Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/326131313a3a2f34382d313238203d3e203234303133.roa
File: 326131313a3a2f34382d313238203d3e203234303133.roa (raw, json)
Hash identifier: LfqK4E1LtC4J5UnkfVMOp4IlWXRFUUsE6nc1puWgazU=
Subject key identifier: 55:7A:CD:F1:04:FD:14:0E:9D:A8:B3:E2:67:1E:CE:0C:F5:AB:F2:E0
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 6D35EA284B83087A7D05616BC5FB6628D2B80BB1
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/326131313a3a2f34382d313238203d3e203234303133.roa
Signing time: Wed 17 Jul 2024 08:26:58 +0000
ROA not before: Wed 17 Jul 2024 08:21:58 +0000
ROA not after: Wed 16 Jul 2025 08:26:58 +0000
asID: 24013
IP address blocks: 2a11::/48 maxlen: 128
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:35:ea:28:4b:83:08:7a:7d:05:61:6b:c5:fb:66:28:d2:b8:0b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Jul 17 08:21:58 2024 GMT
Not After : Jul 16 08:26:58 2025 GMT
Subject: CN=557ACDF104FD140E9DA8B3E2671ECE0CF5ABF2E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:bf:bd:bc:1c:fe:b8:34:c4:43:7a:f7:80:
52:fa:12:33:de:bb:82:ed:8f:a3:e1:fe:5a:16:7f:
21:1f:7f:a9:46:e2:d9:c7:77:28:88:fa:23:3b:d2:
96:e5:9e:87:94:8e:f2:f1:33:c7:78:8e:a3:e2:98:
22:e6:c5:fc:2c:d9:aa:d7:7a:26:eb:80:81:44:9c:
c3:e6:02:8b:12:40:5e:8d:ff:ec:f0:d1:51:57:7a:
ba:1a:1c:4a:93:05:4a:4c:76:6b:55:29:35:a0:44:
dc:14:45:ba:af:ea:a0:24:8b:1d:9b:fe:73:fc:f0:
77:32:27:8c:5c:c4:f7:4e:b2:12:ff:c8:04:a5:fb:
2e:6a:19:a9:9e:0e:37:33:9e:0c:66:29:2e:4a:6a:
73:3f:e9:63:53:44:9a:56:31:b3:35:e3:e0:d9:62:
84:59:6b:44:d8:87:6f:ac:9c:6e:0e:82:88:f9:67:
b3:39:d4:a5:fd:9b:7a:23:ee:d8:f9:f2:e8:e0:d4:
c3:b7:58:57:bd:5b:f0:d2:5b:c6:cb:54:b6:03:ad:
8b:41:f3:c3:fb:4c:6a:45:8e:b3:6c:76:b4:9e:f8:
07:2a:5f:fb:4e:cb:7c:70:77:c4:0b:3f:08:e1:bf:
f9:c6:15:e2:0d:4a:68:98:ac:26:42:29:1d:88:6b:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7A:CD:F1:04:FD:14:0E:9D:A8:B3:E2:67:1E:CE:0C:F5:AB:F2:E0
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a3a2f34382d313238203d3e203234303133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11::/48
Signature Algorithm: sha256WithRSAEncryption
12:86:85:70:f7:97:7a:59:bd:71:24:36:64:6b:a1:9a:ea:b8:
7c:d7:fb:db:fb:bf:3f:41:4b:e8:15:eb:d5:aa:5e:c3:8e:47:
2c:3f:e8:25:ea:89:39:f7:be:61:13:c4:6f:be:43:7c:1a:a2:
96:d1:d2:af:7c:ba:b1:24:c0:a1:4a:53:d6:9e:97:41:46:7b:
64:82:e4:dd:55:c4:c4:dd:10:ff:f9:a5:d2:08:ac:d2:92:a7:
c3:82:73:64:20:0b:82:2e:36:db:e8:16:36:c9:b3:b8:e9:f3:
e6:a7:7e:c7:f3:fe:a5:9f:c6:00:35:61:28:73:37:d3:f7:3e:
82:0d:dc:7a:b4:82:07:a0:55:ff:22:49:04:3b:2a:92:61:f0:
cf:94:fd:fe:f1:27:cb:dc:11:a5:86:1a:9b:3a:e5:8e:5b:5a:
d4:4e:da:e0:bb:b9:b4:1d:5d:3a:0d:55:18:4e:00:2c:de:5c:
fd:f7:c8:8f:fa:64:bf:7a:65:dc:bf:b1:2e:3d:13:ce:77:8d:
a6:76:d5:8c:62:f7:e7:81:57:90:43:aa:ed:20:57:35:1b:16:
41:23:9a:e6:56:82:e4:04:16:47:e5:6b:82:0e:c8:89:68:06:
58:0c:d4:83:0a:f8:b4:64:dd:15:0b:bc:f0:ed:5f:d4:57:36:
f4:a7:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:19 2024 by rpki-client on console-fra.rpki-client.org