Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/3139322e3130392e3232392e302f32342d3234203d3e20313937373330.roa
File: 3139322e3130392e3232392e302f32342d3234203d3e20313937373330.roa (raw, json)
Hash identifier: w3N+5IVV6mTzROpWom3Sa8d69T/pR+Rasxh7g3agB4k=
Subject key identifier: 9B:0A:B2:50:29:ED:C7:A7:10:87:3F:1A:CA:6D:08:CA:76:67:7F:21
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 606599C645FE742BB19A110CF95815BF60C17908
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/3139322e3130392e3232392e302f32342d3234203d3e20313937373330.roa
Signing time: Thu 04 Jul 2024 06:47:20 +0000
ROA not before: Thu 04 Jul 2024 06:42:20 +0000
ROA not after: Thu 03 Jul 2025 06:47:20 +0000
asID: 197730
IP address blocks: 192.109.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:54:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:65:99:c6:45:fe:74:2b:b1:9a:11:0c:f9:58:15:bf:60:c1:79:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Jul 4 06:42:20 2024 GMT
Not After : Jul 3 06:47:20 2025 GMT
Subject: CN=9B0AB25029EDC7A710873F1ACA6D08CA76677F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:13:fc:5e:b3:ce:db:36:53:3e:1a:a1:d1:4c:
02:c0:1a:f5:24:1c:f6:d5:87:4f:58:72:6e:25:eb:
0b:99:4f:bf:96:00:78:d1:98:b3:75:62:a6:50:c9:
0a:49:ce:50:67:c5:25:af:00:e3:26:dd:33:70:d7:
05:7d:92:33:bf:77:ac:03:74:dd:3c:ed:63:21:98:
6c:da:88:7f:73:e4:af:45:63:0c:52:11:79:1b:32:
a3:5e:f9:36:6e:d2:65:37:f4:44:c8:a4:c7:75:02:
98:c7:a4:d2:b3:d5:9b:9b:0e:37:61:03:39:15:4d:
0f:d3:0a:c3:fa:a5:63:33:81:a0:9d:ef:84:8c:a2:
d3:09:8d:84:5b:6c:58:d0:a4:02:e1:0b:8c:b7:5e:
3f:ee:a4:5c:e1:4f:23:97:99:2f:d1:81:50:88:5a:
b1:f7:29:fb:de:d0:ab:a9:c9:03:59:17:a1:dd:f5:
db:ea:7f:c0:f6:1d:0b:d5:79:6e:20:5a:e8:8a:41:
7a:13:4a:a1:b2:57:0e:53:c0:91:4e:4b:4e:f2:90:
15:04:a0:c8:bf:0a:cf:91:3f:f4:b8:08:8c:19:c5:
20:69:f6:4f:ca:87:c8:b4:19:f1:eb:8e:e1:e3:99:
7c:17:e8:57:a4:02:f8:44:12:56:54:03:e3:10:59:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0A:B2:50:29:ED:C7:A7:10:87:3F:1A:CA:6D:08:CA:76:67:7F:21
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/3139322e3130392e3232392e302f32342d3234203d3e20313937373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.229.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:aa:57:3c:59:3d:59:c1:55:55:dd:d6:d7:55:8c:1f:fb:a7:
d7:8c:b0:04:a3:62:ff:a2:79:75:87:9a:35:d9:3b:dc:e4:e2:
56:ce:59:92:f2:47:43:e3:60:72:ca:47:67:94:b1:0c:8d:37:
70:d5:d9:0c:ca:59:03:08:74:c6:c1:13:30:5c:84:b2:4a:f8:
d6:3e:8e:4f:da:0b:8e:79:d5:b1:4c:5c:78:f3:61:0e:b9:24:
5d:f3:f5:9d:47:a9:de:f7:9d:4f:1d:18:15:ee:32:9e:70:a1:
9a:68:73:2d:f5:2d:bb:06:12:58:18:a5:51:16:c8:0d:58:53:
57:cc:74:17:36:6e:74:fe:7f:ac:ad:4c:3e:66:bc:c1:00:11:
4b:c1:6c:94:cf:0a:c0:3c:40:0d:41:64:2f:f1:9a:12:97:28:
5a:aa:d9:a4:4f:fb:88:8c:e8:b5:1c:07:82:f6:3b:6e:4d:d5:
a3:ca:e0:82:cf:35:3c:a2:96:43:e5:a0:d7:12:c6:0d:38:36:
f2:7a:2b:94:da:95:3b:7e:ee:0b:87:58:86:83:24:b8:98:3e:
ef:fd:b3:9b:08:4b:b0:bb:9a:21:00:ca:4f:1f:18:fa:92:e8:
5d:74:4b:ba:a8:36:fa:0d:91:f3:49:89:3f:a2:96:53:89:3f:
50:75:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:20 2025 by rpki-client