Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa
File: 326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa (raw, json)
Hash identifier: LC9IRB4htaktpRB4L54WnwaKpOBGRaDtKdq9TAm50RI=
Subject key identifier: E2:6A:A4:91:6D:F6:76:1E:87:CA:3C:86:A7:EF:90:E9:3D:D4:6F:A8
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 60D930E22ADE9249B597ECAA2A6857717C457CFB
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa
Signing time: Thu 26 Dec 2024 11:52:02 +0000
ROA not before: Thu 26 Dec 2024 11:47:02 +0000
ROA not after: Thu 25 Dec 2025 11:52:02 +0000
asID: 43357
IP address blocks: 2a11:3:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d9:30:e2:2a:de:92:49:b5:97:ec:aa:2a:68:57:71:7c:45:7c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Dec 26 11:47:02 2024 GMT
Not After : Dec 25 11:52:02 2025 GMT
Subject: CN=E26AA4916DF6761E87CA3C86A7EF90E93DD46FA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:59:d2:03:c8:fd:4b:f8:73:20:38:5b:56:
d6:66:62:67:3b:4a:d3:23:10:1e:a0:d6:c7:3c:8e:
4f:7a:ac:35:f2:7a:a1:be:ad:b6:ed:7a:3c:61:7c:
b0:8f:d6:f7:4a:25:2c:56:11:d8:60:a1:14:17:24:
19:10:a7:4b:78:a4:62:86:f6:c7:7a:c9:2a:13:89:
63:5b:81:b6:1a:d8:93:1c:e6:9a:6a:9d:3d:77:6d:
8e:ec:1e:b2:68:c7:1d:68:c1:4a:f8:9a:99:5b:60:
82:08:84:f1:55:d3:5a:9e:79:70:6a:1a:07:4b:cc:
a5:4c:bb:ab:84:a7:d6:2b:9c:63:0c:41:18:23:bc:
d7:3f:fb:43:37:e5:c0:cc:49:d0:ac:1a:6b:53:78:
4f:2b:21:0d:a3:09:f0:5f:fa:89:18:3b:23:49:01:
29:bf:2a:9b:e0:20:b9:c3:25:23:2f:10:76:ca:e7:
c3:b0:7c:35:6f:3b:32:78:88:b7:71:8c:25:94:39:
10:53:b6:9b:72:eb:e8:57:1b:01:3c:8d:d0:f2:f4:
0c:0d:fa:f7:3d:a6:42:27:22:18:39:d6:f5:41:af:
19:8a:fe:6c:13:b1:03:fe:9c:7b:91:6c:cb:92:16:
0a:b4:89:68:2e:5e:f9:c5:ca:3e:d3:87:aa:14:a8:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6A:A4:91:6D:F6:76:1E:87:CA:3C:86:A7:EF:90:E9:3D:D4:6F:A8
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3:500::/40
Signature Algorithm: sha256WithRSAEncryption
aa:e6:ea:9b:59:45:ea:88:3d:e9:fe:e8:85:44:f9:cc:e5:e6:
04:94:54:a1:0b:e9:73:06:e1:22:b4:8c:ad:43:c5:1a:d5:c7:
eb:ab:cd:4f:e2:4a:f2:4a:1d:8b:07:08:8b:a9:96:d7:15:40:
4f:04:05:75:cc:1b:d4:53:95:8b:87:45:f4:56:eb:c0:c1:69:
21:2d:6c:14:26:4b:75:4c:af:7f:55:0a:e0:51:b8:df:a1:73:
03:c1:c1:e3:11:6d:eb:c8:7f:c5:c3:50:b5:7c:7c:cf:3e:d4:
bd:dc:4a:7f:b9:0c:33:41:e7:73:f6:44:3a:4f:fd:ba:ca:77:
c4:e0:b8:ed:b7:54:1f:68:0c:68:2f:2a:b6:5a:82:1f:c4:85:
84:ac:7f:bb:ef:6e:67:d0:6d:06:ad:a1:fc:29:b8:09:9b:ca:
89:ff:45:4f:43:b2:5c:6d:2a:0f:c6:6b:a0:92:cd:71:b5:e7:
60:8b:4c:53:b7:b3:0b:c0:d3:f7:68:04:da:0e:b8:b8:12:84:
c9:64:f9:9a:23:41:f0:34:2c:e7:8e:b3:95:5b:d2:fc:f1:dc:
e1:2e:f8:66:ca:5a:28:4b:46:e1:9c:26:4c:9f:5b:21:4c:89:
4f:20:a7:7e:6e:1f:a1:5b:04:d4:e4:7f:12:39:bc:1d:47:3c:
fd:79:41:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:16 2025 by rpki-client