Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/326131313a383038303a3a2f32392d313238203d3e2038383838.roa
File: 326131313a383038303a3a2f32392d313238203d3e2038383838.roa (raw, json)
Hash identifier: lpiENc1NiZMB+xhZWFop+uH5ii+S65IL3vFdFlLkM/g=
Subject key identifier: 82:64:17:55:53:FC:C9:62:19:D7:98:1D:D7:1C:16:9D:48:20:05:43
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 5808386B73F24D3A01838DC356DCB71C8D15C540
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/326131313a383038303a3a2f32392d313238203d3e2038383838.roa
Signing time: Tue 31 Dec 2024 14:52:05 +0000
ROA not before: Tue 31 Dec 2024 14:47:05 +0000
ROA not after: Tue 30 Dec 2025 14:52:05 +0000
asID: 8888
IP address blocks: 2a11:8080::/29 maxlen: 128
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:08:38:6b:73:f2:4d:3a:01:83:8d:c3:56:dc:b7:1c:8d:15:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Dec 31 14:47:05 2024 GMT
Not After : Dec 30 14:52:05 2025 GMT
Subject: CN=8264175553FCC96219D7981DD71C169D48200543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:18:99:d1:fe:38:05:4b:c5:79:a6:a0:66:
22:f0:6d:18:70:82:b6:a1:90:f2:84:c1:af:d3:87:
37:c2:21:b1:73:59:83:14:64:9e:62:7a:f4:05:d0:
d5:f4:97:26:cd:ab:f6:ae:6a:ee:58:84:de:ba:e3:
68:63:45:fe:9b:9b:f7:44:32:d6:69:8f:b5:f7:58:
52:0e:84:6a:92:cf:1c:2c:18:12:4d:72:51:62:6f:
37:42:fd:93:ac:28:90:19:dc:43:41:60:c1:80:d2:
39:77:dd:dd:f8:44:9f:61:02:84:40:0b:a9:b2:5a:
a9:2a:b1:5b:ad:06:4b:ac:e7:74:72:1e:d8:64:e5:
a8:8a:58:5f:fa:19:49:11:3c:ad:48:e2:7f:da:9c:
72:7f:60:fd:71:8c:6e:68:28:58:ea:b9:89:e0:39:
ab:b9:86:01:e8:ff:95:1b:63:50:30:0b:f6:b4:4c:
76:7b:f2:b6:ba:06:16:6c:8a:9a:73:eb:af:61:08:
2d:d0:03:ec:51:5b:67:57:63:bf:27:d4:fb:08:07:
dc:a1:33:d4:2b:90:96:eb:cf:cd:97:a8:fb:a2:57:
c1:b4:f3:dd:27:5f:53:4e:25:32:5d:60:8b:81:f7:
59:fc:7a:fe:ec:d9:c5:d3:b8:0a:02:06:d5:9f:11:
9f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:64:17:55:53:FC:C9:62:19:D7:98:1D:D7:1C:16:9D:48:20:05:43
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a383038303a3a2f32392d313238203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8080::/29
Signature Algorithm: sha256WithRSAEncryption
78:bd:fe:a0:79:11:bc:36:7f:9b:47:cd:a4:5e:c6:d3:aa:9c:
d5:f1:b4:67:80:4d:2c:b6:ea:46:b4:8e:2d:42:d7:ec:f0:4f:
97:c3:48:31:23:fa:26:51:7e:b2:28:cd:bf:02:10:2a:45:3e:
3d:0a:07:97:8c:90:7c:08:a4:54:08:78:ed:a9:c9:07:cd:4e:
52:a9:54:ad:8a:03:6b:08:0d:d7:25:60:1c:f3:72:35:fc:42:
7d:99:bc:e5:02:de:8a:ae:3e:b0:f3:f4:75:88:bf:25:80:05:
76:dd:35:30:1d:8c:e3:fe:bc:a7:91:51:1e:8d:aa:58:fc:b6:
7d:69:93:80:b0:92:63:b6:a8:1b:f9:1b:20:a6:27:4e:43:e4:
2f:58:74:f7:b3:61:29:54:63:8e:f5:f0:c7:a2:a6:f1:6d:f3:
62:67:15:a6:4d:b2:a2:bc:12:b1:7a:a9:b5:5e:8b:9f:e9:d8:
b8:c6:10:fe:6a:99:b5:c0:62:e8:18:f4:42:41:84:7a:12:6f:
7c:da:a1:b5:88:31:35:f9:64:a0:0b:87:68:b9:5f:71:77:a0:
1a:87:b0:7a:bb:61:18:83:de:1c:e4:de:9c:94:90:0e:8f:87:
45:43:ee:fa:87:0f:3e:c0:af:4c:f4:5f:c7:d9:9a:1d:9f:b8:
af:4f:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:18 2025 by rpki-client