Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/326131313a383038303a3a2f32392d313238203d3e203233383538.roa
File: 326131313a383038303a3a2f32392d313238203d3e203233383538.roa (raw, json)
Hash identifier: b8eoDfa3Uog8rRL1vySBHIOJaa69nWJpm5vYAnGVuEY=
Subject key identifier: A7:15:3F:06:57:2D:6B:2F:54:5F:EA:92:46:72:AC:C6:C8:B9:10:85
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 2ABC667463FF876F9F23DDC39FF8EDBCA51D5691
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/326131313a383038303a3a2f32392d313238203d3e203233383538.roa
Signing time: Thu 09 Jan 2025 14:52:07 +0000
ROA not before: Thu 09 Jan 2025 14:47:07 +0000
ROA not after: Thu 08 Jan 2026 14:52:07 +0000
asID: 23858
IP address blocks: 2a11:8080::/29 maxlen: 128
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:bc:66:74:63:ff:87:6f:9f:23:dd:c3:9f:f8:ed:bc:a5:1d:56:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Jan 9 14:47:07 2025 GMT
Not After : Jan 8 14:52:07 2026 GMT
Subject: CN=A7153F06572D6B2F545FEA924672ACC6C8B91085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:51:02:68:41:be:a1:00:d0:be:bc:03:86:
40:2f:29:9a:66:e0:78:11:20:8a:b4:6f:69:7c:ce:
e0:a0:97:ab:f2:89:07:00:6f:9c:26:82:58:da:1c:
e7:ae:38:83:04:7e:00:1b:e2:2e:80:df:3d:21:11:
05:9e:81:da:d1:cc:98:d1:85:fa:64:6f:2f:a1:26:
29:72:48:78:81:3d:e6:b3:90:b4:20:e8:b2:0d:d7:
80:9f:48:8f:ac:ab:14:e5:b3:74:92:84:6a:67:eb:
ae:a9:03:48:11:31:f7:a8:9f:ce:4b:99:b2:91:f6:
1b:72:4d:36:41:b5:2a:db:41:81:ce:ed:0a:1b:54:
c6:b3:6b:73:4e:34:28:ca:e9:4b:0c:e4:92:d1:94:
53:ef:1e:a6:63:a0:75:2a:59:1b:d9:d7:6f:bc:7e:
92:0b:53:0f:36:3b:bb:30:d0:2f:17:39:e3:1d:8a:
c5:cd:05:a0:1b:29:21:66:99:55:61:ea:d0:9c:b1:
a2:3e:06:6c:3d:0f:18:4d:8c:49:85:2a:20:13:93:
ab:cf:25:03:c1:2a:ab:0f:66:31:70:fa:a8:41:33:
a1:4d:cf:e8:a9:20:c3:be:87:24:c0:c4:8b:12:db:
b1:c6:34:8f:d3:41:27:a1:d6:d4:ca:89:43:cc:bc:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:3F:06:57:2D:6B:2F:54:5F:EA:92:46:72:AC:C6:C8:B9:10:85
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a383038303a3a2f32392d313238203d3e203233383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8080::/29
Signature Algorithm: sha256WithRSAEncryption
3c:d6:77:c0:79:04:63:af:fd:05:67:75:32:1f:14:0c:31:74:
66:a5:01:d3:d3:e6:0b:ff:29:69:c4:ca:9b:6b:59:32:b4:65:
3e:e2:99:ca:84:86:fd:8d:ef:33:32:ce:37:38:65:6e:1a:a5:
f6:92:b6:03:64:b6:52:ae:54:cd:a5:a0:23:47:d9:75:af:44:
01:24:41:00:ca:53:2c:7b:cd:3b:f2:48:77:e9:aa:92:f1:36:
b9:41:b6:15:7b:3d:b1:6f:12:c9:76:66:cd:dd:18:8b:ce:30:
59:8e:6c:5f:71:5f:3b:4a:a1:f4:07:f4:ff:a0:07:ab:68:3f:
a2:de:9c:84:4a:08:1d:c8:15:c3:59:6a:6e:94:90:31:cc:43:
a1:d4:a2:da:82:3f:ce:9b:7f:30:09:6d:f1:ae:4f:da:7c:b4:
8d:f0:27:1c:21:35:f0:c4:94:d3:5e:fc:54:33:f5:18:5b:9d:
ea:39:17:d2:13:d8:36:e1:31:09:7e:3e:36:68:c3:ac:7f:56:
cf:0c:09:0f:5d:3a:33:d8:cf:a6:d2:26:ab:26:52:ec:4a:f4:
8b:26:5f:87:36:74:3f:3c:33:1e:67:fd:67:69:4a:d6:3d:17:
c1:b3:73:bf:0b:60:4f:fe:1a:52:6a:39:99:86:52:95:8d:01:
b4:ee:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:34 2025 by rpki-client