Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e2038383838.roa
File: 39342e3132342e37392e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: bL6Q4uoabLOpHTHWM+6wUtWUyVukt3m5H31kYQNU4rA=
Subject key identifier: F3:EF:B6:56:47:CC:7F:90:E3:1A:07:C2:3D:35:1D:A1:0A:7D:4A:83
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 520E2B1663EDE142D4FF6572A6FD10FF0EF02B5D
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e2038383838.roa
Signing time: Tue 23 Jan 2024 06:35:35 +0000
ROA not before: Tue 23 Jan 2024 06:30:35 +0000
ROA not after: Tue 21 Jan 2025 06:35:35 +0000
asID: 8888
IP address blocks: 94.124.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0e:2b:16:63:ed:e1:42:d4:ff:65:72:a6:fd:10:ff:0e:f0:2b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Jan 23 06:30:35 2024 GMT
Not After : Jan 21 06:35:35 2025 GMT
Subject: CN=F3EFB65647CC7F90E31A07C23D351DA10A7D4A83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:f0:9d:7e:5e:f0:88:25:29:5e:a4:8d:1b:
1a:ef:f4:13:2d:c9:f9:45:ea:d2:eb:11:ed:18:f9:
17:97:b2:eb:08:b7:a0:5b:c4:72:05:f6:5b:4b:26:
52:f6:88:d8:3f:f2:9f:7a:b1:1e:5b:1c:be:71:e0:
3f:ef:25:d2:ef:4e:cb:20:f5:8f:b5:42:11:c6:8d:
eb:07:3e:72:ab:21:46:32:64:b0:e1:9d:23:4b:1a:
01:f0:9a:c1:38:85:00:7d:88:ff:9f:0f:09:53:53:
ba:a3:fc:5e:ed:c3:d5:3d:a5:8b:d9:c0:9d:f5:95:
b8:6a:0d:bb:0e:aa:3d:61:c5:09:1a:fc:52:56:d5:
01:c0:b7:44:64:94:0a:71:9a:d0:bf:d0:ee:cc:7f:
ae:9e:a8:d4:39:0c:01:49:e6:e0:bd:ac:26:93:2e:
3a:95:ad:c5:35:95:ab:2c:5c:f6:b6:32:2f:68:b0:
5d:25:ad:bb:c0:32:9f:49:43:55:5c:95:9e:52:51:
2f:28:91:e8:ef:3d:a8:4a:00:25:3a:0d:a9:c7:7f:
39:e1:a1:ba:b2:fc:9d:42:d9:ba:09:7f:ba:73:4e:
70:36:89:81:af:c4:fb:74:14:47:76:27:c3:b2:db:
21:cb:ec:d8:6c:18:83:6e:10:70:f3:1d:70:7d:a7:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EF:B6:56:47:CC:7F:90:E3:1A:07:C2:3D:35:1D:A1:0A:7D:4A:83
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:fb:98:81:c6:e2:12:aa:89:fb:ba:92:eb:12:8b:52:b7:b2:
3b:0a:69:03:ec:fa:24:89:68:03:9c:d9:fd:bf:4d:bf:b7:86:
2d:b1:ce:4c:d6:11:98:a8:09:46:cc:50:21:1c:d4:ba:28:78:
a1:94:ec:7f:b0:be:76:8b:3c:57:c4:32:19:a4:6a:94:cb:9c:
52:1f:06:da:e8:59:b4:95:c0:8b:b0:69:8e:63:9b:39:6f:28:
90:0a:5b:cb:4b:e1:ae:9f:dc:ed:fc:5c:46:5f:11:2f:7c:fd:
82:f9:ad:fc:39:9a:8f:ab:03:de:e7:e2:9a:44:7c:f5:59:f5:
c9:58:17:f8:e3:8a:17:c6:23:b0:9c:65:a8:25:a9:a8:61:fa:
64:54:2d:86:20:46:d6:56:04:a2:dd:9f:5f:cd:6f:53:20:c9:
f9:fe:cc:d7:e6:61:aa:47:60:8a:85:ec:2e:49:68:11:1b:51:
d9:f1:4c:f0:90:16:29:02:60:44:a0:85:d4:10:6d:4a:23:fd:
99:76:0f:a6:a6:18:0d:71:17:78:bb:4f:c0:e5:51:57:71:1c:
42:fd:51:89:86:d2:b1:aa:a8:17:25:82:30:99:84:b2:4c:5d:
14:41:2a:95:66:20:c5:0f:0f:f2:31:c9:18:fa:10:c2:d4:68:
4c:b8:0d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:40 2024 by rpki-client on console-ams.rpki-client.org