Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/4/34362e3137352e3133332e302f32342d3234203d3e20323130393337.roa
File: 34362e3137352e3133332e302f32342d3234203d3e20323130393337.roa (raw, json)
Hash identifier: CLPzpXSqRhB0vIiXp2Aa10oUDj5RkooHwMHmT9ml2b4=
Subject key identifier: EA:5E:63:91:5C:CD:98:B9:B9:1A:E0:E6:DA:93:D6:ED:1D:3B:D8:D4
Certificate issuer: /CN=63df6923415fc62d1c49a5cb7d3d2505d61f065c
Certificate serial: 5EE271172694ACC5D2A040307882E6BF82BCC6A9
Authority key identifier: 63:DF:69:23:41:5F:C6:2D:1C:49:A5:CB:7D:3D:25:05:D6:1F:06:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y99pI0Ffxi0cSaXLfT0lBdYfBlw.cer
Subject info access: rsync://0.sb/repo/sb/4/34362e3137352e3133332e302f32342d3234203d3e20323130393337.roa
Signing time: Fri 25 Jul 2025 10:52:38 +0000
ROA not before: Fri 25 Jul 2025 10:47:38 +0000
ROA not after: Fri 24 Jul 2026 10:52:38 +0000
asID: 210937
IP address blocks: 46.175.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/4/63DF6923415FC62D1C49A5CB7D3D2505D61F065C.crl
rsync://0.sb/repo/sb/4/63DF6923415FC62D1C49A5CB7D3D2505D61F065C.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y99pI0Ffxi0cSaXLfT0lBdYfBlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e2:71:17:26:94:ac:c5:d2:a0:40:30:78:82:e6:bf:82:bc:c6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63df6923415fc62d1c49a5cb7d3d2505d61f065c
Validity
Not Before: Jul 25 10:47:38 2025 GMT
Not After : Jul 24 10:52:38 2026 GMT
Subject: CN=EA5E63915CCD98B9B91AE0E6DA93D6ED1D3BD8D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:44:6c:1f:09:31:d1:00:af:dd:46:a8:2c:
78:2e:21:63:a0:8d:4b:1c:9e:39:35:38:37:b4:d4:
cc:97:dd:f1:3d:61:90:a9:27:28:6a:a4:6f:0b:53:
ae:de:ff:41:33:9d:3d:40:85:77:bc:91:80:97:2c:
15:f9:e6:5b:13:20:86:a0:d2:23:f5:73:dd:1c:26:
40:50:37:f7:aa:04:72:c9:7c:c1:59:f4:8a:e1:3c:
f3:ac:a4:c3:b9:d7:44:f6:cf:9d:2b:b3:b8:7d:29:
47:aa:f3:b4:32:7c:95:85:b3:65:77:e9:11:96:6b:
6e:bf:d0:d6:a3:8c:a8:70:c0:24:0b:fd:ab:58:35:
f2:da:fc:f6:2e:a1:af:4e:31:c4:a9:a5:99:98:13:
c9:c1:d5:da:a9:29:7e:b9:4a:c6:80:89:26:9a:23:
9a:8c:3a:f7:d3:42:3b:c7:59:ac:18:bd:fd:3d:8c:
07:40:ae:7a:97:77:ab:a0:bf:ad:77:96:10:98:c4:
5d:31:55:ff:fe:88:43:92:8a:7e:e7:d1:1b:08:58:
d7:67:2f:57:8d:f8:8f:ba:6c:ee:70:5f:c4:27:5f:
f3:f7:f8:30:34:3c:27:78:e7:f6:ad:64:61:59:a7:
09:d7:c2:2b:29:63:6d:81:58:ec:9c:7c:61:72:0b:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5E:63:91:5C:CD:98:B9:B9:1A:E0:E6:DA:93:D6:ED:1D:3B:D8:D4
X509v3 Authority Key Identifier:
keyid:63:DF:69:23:41:5F:C6:2D:1C:49:A5:CB:7D:3D:25:05:D6:1F:06:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/4/63DF6923415FC62D1C49A5CB7D3D2505D61F065C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y99pI0Ffxi0cSaXLfT0lBdYfBlw.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/4/34362e3137352e3133332e302f32342d3234203d3e20323130393337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.133.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e2:30:ed:54:4c:8f:9d:4e:be:b7:f2:70:12:d2:f2:e7:9a:
28:83:f6:f7:6b:d3:c8:31:88:6e:fc:36:19:ed:4b:4f:71:47:
05:63:79:e6:a5:fe:a0:f9:fa:3b:df:48:2d:e9:d4:3a:29:06:
6d:ab:04:ab:33:3e:5e:c1:5c:c3:99:2b:44:85:ed:5a:8d:32:
a7:f1:36:27:a5:9a:48:83:35:47:46:9d:b5:7e:6c:4d:1f:4e:
9f:d6:a4:71:58:fc:57:f1:ce:ed:48:4c:9d:2a:9f:b1:a4:e2:
57:8e:3c:15:2c:a7:0c:91:a5:27:40:af:f6:aa:03:9b:cd:26:
79:52:c3:d8:e6:ff:39:74:e3:5d:10:2e:fc:cc:5f:09:32:e9:
b4:60:e8:b0:14:52:8b:31:d6:df:f6:73:83:cb:21:5e:66:fa:
31:24:c1:fd:30:7a:7b:48:ee:bf:bd:54:5a:21:5f:97:18:01:
f6:c4:7a:4e:13:bc:3c:5e:ff:ad:82:3d:ff:b2:69:1c:f3:d3:
0f:c7:90:da:24:a4:9a:5f:5b:a8:40:b2:95:1d:65:3c:01:e8:
a4:3e:5d:8c:66:93:f9:8a:b3:dc:46:18:54:28:ed:a5:ea:95:
7b:3d:1b:50:bc:e5:4a:ad:cf:30:37:70:03:e3:bf:bb:52:f2:
b3:8e:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:23 2025 by rpki-client