Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/3139322e3130392e3232382e302f32342d3234203d3e2031303330.roa
File: 3139322e3130392e3232382e302f32342d3234203d3e2031303330.roa (raw, json)
Hash identifier: eoT/NXsFFHhGmrNnzqLIk8ko0heZfjukMzJyeajFQtY=
Subject key identifier: CE:72:E5:B9:F0:49:81:60:F0:B2:ED:DD:8F:BC:95:FD:5D:08:8B:EA
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 10B098C45BB50C384648855022DF0098E333B3B4
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32342d3234203d3e2031303330.roa
Signing time: Fri 25 Jul 2025 10:52:38 +0000
ROA not before: Fri 25 Jul 2025 10:47:38 +0000
ROA not after: Fri 24 Jul 2026 10:52:38 +0000
asID: 1030
IP address blocks: 192.109.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 14:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b0:98:c4:5b:b5:0c:38:46:48:85:50:22:df:00:98:e3:33:b3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Jul 25 10:47:38 2025 GMT
Not After : Jul 24 10:52:38 2026 GMT
Subject: CN=CE72E5B9F0498160F0B2EDDD8FBC95FD5D088BEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:a7:34:8e:51:84:40:5a:8a:18:c6:51:f6:
fe:00:3d:48:c2:d9:4d:f2:f3:45:ea:f4:d3:12:cf:
46:73:0b:33:b0:0b:4d:3d:26:65:96:5e:9b:60:f5:
91:3d:fa:58:38:43:3e:8c:f7:f8:ca:a4:f7:1e:7c:
c0:71:06:0c:18:dc:fe:6e:36:da:78:45:2e:9b:74:
e0:c4:81:26:fe:d3:42:53:a4:c6:40:62:36:6b:01:
7a:e9:0a:01:58:39:fa:24:24:f5:2e:cb:50:f3:7c:
d6:f9:29:c9:55:78:fc:a2:0f:7a:4b:f5:d5:f9:53:
bd:00:fb:0a:b0:5f:a7:14:36:2b:5b:e0:7c:26:11:
ea:b4:9b:de:82:d8:0d:54:b1:99:b8:02:d6:64:e8:
96:f6:32:c5:c2:40:40:22:36:fa:ea:e0:e3:0d:7d:
8c:61:d3:d8:07:2b:db:cd:53:1f:c8:e2:d3:56:be:
2f:d8:3c:94:eb:6d:0b:48:37:74:d1:71:b7:86:b1:
a3:46:7d:6f:d0:bc:02:af:d5:9d:cd:d0:e7:d4:fc:
b6:89:1a:d7:9c:38:6c:f6:d1:78:3c:87:0d:0f:ce:
7b:f5:f8:f4:cd:3e:69:c1:c1:26:e3:fb:14:6c:4c:
b8:85:43:6e:f1:b1:2d:db:c4:09:ed:c7:d0:87:b3:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:72:E5:B9:F0:49:81:60:F0:B2:ED:DD:8F:BC:95:FD:5D:08:8B:EA
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32342d3234203d3e2031303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.228.0/24
Signature Algorithm: sha256WithRSAEncryption
08:80:35:3b:53:ee:90:f3:30:64:b5:14:ba:e8:96:cc:1e:c8:
d0:ca:c2:85:99:1c:42:64:5f:98:0c:42:29:a7:ec:aa:9f:6f:
0e:7f:44:ab:e1:5a:45:f6:4f:f5:9c:7c:93:57:52:b0:f1:bd:
2d:4e:57:7b:a9:7a:e9:18:e9:a3:e5:86:63:59:0f:2d:d9:ca:
bb:d3:5c:53:88:c4:15:29:52:6f:bd:f5:9e:0e:44:11:cf:a3:
0f:3c:b5:f4:00:05:07:e1:01:04:f1:6f:76:a4:d4:2e:73:a6:
d1:61:56:5b:26:b7:e4:4f:6f:c0:09:f7:6d:d6:69:e7:81:0b:
f9:81:f7:3d:ac:9a:09:7c:7f:15:fd:cb:9c:b2:54:f5:15:66:
23:60:9f:4e:c1:e0:9c:61:9a:9c:3c:6d:73:99:f3:14:23:05:
fd:96:34:66:a0:d8:86:85:61:52:34:f5:1e:34:e5:22:35:fb:
c8:2d:25:f9:83:a6:cf:50:76:1f:bf:57:d9:e9:b1:ed:c1:b5:
59:77:15:79:e6:a6:ff:34:c9:45:39:cc:cb:bb:d3:c0:ea:ab:
bc:11:e0:ba:bd:39:00:51:9e:40:40:9f:5a:93:de:27:16:f2:
25:cd:1a:ba:27:15:0d:d4:59:64:c4:bf:29:68:02:55:d7:a4:
aa:80:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:50:31 2025 by rpki-client