Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2031303330.roa
File: 38392e3130362e3230372e302f32342d3234203d3e2031303330.roa (raw, json)
Hash identifier: WU1NDPLvVCim8HYui+S4ld1WRu6Fh7Vxu0s9dWiUID8=
Subject key identifier: 31:18:83:D1:B4:20:FF:2B:08:E7:75:50:49:09:87:48:DC:E0:77:B3
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 79A7CCE1E6A5F2551E19E232EA2E855F9A4C4FE4
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2031303330.roa
Signing time: Fri 25 Jul 2025 10:52:38 +0000
ROA not before: Fri 25 Jul 2025 10:47:38 +0000
ROA not after: Fri 24 Jul 2026 10:52:38 +0000
asID: 1030
IP address blocks: 89.106.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 02:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a7:cc:e1:e6:a5:f2:55:1e:19:e2:32:ea:2e:85:5f:9a:4c:4f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Jul 25 10:47:38 2025 GMT
Not After : Jul 24 10:52:38 2026 GMT
Subject: CN=311883D1B420FF2B08E7755049098748DCE077B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:f4:ba:bf:e4:77:a2:c6:f1:f9:c2:4a:d8:
73:b6:22:df:34:3c:a2:51:ef:f9:7e:d8:36:6b:04:
bf:bb:33:e3:36:48:67:ea:15:e8:fd:78:57:6f:4c:
e6:a3:73:bf:5e:30:a0:a4:b3:28:21:6c:3d:94:92:
a3:a3:4e:c2:cd:fd:2b:0c:84:29:66:82:2e:82:27:
aa:8c:3a:7b:4d:49:2b:30:76:e6:e5:a5:45:50:b5:
8e:9d:6e:f7:8c:a5:71:8c:91:1c:9a:b0:86:73:70:
ea:38:4d:ad:c6:c3:86:20:e1:45:ae:ce:5f:c9:30:
45:9d:ec:b5:d8:df:b7:b6:c5:cd:6d:53:fc:55:31:
e7:80:1c:b0:e5:11:1e:bf:25:1b:cd:4a:5f:69:3d:
db:67:31:0a:e6:8c:79:06:59:72:cb:90:28:ff:d4:
73:c6:b0:b8:83:cb:c9:76:2c:f1:1b:20:de:3d:cb:
34:48:21:20:f9:ab:91:f5:b0:06:d2:28:4e:f8:44:
82:ea:3a:36:c7:ca:91:ff:87:66:2d:86:75:1e:b4:
63:bf:ca:58:dd:c4:61:8b:b3:db:42:26:4f:56:62:
d1:9b:60:b9:b3:80:69:c8:3e:21:4a:7e:ad:b6:34:
c7:a6:c1:f7:0e:d4:b1:cd:4c:e6:f9:0c:45:f6:ab:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:83:D1:B4:20:FF:2B:08:E7:75:50:49:09:87:48:DC:E0:77:B3
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2031303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.207.0/24
Signature Algorithm: sha256WithRSAEncryption
57:fa:99:36:41:45:89:f2:6a:eb:5d:18:d1:c1:a6:ee:77:c7:
be:56:84:3b:9f:e9:de:1f:98:ec:53:d5:3a:d4:9f:93:6a:cf:
f3:c7:2d:14:a3:38:49:01:b8:5a:1c:39:39:89:fb:a6:39:3a:
9f:e4:78:2b:b3:47:05:40:fd:7e:5c:fe:15:1e:f4:ae:95:1f:
b7:df:92:06:40:04:4d:7b:bc:8b:7b:c5:88:a8:44:46:e0:ba:
52:62:c5:46:16:b0:2a:60:44:fd:0a:63:61:b3:73:35:1d:a6:
6f:19:ca:3d:f5:42:d9:19:45:1d:76:65:dc:21:9e:7e:30:f2:
9a:77:a6:32:eb:1a:0f:04:97:6e:15:a8:ed:4e:d7:0f:fe:ab:
81:73:12:a7:51:e5:f3:3a:c8:98:17:ed:47:2a:aa:f0:51:76:
70:3c:2c:2a:6b:9b:a0:54:16:05:73:1c:7d:68:63:38:b5:9d:
89:f2:7a:88:ce:fd:d8:8e:5a:69:63:c7:2a:76:92:b9:9d:03:
8e:78:2d:77:5f:7f:9b:2e:42:f7:d4:78:fa:ff:2f:41:e2:51:
f3:1b:dd:3c:d5:9e:be:73:9b:df:d9:98:cd:53:bf:ca:c5:24:
e5:57:21:2f:7b:31:b4:e0:bf:3e:8e:16:c6:d6:8d:57:64:77:
4d:37:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:58 2025 by rpki-client