Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/3139322e3130392e3232392e302f32342d3234203d3e20313937373330.roa
File: 3139322e3130392e3232392e302f32342d3234203d3e20313937373330.roa (raw, json)
Hash identifier: Rhquwo9dkouPfvW0Tcj7o8fwdl2Tt4r59xGbPIDv8fs=
Subject key identifier: A8:2B:5A:77:76:7D:14:C1:17:FE:C0:B5:A2:6D:35:01:6D:54:64:2F
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 036C22A52C648D64C6690C1D4DE4E34D2AE9E15B
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/3139322e3130392e3232392e302f32342d3234203d3e20313937373330.roa
Signing time: Thu 03 Aug 2023 05:59:28 +0000
ROA not before: Thu 03 Aug 2023 05:54:28 +0000
ROA not after: Thu 01 Aug 2024 05:59:28 +0000
asID: 197730
IP address blocks: 192.109.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6c:22:a5:2c:64:8d:64:c6:69:0c:1d:4d:e4:e3:4d:2a:e9:e1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Aug 3 05:54:28 2023 GMT
Not After : Aug 1 05:59:28 2024 GMT
Subject: CN=A82B5A77767D14C117FEC0B5A26D35016D54642F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:7f:67:f2:fe:af:87:96:cd:3e:b5:ad:0d:
98:ab:bc:0a:e7:85:49:44:97:46:57:5d:ae:79:c1:
e1:43:d9:39:fe:98:5a:24:0d:f2:79:17:93:91:83:
dc:a9:7d:f1:cd:27:40:ea:19:a6:00:d2:08:fa:72:
e0:c0:94:ab:74:8f:ea:1c:69:1a:8f:49:ef:1a:66:
36:87:37:82:20:03:b6:dd:93:4e:03:dd:73:57:da:
be:ee:cf:7e:6d:ed:ed:7d:74:16:08:92:b5:c1:af:
3a:7e:cc:72:99:38:5f:ed:78:10:11:80:80:cf:10:
b5:93:59:24:89:25:16:1e:13:25:6b:e6:de:03:1b:
ed:da:a1:8f:9b:ab:1e:10:ef:27:f6:53:0c:d7:34:
d9:9f:63:52:f2:9c:6f:29:46:3e:e6:fa:d9:50:8d:
e0:b2:e2:20:3f:8c:6e:4f:bf:53:5b:8e:9a:75:99:
42:c4:10:dc:5e:bb:cd:9e:f0:e6:48:81:d4:9d:8a:
1e:ab:06:e7:66:b4:fb:96:1b:92:28:93:4f:93:d5:
c8:b3:61:48:54:af:78:67:48:0f:99:88:d7:52:33:
de:70:bb:16:3b:5e:ab:1e:e1:10:67:04:c4:fc:ba:
54:8a:55:06:98:ba:16:51:f2:84:de:2a:e8:b5:d1:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2B:5A:77:76:7D:14:C1:17:FE:C0:B5:A2:6D:35:01:6D:54:64:2F
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/3139322e3130392e3232392e302f32342d3234203d3e20313937373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.229.0/24
Signature Algorithm: sha256WithRSAEncryption
15:66:dd:3e:17:95:2a:1a:b0:dd:8a:7b:a1:5f:04:31:8a:b1:
47:25:13:ac:51:e2:2c:7c:19:2d:86:01:f5:39:bf:3d:28:4d:
f3:f0:4d:8a:76:2a:5a:df:df:07:65:82:e3:0b:8e:c5:3f:4a:
9f:18:7c:38:e4:e8:45:94:39:e8:d0:1c:64:29:cb:06:95:38:
33:df:0b:f4:da:09:98:e6:76:69:0f:d9:53:5a:63:4d:78:93:
e7:bb:a0:bf:c4:4d:6f:65:18:f2:d7:63:8b:de:09:18:49:36:
c7:51:c9:a4:1b:4b:f7:46:ff:1f:cd:60:50:e7:c6:70:90:10:
9a:ae:30:8c:df:b3:b9:51:34:fe:fc:a0:00:d2:b0:97:1e:0f:
2d:83:2b:1b:34:c8:4d:3e:c0:f9:e4:3d:02:43:62:a4:40:a1:
31:c6:c5:49:b7:c0:b8:e4:b6:35:6b:72:a8:90:cc:5c:d5:70:
c5:46:54:af:06:8e:76:8d:b6:cb:9b:e9:a2:b5:01:84:8c:73:
f5:5b:df:2b:0d:5c:0a:b8:18:45:ba:dd:4f:db:e1:a6:9f:2b:
0d:2d:25:c8:18:6e:af:6e:fc:23:95:8e:a7:ea:7e:20:b8:21:
84:68:af:4b:f1:41:6b:14:81:87:64:43:91:61:a1:73:0f:5c:
11:91:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:28:14 2024 by rpki-client on console-ams.rpki-client.org