Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/326131313a383038303a3a2f32392d313238203d3e2038383838.roa
File: 326131313a383038303a3a2f32392d313238203d3e2038383838.roa (raw, json)
Hash identifier: Xej8z+5gZdxNbAKSwLJrJQEooL2xxbZTFJWAffAIEa4=
Subject key identifier: EB:AE:61:0B:C3:C8:5C:9D:71:74:2D:5C:C1:6B:C2:3D:4B:BC:A0:A2
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 7D47535106D6C0FCD596C3B7371D207DDA33AFF8
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/326131313a383038303a3a2f32392d313238203d3e2038383838.roa
Signing time: Tue 30 Jan 2024 14:33:08 +0000
ROA not before: Tue 30 Jan 2024 14:28:08 +0000
ROA not after: Tue 28 Jan 2025 14:33:08 +0000
asID: 8888
IP address blocks: 2a11:8080::/29 maxlen: 128
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:47:53:51:06:d6:c0:fc:d5:96:c3:b7:37:1d:20:7d:da:33:af:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Jan 30 14:28:08 2024 GMT
Not After : Jan 28 14:33:08 2025 GMT
Subject: CN=EBAE610BC3C85C9D71742D5CC16BC23D4BBCA0A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:e6:f1:e9:8a:37:e5:f6:a5:8e:a8:07:ea:
ab:dd:50:57:ef:95:65:24:50:79:21:bd:30:e7:90:
38:83:8b:c8:e9:47:6c:09:89:86:b9:3e:05:9d:91:
36:8b:68:69:65:62:29:7b:dc:22:5a:66:94:95:de:
4a:61:43:d4:83:58:ce:6c:c9:58:73:87:78:12:a9:
ee:3e:d8:0d:4d:6c:22:c2:67:41:44:7c:77:f6:6d:
c1:93:ec:b3:65:91:e3:bc:7b:2f:58:ef:95:24:77:
12:67:da:44:21:3d:bf:3f:db:a4:26:c1:3d:76:b9:
52:1e:72:eb:fc:f7:c9:af:86:7f:ff:1e:bc:02:41:
39:14:9b:7d:f3:9b:38:0f:7c:f1:36:72:f6:3a:f5:
d3:03:e8:c4:c2:d7:5f:fa:32:e1:3b:4d:ca:82:e8:
3b:53:c6:15:c5:30:ae:8c:f8:38:c3:a2:e0:fd:f3:
55:38:82:02:13:dc:21:33:08:0d:91:68:0a:b9:b8:
64:73:cc:f6:98:79:c4:a9:00:2a:17:a7:66:21:a4:
6a:73:6b:d0:cb:09:4c:10:92:dc:4d:52:d6:42:08:
4a:ba:7e:2d:08:ab:f5:f0:a8:69:d3:97:0e:4f:74:
86:02:2c:c0:8c:07:36:5a:1a:46:8c:91:d4:a2:0d:
39:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AE:61:0B:C3:C8:5C:9D:71:74:2D:5C:C1:6B:C2:3D:4B:BC:A0:A2
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a383038303a3a2f32392d313238203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8080::/29
Signature Algorithm: sha256WithRSAEncryption
8d:23:3f:3c:d5:1f:08:2f:bb:f8:01:99:1e:9e:3c:2e:6e:04:
2a:ad:bd:5a:c3:4e:4b:c7:ce:86:51:48:5d:42:f3:93:1a:f4:
a7:e9:71:d6:a0:0e:0d:68:c1:ea:d8:55:84:cc:c1:22:5e:61:
51:09:65:c0:d5:7a:d7:40:45:76:27:65:95:eb:08:b5:b8:3c:
a8:37:10:2d:e5:84:de:ff:e9:68:21:e4:50:ff:ba:ce:f4:c1:
0b:da:5f:3c:4f:3f:f6:bb:f4:5e:63:dd:49:15:65:d7:a5:99:
eb:7a:f2:84:e9:2c:15:28:86:2b:80:49:6a:e4:9c:3a:ae:fe:
29:16:2b:db:28:e6:48:51:2b:e4:30:16:d8:c6:3c:ea:7f:74:
7b:b2:37:a4:f8:9b:88:3b:3a:0a:fe:e7:91:db:df:01:52:ea:
37:6b:5b:90:b9:93:17:7f:d9:46:e7:90:88:cc:c2:cb:c2:90:
5f:90:06:6e:ce:c6:b6:63:d1:e9:ed:77:dc:82:bf:de:6a:23:
4e:db:ec:1d:24:35:e8:56:d4:11:c2:fc:de:0f:91:63:ac:6a:
e6:e5:5e:2c:c2:9d:e2:b1:5e:4a:03:90:b5:8b:8c:66:82:61:
a7:74:b6:51:69:57:c9:84:38:60:c7:40:68:e6:20:7c:af:e2:
78:a9:04:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 03:13:22 2024 by rpki-client on console-ams.rpki-client.org