0:1a:5d:c0:b6:
75:3d:32:49:43:07:bd:50:39:4d:95:01:37:7b:e4:e6:76:f1:
69:bb:b9:2d:8e:74:12:0d:37:a3:93:4f:8f:f4:fe:54:05:a3:
ea:ca:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:36:12 2025 by rpki-client