Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/34/3138352e34362e36382e302f32342d3234203d3e20323130343239.roa
File: 3138352e34362e36382e302f32342d3234203d3e20323130343239.roa (raw, json)
Hash identifier: tE0Srdk2dHgDqBEOxXIA49xhQP/aqEF8BC7nrpDY4CQ=
Subject key identifier: 5D:C5:4F:F7:14:D1:25:1B:70:E4:37:88:D1:36:2D:1D:B2:3E:82:1F
Certificate issuer: /CN=8228f35f3a87298db3d06995a9c6c045721122b2
Certificate serial: 62127EDEF249B81F0737B133E6ED83EC1024A61E
Authority key identifier: 82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
Subject info access: rsync://0.sb/repo/sb/34/3138352e34362e36382e302f32342d3234203d3e20323130343239.roa
Signing time: Mon 31 Mar 2025 10:52:16 +0000
ROA not before: Mon 31 Mar 2025 10:47:16 +0000
ROA not after: Mon 30 Mar 2026 10:52:16 +0000
asID: 210429
IP address blocks: 185.46.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.crl
rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:12:7e:de:f2:49:b8:1f:07:37:b1:33:e6:ed:83:ec:10:24:a6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8228f35f3a87298db3d06995a9c6c045721122b2
Validity
Not Before: Mar 31 10:47:16 2025 GMT
Not After : Mar 30 10:52:16 2026 GMT
Subject: CN=5DC54FF714D1251B70E43788D1362D1DB23E821F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:9c:ac:b8:5e:1d:ab:25:3f:d9:4c:3f:aa:
93:98:2f:1c:ea:da:16:b2:2f:01:54:46:27:f9:ba:
b9:a2:69:3a:dc:17:84:8f:da:6e:f0:97:d5:93:fe:
ad:d4:94:72:cb:50:13:a0:00:38:d3:e9:66:99:2f:
da:e3:5c:5b:69:64:37:56:78:8f:a3:fd:7d:4b:93:
e3:2e:fc:1f:7d:b6:16:fb:f5:33:4e:33:75:95:91:
8c:59:5e:da:09:0c:4e:fa:11:db:31:8f:60:c9:05:
07:26:f1:74:8a:68:fd:73:d2:63:84:da:68:1f:f0:
be:9a:d6:60:b5:07:8f:7e:01:1a:6e:0d:1f:05:45:
b0:48:7f:ee:bd:ac:79:b2:de:37:87:2b:9a:21:3e:
be:11:d4:7b:19:6d:27:ee:46:78:95:22:ca:96:ae:
8f:7c:13:48:7d:c6:ca:2a:65:74:4a:38:c7:74:24:
51:8a:5e:28:43:21:47:ac:c5:0b:06:b0:c6:68:d2:
37:95:b1:fa:32:dd:c5:8a:56:a3:76:19:91:1a:d3:
11:f2:78:76:83:4c:fb:09:6c:21:7c:f9:9b:d9:73:
15:6c:c8:ac:9b:9e:aa:75:14:92:26:40:be:06:cb:
a4:92:0a:ea:37:93:4f:ef:27:fa:e1:86:36:27:9f:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C5:4F:F7:14:D1:25:1B:70:E4:37:88:D1:36:2D:1D:B2:3E:82:1F
X509v3 Authority Key Identifier:
keyid:82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/34/3138352e34362e36382e302f32342d3234203d3e20323130343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.68.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c1:15:73:41:06:fb:26:ae:90:e0:8d:f2:d5:6f:8e:63:8a:
84:92:ff:b9:f6:d3:a5:b7:16:eb:01:59:c1:26:4e:26:15:8e:
26:f0:85:b5:76:b9:f7:b6:14:8a:55:cc:79:92:6a:85:1d:02:
11:17:1a:6d:7e:85:6f:15:fb:cf:71:29:67:6e:2e:35:9b:69:
78:c9:a5:99:78:e6:55:4c:57:f5:2f:01:11:e6:06:7d:5c:e7:
28:7e:09:b7:d2:af:91:42:c6:86:fb:ae:e6:16:17:ab:5e:e5:
c6:0e:4a:08:5d:a9:a5:55:bf:af:d7:59:22:a9:93:14:66:42:
1c:67:f3:2f:f0:8e:03:02:14:2c:01:a6:e3:4b:27:80:6b:76:
e5:30:37:44:a3:59:62:53:cb:af:dc:da:86:9c:2f:f0:2d:2e:
db:2b:dd:b3:14:d7:e4:60:1a:11:4e:36:55:88:d8:52:5d:28:
76:de:a1:24:8a:9a:2b:13:39:60:2b:e7:76:26:54:10:67:2b:
d5:fe:29:c6:18:ef:ba:b0:69:a0:a9:77:d5:3f:dd:eb:f1:24:
78:92:06:7f:af:90:2f:09:95:69:2e:e9:e8:cb:31:ed:2b:48:
8e:bb:8d:98:43:0f:ef:2b:51:5b:f3:d6:70:73:a8:32:18:f7:
01:b3:2b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:38 2025 by rpki-client