Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e20323130383037.roa
File: 39342e3132342e37392e302f32342d3234203d3e20323130383037.roa (raw, json)
Hash identifier: 8ai4jBBEXqBhy0d+bW6vCZlIpCog/7Y/B3NzzCVqSxU=
Subject key identifier: E9:FA:FC:AC:25:E6:B5:BD:4E:01:9F:D8:1E:9B:6D:61:54:F3:33:6E
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 6AE3D7A75B310CBD8E1F0F915549B5C6529673E7
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e20323130383037.roa
Signing time: Tue 24 Dec 2024 06:52:00 +0000
ROA not before: Tue 24 Dec 2024 06:47:00 +0000
ROA not after: Tue 23 Dec 2025 06:52:00 +0000
asID: 210807
IP address blocks: 94.124.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e3:d7:a7:5b:31:0c:bd:8e:1f:0f:91:55:49:b5:c6:52:96:73:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Dec 24 06:47:00 2024 GMT
Not After : Dec 23 06:52:00 2025 GMT
Subject: CN=E9FAFCAC25E6B5BD4E019FD81E9B6D6154F3336E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:e2:66:3c:d3:0a:3c:ae:e9:4a:b5:9d:3c:
01:73:d6:d8:c9:46:14:9f:ca:6e:15:e6:72:3a:a5:
a6:a5:69:7d:60:d6:fe:59:f1:3f:66:40:48:17:0a:
d5:fa:bc:e8:3d:e6:67:e3:97:d7:0c:52:fc:dc:4c:
b7:7a:24:9e:3d:66:b8:43:20:9f:80:16:54:8d:2d:
67:b3:86:1c:3a:dd:d7:d6:96:85:1c:e9:ae:40:e7:
d9:39:2a:a4:b1:c7:0f:dc:cc:ef:ee:53:2f:83:36:
5d:ee:cc:64:99:33:73:fc:e9:ea:21:87:78:6f:70:
6f:b5:6e:ea:a9:a0:d6:24:1d:f8:4b:d9:53:88:8f:
0b:f3:00:b9:b7:86:b4:04:c4:d0:85:90:62:04:b1:
c1:29:0c:dd:e5:01:c1:cc:03:ed:97:b1:08:3d:cf:
d7:22:4e:7e:30:d4:f4:dd:d3:b4:aa:d9:8b:c2:9b:
47:2b:90:85:d3:62:55:30:dc:09:b9:30:53:cb:11:
90:9d:af:5b:79:14:c6:da:6d:12:f1:a2:1c:b0:1b:
73:18:e1:13:90:dc:c7:fa:a4:72:6a:7e:0a:21:67:
49:d0:69:37:21:61:51:f4:59:7f:0e:ba:71:26:b4:
60:d4:ea:ce:70:80:2b:f4:02:96:2a:e3:97:da:85:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:FC:AC:25:E6:B5:BD:4E:01:9F:D8:1E:9B:6D:61:54:F3:33:6E
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e20323130383037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:08:a8:73:b7:e9:32:58:81:d4:31:3d:f3:26:42:2f:7b:a2:
9d:64:10:e9:73:b9:1b:a5:41:d6:e5:9d:19:f3:b9:87:92:5c:
72:2f:dd:2f:ea:a1:75:26:7d:e8:bc:9d:50:98:41:b4:99:ab:
ce:86:e1:86:e5:d1:06:bf:44:f9:d0:bd:57:0b:e9:07:eb:7a:
7d:6c:dd:c1:fb:b5:07:b9:be:63:7f:59:53:18:bd:85:de:7f:
c4:4d:ca:80:2d:c3:17:7b:cf:6b:89:08:c3:bc:a9:35:e4:4a:
2f:c8:9b:c2:54:53:d7:19:d7:a9:f4:56:32:a4:a7:08:3a:fc:
02:d0:76:38:bb:43:ac:9e:0e:6d:ab:49:5a:87:7f:85:ed:75:
12:16:86:a7:d1:e6:06:09:b3:41:e3:72:94:73:17:96:4d:3a:
08:1b:ed:f3:57:83:f8:29:61:89:5a:e4:47:7d:91:c1:2b:5c:
e4:1d:9f:a0:a2:d2:16:34:1d:d5:6c:c0:af:1b:bf:6e:c5:7d:
bb:90:6d:ed:be:bf:16:6c:86:38:d6:c8:8b:97:1a:83:51:67:
e6:43:95:c0:df:bc:39:6d:49:8e:23:e6:2c:7a:37:70:48:f3:
26:5d:b2:18:8c:e0:60:5e:8a:31:58:38:7e:55:44:ad:5d:67:
68:59:9e:2e
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIUauPXp1sxDL2OHw+RVUm1xlKWc+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE3YjA4ODkyMmQwZjMzZmVjYTE2NGUwODU1NGVjOTky
ZGFhMzljNTAeFw0yNDEyMjQwNjQ3MDBaFw0yNTEyMjMwNjUyMDBaMDMxMTAvBgNV
BAMTKEU5RkFGQ0FDMjVFNkI1QkQ0RTAxOUZEODFFOUI2RDYxNTRGMzMzNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OuJmPNMKPK7pSrWdPAFz1tjJ
RhSfym4V5nI6paalaX1g1v5Z8T9mQEgXCtX6vOg95mfjl9cMUvzcTLd6JJ49ZrhD
IJ+AFlSNLWezhhw63dfWloUc6a5A59k5KqSxxw/czO/uUy+DNl3uzGSZM3P86eoh
h3hvcG+1buqpoNYkHfhL2VOIjwvzALm3hrQExNCFkGIEscEpDN3lAcHMA+2XsQg9
z9ciTn4w1PTd07Sq2YvCm0crkIXTYlUw3Am5MFPLEZCdr1t5FMbabRLxohywG3MY
4ROQ3Mf6pHJqfgohZ0nQaTchYVH0WX8OunEmtGDU6s5wgCv0ApYq45fahdcnAgMB
AAGjggG6MIIBtjAdBgNVHQ4EFgQU6fr8rCXmtb1OAZ/YHpttYVTzM24wHwYDVR0j
BBgwFoAUkXsIiSLQ8z/soWTghVTsmS2qOcUwDgYDVR0PAQH/BAQDAgeAMFQGA1Ud
HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzEvOTE3QjA4ODkyMkQw
RjMzRkVDQTE2NEUwODU1NEVDOTkyREFBMzlDNS5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL2tYc0lpU0xROHpfc29XVGdoVlRzbVMycU9jVS5jZXIwbQYIKwYBBQUH
AQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovLzAuc2IvcmVwby9zYi8xLzM5MzQy
ZTMxMzIzNDJlMzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMDM4MzAz
Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAF58TzANBgkqhkiG9w0BAQsFAAOCAQEAngioc7fpMliB1DE9
8yZCL3uinWQQ6XO5G6VB1uWdGfO5h5Jcci/dL+qhdSZ96LydUJhBtJmrzobhhuXR
Br9E+dC9VwvpB+t6fWzdwfu1B7m+Y39ZUxi9hd5/xE3KgC3DF3vPa4kIw7ypNeRK
L8ibwlRT1xnXqfRWMqSnCDr8AtB2OLtDrJ4ObatJWod/he11EhaGp9HmBgmzQeNy
lHMXlk06CBvt81eD+ClhiVrkR32RwStc5B2foKLSFjQd1WzArxu/bsV9u5Bt7b6/
FmyGONbIi5cag1Fn5kOVwN+8OW1JjiPmLHo3cEjzJl2yGIzgYF6KMVg4flVErV1n
aFmeLg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:33:09 2025 by rpki-client