Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3234203d3e2031303330.roa
File: 3139322e3130392e3232382e302f32332d3234203d3e2031303330.roa (raw, json)
Hash identifier: 8tMxOH001evrsOb45VE2AxTo2LXM8F3akpxA06jJUww=
Subject key identifier: 8C:D3:FE:E8:61:8A:97:5A:91:B8:C7:DD:5A:01:6C:B3:19:6E:90:1B
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 4FAB7960D33728E0897962A90339AE642E6CDA76
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3234203d3e2031303330.roa
Signing time: Thu 12 Sep 2024 13:50:18 +0000
ROA not before: Thu 12 Sep 2024 13:45:18 +0000
ROA not after: Thu 11 Sep 2025 13:50:18 +0000
asID: 1030
IP address blocks: 192.109.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 07:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ab:79:60:d3:37:28:e0:89:79:62:a9:03:39:ae:64:2e:6c:da:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Sep 12 13:45:18 2024 GMT
Not After : Sep 11 13:50:18 2025 GMT
Subject: CN=8CD3FEE8618A975A91B8C7DD5A016CB3196E901B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:53:54:95:39:c7:da:7d:77:49:9a:94:59:
48:41:e5:7b:fc:dd:97:bc:7a:9d:99:d5:06:2b:8e:
71:bc:79:aa:d0:24:0b:5b:7a:0e:c6:04:57:3d:60:
70:7c:83:94:e8:1f:ba:3c:ee:53:be:64:bc:c3:02:
6e:c2:88:cb:cd:2b:f1:73:4d:3d:12:a7:ae:3d:7d:
dd:a7:5e:91:e6:ad:f7:94:5d:f2:0d:f7:47:5b:64:
d3:a5:00:f0:e7:a8:f3:87:95:e6:c9:7b:bf:8c:67:
0f:3b:59:eb:4d:a4:81:6e:73:73:a6:86:da:d3:16:
9b:3a:6b:1f:64:02:1e:c3:54:b4:78:97:47:bc:9c:
7b:c5:68:0a:01:65:02:d0:b2:25:dd:1e:4e:8a:ac:
14:e3:15:0a:d3:24:90:2c:95:ec:40:7b:9d:57:75:
d2:50:a6:ab:25:6c:ea:ce:7f:f6:e7:2e:be:e5:7b:
b5:24:73:3b:f2:c1:ff:1f:17:88:5b:49:ac:4f:a6:
46:90:21:25:cd:37:b2:08:dc:43:f2:b1:75:bd:7d:
ac:95:ab:f1:11:a6:5c:e8:b8:a4:4b:67:33:37:d0:
b7:3d:dc:64:06:ba:85:bf:3f:62:79:5b:07:6e:ca:
02:47:50:e0:c0:dc:47:5f:66:b9:87:66:e9:53:d0:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D3:FE:E8:61:8A:97:5A:91:B8:C7:DD:5A:01:6C:B3:19:6E:90:1B
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3234203d3e2031303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.228.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:ce:39:db:e3:a1:07:7d:d2:a8:1b:07:da:28:7f:ac:e0:08:
e5:cc:d1:be:89:61:0c:7c:a0:fc:d4:8a:a5:1d:98:11:a9:c9:
f2:b0:d0:33:83:00:81:bc:e1:9f:41:1a:72:6d:ce:c7:58:bf:
33:01:92:5a:49:6c:8a:53:b7:bf:33:fb:98:55:a9:f9:7f:f5:
cc:89:db:09:85:3a:82:43:c7:4e:af:9d:67:c1:00:ff:ac:30:
2b:92:03:ed:b6:29:6e:39:5a:ea:c2:fc:d7:bf:25:e9:c7:34:
2d:c3:86:15:58:bd:71:26:0c:23:c0:b7:61:e3:90:e7:27:41:
ef:fe:b9:2a:5f:ed:bc:77:58:76:56:18:9a:cb:9f:8b:53:13:
29:fc:92:25:ef:04:1d:69:33:62:68:17:5d:82:3e:a3:96:91:
45:24:ef:9b:db:10:92:38:b9:f7:60:cf:1d:71:ee:ac:fb:e2:
77:54:7a:3d:e7:d9:4c:b8:11:3f:89:60:da:fd:20:45:0a:34:
2c:db:bb:b0:8e:8b:74:b5:d0:82:76:57:04:56:04:c9:7c:0a:
bb:ec:0e:94:ec:c3:1f:ee:9d:fb:44:dd:ec:b8:1e:5c:34:a1:
9f:bd:1e:2b:dc:ad:bb:32:0a:23:6d:8c:e7:c0:2e:15:fa:f1:
51:d7:4b:99
-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIUT6t5YNM3KOCJeWKpAzmuZC5s2nYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYxYzYxNjM2NGI4OTY1OWVkOWYxOGNiMGFmNzc0MjA0
MzdjYzdkYTAeFw0yNDA5MTIxMzQ1MThaFw0yNTA5MTExMzUwMThaMDMxMTAvBgNV
BAMTKDhDRDNGRUU4NjE4QTk3NUE5MUI4QzdERDVBMDE2Q0IzMTk2RTkwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXdVNUlTnH2n13SZqUWUhB5Xv8
3Ze8ep2Z1QYrjnG8earQJAtbeg7GBFc9YHB8g5ToH7o87lO+ZLzDAm7CiMvNK/Fz
TT0Sp649fd2nXpHmrfeUXfIN90dbZNOlAPDnqPOHlebJe7+MZw87WetNpIFuc3Om
htrTFps6ax9kAh7DVLR4l0e8nHvFaAoBZQLQsiXdHk6KrBTjFQrTJJAslexAe51X
ddJQpqslbOrOf/bnLr7le7Ukczvywf8fF4hbSaxPpkaQISXNN7II3EPysXW9fayV
q/ERplzouKRLZzM30Lc93GQGuoW/P2J5WwduygJHUODA3EdfZrmHZulT0L4vAgMB
AAGjggG8MIIBuDAdBgNVHQ4EFgQUjNP+6GGKl1qRuMfdWgFssxlukBswHwYDVR0j
BBgwFoAUdhxhY2S4llntnxjLCvd0IEN8x9owDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIxLzc2MUM2MTYzNjRC
ODk2NTlFRDlGMThDQjBBRjc3NDIwNDM3Q0M3REEuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kaHhoWTJTNGxsbnRueGpMQ3ZkMElFTjh4OW8uY2VyMG4GCCsGAQUF
BwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjEvMzEz
OTMyMmUzMTMwMzkyZTMyMzIzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzAz
MzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBwG3kMA0GCSqGSIb3DQEBCwUAA4IBAQCkzjnb46EHfdKo
GwfaKH+s4AjlzNG+iWEMfKD81IqlHZgRqcnysNAzgwCBvOGfQRpybc7HWL8zAZJa
SWyKU7e/M/uYVan5f/XMidsJhTqCQ8dOr51nwQD/rDArkgPttiluOVrqwvzXvyXp
xzQtw4YVWL1xJgwjwLdh45DnJ0Hv/rkqX+28d1h2Vhiay5+LUxMp/JIl7wQdaTNi
aBddgj6jlpFFJO+b2xCSOLn3YM8dce6s++J3VHo959lMuBE/iWDa/SBFCjQs27uw
jot0tdCCdlcEVgTJfAq77A6U7MMf7p37RN3suB5cNKGfvR4r3K27MgojbYznwC4V
+vFR10uZ
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:13 2025 by rpki-client