Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/39312e3232302e32352e302f32342d3234203d3e203136353039.roa
File: 39312e3232302e32352e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: NAGmsCYMcJFD+ck4SVQBmZXTEMsD8telKoXP769hK+U=
Subject key identifier: 34:94:2A:D3:B5:91:53:EA:56:87:D5:76:81:B6:0B:08:E5:39:62:A4
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 3C7C2F250D2A82639B0173EEFDDF5AD0CED47482
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/39312e3232302e32352e302f32342d3234203d3e203136353039.roa
Signing time: Mon 30 Dec 2024 15:30:42 +0000
ROA not before: Mon 30 Dec 2024 15:25:42 +0000
ROA not after: Mon 29 Dec 2025 15:30:42 +0000
asID: 16509
IP address blocks: 91.220.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:54:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:7c:2f:25:0d:2a:82:63:9b:01:73:ee:fd:df:5a:d0:ce:d4:74:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Dec 30 15:25:42 2024 GMT
Not After : Dec 29 15:30:42 2025 GMT
Subject: CN=34942AD3B59153EA5687D57681B60B08E53962A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:0d:0c:c6:cb:f7:79:b9:f1:ea:f8:8f:db:
6a:c9:0d:c8:b6:59:8d:5f:7a:fc:f1:f4:89:f4:c1:
89:56:2e:ec:e3:78:dd:b8:8b:b6:87:0e:15:6b:ae:
c9:34:b2:1c:de:49:3d:24:eb:6f:68:fa:e0:25:4e:
70:21:43:45:66:a3:06:4d:1a:60:4e:63:16:7a:53:
ba:45:26:e9:44:e9:32:30:85:29:91:4b:69:11:01:
a3:1f:12:c9:55:02:3a:70:48:0b:94:42:fe:38:e1:
a0:90:27:a5:17:4b:04:38:05:3c:bf:5b:c7:2b:9c:
2b:30:a4:68:09:34:df:5d:70:c6:5f:72:3b:af:34:
f3:f7:82:96:db:ea:35:17:1a:b8:63:70:7b:40:f3:
02:31:b4:d4:33:93:34:d2:87:41:75:60:8c:78:5c:
b9:ed:f0:70:cc:92:0d:eb:54:5b:33:b2:e6:ce:a6:
7c:49:24:c4:3f:ab:37:37:4a:da:b3:15:2d:92:80:
e3:fa:ae:b8:c0:67:f0:8e:ac:64:d8:21:46:3a:16:
76:21:cd:c9:06:6e:7f:18:55:1a:3c:2e:2e:9a:b4:
a8:82:cb:23:dc:c6:6c:d7:50:44:8d:45:73:f8:ab:
a6:bf:aa:a3:fa:10:30:26:15:3c:be:01:d1:c0:3e:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:94:2A:D3:B5:91:53:EA:56:87:D5:76:81:B6:0B:08:E5:39:62:A4
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/39312e3232302e32352e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:88:2d:af:2a:74:37:1b:ed:71:fb:c8:91:86:32:5d:10:d6:
40:02:a0:16:2f:18:80:63:fc:1a:d4:38:6b:7d:2b:7d:fb:9c:
d7:90:34:dc:b1:cf:af:a1:b8:48:7d:c9:97:d6:6a:64:d3:98:
a9:ca:75:5a:f5:1a:25:24:1c:c2:94:d6:68:4d:a4:2d:47:5b:
e9:d0:c7:12:d7:8d:11:bc:f0:4b:85:34:7b:36:b2:44:4d:9a:
91:49:87:31:0a:45:09:33:52:1f:07:bf:58:92:f3:8f:e0:07:
8b:00:5a:b8:f6:69:5d:ba:51:40:fc:d3:28:f1:54:24:8f:6e:
6b:8d:6e:4c:50:dc:11:d9:c6:cf:69:f9:af:ab:02:36:57:0e:
52:f1:ad:6d:d9:f6:2f:db:b0:a5:3b:aa:40:a2:36:d7:f7:db:
aa:92:e5:e6:e1:df:a9:42:14:b0:10:4e:73:62:7f:0e:77:57:
7d:23:c5:d7:e6:db:6b:10:29:f7:0c:e9:d6:06:53:90:99:a6:
e2:35:19:72:02:f9:9b:e7:d5:12:34:04:29:cc:86:3c:f3:4b:
ff:9f:45:ad:04:c3:24:83:8c:e8:ea:30:6b:d3:75:0a:23:51:
df:82:de:47:75:22:77:c6:63:15:e4:36:44:b9:d2:e7:6b:cb:
5e:fb:1a:e9
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIUPHwvJQ0qgmObAXPu/d9a0M7UdIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYxYzYxNjM2NGI4OTY1OWVkOWYxOGNiMGFmNzc0MjA0
MzdjYzdkYTAeFw0yNDEyMzAxNTI1NDJaFw0yNTEyMjkxNTMwNDJaMDMxMTAvBgNV
BAMTKDM0OTQyQUQzQjU5MTUzRUE1Njg3RDU3NjgxQjYwQjA4RTUzOTYyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKA0Mxsv3ebnx6viP22rJDci2
WY1fevzx9In0wYlWLuzjeN24i7aHDhVrrsk0shzeST0k629o+uAlTnAhQ0VmowZN
GmBOYxZ6U7pFJulE6TIwhSmRS2kRAaMfEslVAjpwSAuUQv444aCQJ6UXSwQ4BTy/
W8crnCswpGgJNN9dcMZfcjuvNPP3gpbb6jUXGrhjcHtA8wIxtNQzkzTSh0F1YIx4
XLnt8HDMkg3rVFszsubOpnxJJMQ/qzc3StqzFS2SgOP6rrjAZ/COrGTYIUY6FnYh
zckGbn8YVRo8Li6atKiCyyPcxmzXUESNRXP4q6a/qqP6EDAmFTy+AdHAPvZXAgMB
AAGjggG6MIIBtjAdBgNVHQ4EFgQUNJQq07WRU+pWh9V2gbYLCOU5YqQwHwYDVR0j
BBgwFoAUdhxhY2S4llntnxjLCvd0IEN8x9owDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIxLzc2MUM2MTYzNjRC
ODk2NTlFRDlGMThDQjBBRjc3NDIwNDM3Q0M3REEuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kaHhoWTJTNGxsbnRueGpMQ3ZkMElFTjh4OW8uY2VyMGwGCCsGAQUF
BwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjEvMzkz
MTJlMzIzMjMwMmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjM1MzAz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAFvcGTANBgkqhkiG9w0BAQsFAAOCAQEAa4gtryp0NxvtcfvI
kYYyXRDWQAKgFi8YgGP8GtQ4a30rffuc15A03LHPr6G4SH3Jl9ZqZNOYqcp1WvUa
JSQcwpTWaE2kLUdb6dDHEteNEbzwS4U0ezayRE2akUmHMQpFCTNSHwe/WJLzj+AH
iwBauPZpXbpRQPzTKPFUJI9ua41uTFDcEdnGz2n5r6sCNlcOUvGtbdn2L9uwpTuq
QKI21/fbqpLl5uHfqUIUsBBOc2J/DndXfSPF1+bbaxAp9wzp1gZTkJmm4jUZcgL5
m+fVEjQEKcyGPPNL/59FrQTDJIOM6Oowa9N1CiNR34LeR3Uid8ZjFeQ2RLnS52vL
Xvsa6Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:01 2025 by rpki-client