Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3134322e3136372e302f32342d3234203d3e203233393539.roa
File: 34352e3134322e3136372e302f32342d3234203d3e203233393539.roa (raw, json)
Hash identifier: SBpTmkoFG2jg9lah4bmvcmQgh6wpqLb2ObliUQY3LwA=
Subject key identifier: 8B:2D:34:6F:D2:0A:4E:DC:84:E7:7A:14:21:C0:A2:EF:9D:F4:87:60
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 5D7B27652FBA459718B146E6DB852A794BBC2710
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3134322e3136372e302f32342d3234203d3e203233393539.roa
Signing time: Fri 25 Jul 2025 10:52:37 +0000
ROA not before: Fri 25 Jul 2025 10:47:37 +0000
ROA not after: Fri 24 Jul 2026 10:52:37 +0000
asID: 23959
IP address blocks: 45.142.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7b:27:65:2f:ba:45:97:18:b1:46:e6:db:85:2a:79:4b:bc:27:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Jul 25 10:47:37 2025 GMT
Not After : Jul 24 10:52:37 2026 GMT
Subject: CN=8B2D346FD20A4EDC84E77A1421C0A2EF9DF48760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:ff:f5:f4:f2:e9:a1:ae:be:dc:e4:fd:c4:
89:de:fc:f7:d4:59:a8:12:1a:9e:08:43:0b:00:7c:
d3:63:c0:68:a0:71:37:b4:8e:fb:8b:bd:58:f9:04:
f7:e8:ea:f8:8a:a2:7e:04:eb:c5:65:c0:af:a5:2a:
07:1a:71:f7:05:f1:c1:16:43:48:69:13:54:03:f4:
a6:6e:3e:fa:d7:4c:1d:38:dc:4c:b9:e9:81:d8:5d:
8b:ea:11:95:a3:54:56:0d:de:20:52:3d:e0:52:52:
c2:93:58:28:f3:72:29:c1:f9:4c:d0:6a:9e:f0:3f:
a3:59:9a:4b:0e:40:9e:1f:91:8d:e8:53:12:04:32:
11:48:63:54:cd:be:26:86:6c:c7:ed:46:7c:78:6c:
9c:a5:b1:d1:b3:dd:99:09:cb:87:bc:49:9c:11:de:
e9:f1:0a:32:35:ff:c5:3d:5b:b6:63:96:7f:31:a4:
7c:d9:22:86:70:fe:6f:5e:32:d8:fe:bc:e2:ea:dc:
58:11:fb:22:dc:bb:47:03:44:5e:28:f6:02:e8:dc:
f6:be:42:0a:de:ef:ea:24:20:2c:d9:5e:51:e4:f7:
50:d7:80:5b:8a:b8:b9:aa:68:73:45:55:36:f7:45:
6d:fc:a7:c2:a1:2f:2d:0b:78:a3:55:56:7c:2c:69:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2D:34:6F:D2:0A:4E:DC:84:E7:7A:14:21:C0:A2:EF:9D:F4:87:60
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3134322e3136372e302f32342d3234203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.167.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e3:9e:fe:90:b3:ca:eb:1e:f9:9f:99:3e:ca:65:4c:00:32:
8e:07:e3:b4:37:16:3f:ef:1b:7c:40:d1:53:05:a7:ae:4c:25:
aa:55:a1:0b:c6:1e:7d:18:25:e9:86:6d:35:47:d9:c2:64:85:
ff:10:58:b1:dd:37:75:f0:b0:09:7b:b2:2e:3b:8c:ab:0d:75:
a9:c0:36:40:fa:ca:4b:8d:54:ed:b6:d1:7d:b2:da:cb:42:f8:
41:10:9e:d7:c5:56:56:97:e1:4c:d1:f4:ab:ac:72:0c:ce:ed:
83:18:c5:0b:cc:42:27:a5:97:e0:8b:65:65:f5:ac:d5:a2:9a:
4c:cb:7f:27:96:5e:67:f7:e4:0c:b0:c8:c3:8d:8f:bd:3b:1a:
b5:d9:8f:04:d8:e5:ed:2a:81:82:aa:70:9c:3d:78:5e:7a:33:
34:77:2c:43:d0:5a:92:a9:b7:2c:62:96:b6:07:81:dc:7b:0b:
5a:8a:18:a9:0c:ae:70:8b:66:41:58:89:8b:d2:0b:e4:43:14:
6b:56:95:1f:14:66:42:36:73:c3:5c:af:93:55:ad:b5:d2:67:
5a:2d:85:1f:b2:5f:96:e8:50:be:2b:20:5e:80:28:8a:b4:06:
f1:db:8d:59:d2:80:7a:e1:67:d4:a4:61:6a:b3:3b:58:39:30:
85:d1:b5:d9
-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIUXXsnZS+6RZcYsUbm24UqeUu8JxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYxYzYxNjM2NGI4OTY1OWVkOWYxOGNiMGFmNzc0MjA0
MzdjYzdkYTAeFw0yNTA3MjUxMDQ3MzdaFw0yNjA3MjQxMDUyMzdaMDMxMTAvBgNV
BAMTKDhCMkQzNDZGRDIwQTRFREM4NEU3N0ExNDIxQzBBMkVGOURGNDg3NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFev/19PLpoa6+3OT9xIne/PfU
WagSGp4IQwsAfNNjwGigcTe0jvuLvVj5BPfo6viKon4E68VlwK+lKgcacfcF8cEW
Q0hpE1QD9KZuPvrXTB043Ey56YHYXYvqEZWjVFYN3iBSPeBSUsKTWCjzcinB+UzQ
ap7wP6NZmksOQJ4fkY3oUxIEMhFIY1TNviaGbMftRnx4bJylsdGz3ZkJy4e8SZwR
3unxCjI1/8U9W7Zjln8xpHzZIoZw/m9eMtj+vOLq3FgR+yLcu0cDRF4o9gLo3Pa+
Qgre7+okICzZXlHk91DXgFuKuLmqaHNFVTb3RW38p8KhLy0LeKNVVnwsaTmJAgMB
AAGjggG8MIIBuDAdBgNVHQ4EFgQUiy00b9IKTtyE53oUIcCi7530h2AwHwYDVR0j
BBgwFoAUdhxhY2S4llntnxjLCvd0IEN8x9owDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIxLzc2MUM2MTYzNjRC
ODk2NTlFRDlGMThDQjBBRjc3NDIwNDM3Q0M3REEuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kaHhoWTJTNGxsbnRueGpMQ3ZkMElFTjh4OW8uY2VyMG4GCCsGAQUF
BwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjEvMzQz
NTJlMzEzNDMyMmUzMTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzkz
NTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALY6nMA0GCSqGSIb3DQEBCwUAA4IBAQAw457+kLPK6x75
n5k+ymVMADKOB+O0NxY/7xt8QNFTBaeuTCWqVaELxh59GCXphm01R9nCZIX/EFix
3Td18LAJe7IuO4yrDXWpwDZA+spLjVTtttF9strLQvhBEJ7XxVZWl+FM0fSrrHIM
zu2DGMULzEInpZfgi2Vl9azVoppMy38nll5n9+QMsMjDjY+9Oxq12Y8E2OXtKoGC
qnCcPXheejM0dyxD0FqSqbcsYpa2B4HcewtaihipDK5wi2ZBWImL0gvkQxRrVpUf
FGZCNnPDXK+TVa210mdaLYUfsl+W6FC+KyBegCiKtAbx241Z0oB64WfUpGFqsztY
OTCF0bXZ
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:07 2025 by rpki-client