Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/22/326131323a346538303a3a2f32392d3438203d3e20323130343334.roa
File: 326131323a346538303a3a2f32392d3438203d3e20323130343334.roa (raw, json)
Hash identifier: TYNQHziEzbN/T5Dkx2U9xtHTxcW/DqTHoFLTN3UratQ=
Subject key identifier: CA:FE:4C:18:BD:C6:57:17:D7:71:E6:51:AA:17:94:A4:C3:3E:5C:C5
Certificate issuer: /CN=322056fd080c9cdacb18a9c427eb01033b2d0854
Certificate serial: 18336E653F99D8760126CDF4E36E1854C179D350
Authority key identifier: 32:20:56:FD:08:0C:9C:DA:CB:18:A9:C4:27:EB:01:03:3B:2D:08:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiBW_QgMnNrLGKnEJ-sBAzstCFQ.cer
Subject info access: rsync://0.sb/repo/sb/22/326131323a346538303a3a2f32392d3438203d3e20323130343334.roa
Signing time: Fri 22 Sep 2023 10:19:41 +0000
ROA not before: Fri 22 Sep 2023 10:14:41 +0000
ROA not after: Fri 20 Sep 2024 10:19:41 +0000
asID: 210434
IP address blocks: 2a12:4e80::/29 maxlen: 48
Validation: OK
Signature path: rsync://0.sb/repo/sb/22/322056FD080C9CDACB18A9C427EB01033B2D0854.crl
rsync://0.sb/repo/sb/22/322056FD080C9CDACB18A9C427EB01033B2D0854.mft
rsync://rpki.ripe.net/repository/DEFAULT/MiBW_QgMnNrLGKnEJ-sBAzstCFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:33:6e:65:3f:99:d8:76:01:26:cd:f4:e3:6e:18:54:c1:79:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322056fd080c9cdacb18a9c427eb01033b2d0854
Validity
Not Before: Sep 22 10:14:41 2023 GMT
Not After : Sep 20 10:19:41 2024 GMT
Subject: CN=CAFE4C18BDC65717D771E651AA1794A4C33E5CC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:fa:2d:32:12:50:75:f6:c9:2d:91:f6:2d:
77:b8:43:a6:1a:0e:d7:d1:4a:c3:08:09:fc:46:2f:
09:61:f8:c6:a2:43:b3:0c:0a:49:48:2e:a2:0e:06:
11:0f:96:dd:75:1b:22:03:77:01:cd:2f:c8:a8:0c:
dd:2b:5d:43:99:12:83:1b:e3:f6:b3:15:59:43:3b:
22:34:8a:ae:b3:9d:75:60:ff:0c:51:2f:20:e4:d8:
b6:53:96:78:0d:4d:e5:78:b9:da:e0:f4:73:17:40:
e1:3c:be:5b:37:b6:35:c3:06:71:63:33:1f:fc:44:
13:e8:b5:f4:10:a6:f3:5d:5b:ad:6f:bd:69:f3:41:
c4:ca:df:d1:63:c6:85:68:64:ee:44:7d:70:7f:08:
48:45:a4:14:b5:25:0a:75:45:6d:ab:46:4a:b3:95:
c0:19:8f:bb:1e:47:9b:31:9f:79:58:b4:12:13:cc:
2c:05:9f:f8:57:5e:76:aa:f3:7b:c6:c6:be:eb:62:
e4:fc:15:32:3f:ef:90:7e:98:4b:08:ab:3e:9d:ac:
62:42:76:98:fe:43:00:91:8c:40:51:f6:fd:7b:70:
87:1d:30:23:a0:09:5e:4c:13:6e:28:91:da:c5:c2:
15:3e:c0:d4:d3:1b:b9:a3:95:24:7b:89:b5:cf:78:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FE:4C:18:BD:C6:57:17:D7:71:E6:51:AA:17:94:A4:C3:3E:5C:C5
X509v3 Authority Key Identifier:
keyid:32:20:56:FD:08:0C:9C:DA:CB:18:A9:C4:27:EB:01:03:3B:2D:08:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/22/322056FD080C9CDACB18A9C427EB01033B2D0854.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiBW_QgMnNrLGKnEJ-sBAzstCFQ.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/22/326131323a346538303a3a2f32392d3438203d3e20323130343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4e80::/29
Signature Algorithm: sha256WithRSAEncryption
74:3a:98:46:f0:c0:78:da:16:02:fc:ce:5b:7b:69:3b:04:0b:
bd:32:7f:d0:fe:a3:e7:5e:64:6e:49:64:d6:bd:f8:41:3b:a7:
f0:7b:1d:d6:06:d4:ea:de:8d:09:b6:3b:97:94:3b:ee:64:5f:
c4:21:68:e3:67:6d:0e:37:7a:af:75:b4:93:07:de:2d:ea:e5:
81:c5:01:b5:04:77:45:b1:e4:33:80:99:46:28:51:09:76:ed:
57:25:96:05:75:37:4a:f3:b6:dd:91:eb:53:48:5f:a7:88:0c:
05:3b:24:52:60:2b:03:14:c7:d5:f7:80:db:62:48:dd:37:33:
6e:23:a0:a5:63:20:e3:a1:9f:d5:e8:a3:70:66:32:d9:89:e9:
f5:fd:0f:e5:c9:9f:14:c7:ae:01:95:d1:3d:68:0d:75:79:02:
a3:6b:cd:a2:f3:b4:60:a6:a6:81:17:02:23:22:b9:9a:fe:72:
29:a3:b1:42:c2:fd:4f:aa:0f:7d:02:42:3f:7d:85:92:06:0e:
a4:e3:11:dc:9f:2e:98:db:7e:33:c9:89:ee:93:f7:0d:0a:b0:
cb:68:52:bc:38:d7:d5:69:b6:cd:3e:e7:cc:be:f2:51:6e:f4:
28:e0:6c:42:58:4f:dc:ea:4c:a8:86:6a:51:50:f4:c3:c2:38:
35:9a:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 13:04:55 2024 by rpki-client on console-ams.rpki-client.org