Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/326131323a393038303a3a2f32392d3438203d3e20323130343239.roa
File: 326131323a393038303a3a2f32392d3438203d3e20323130343239.roa (raw, json)
Hash identifier: 5OrDn2Wtva6UJvBl5qTnVXoC2G6BvsR+rM7mxwEXo3g=
Subject key identifier: 9D:42:74:A2:DA:4C:35:71:BA:F3:34:25:65:00:E2:8B:9B:B3:E9:1C
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 62E6091B0DCA3CC35BB63A8C3F36DFE855238A64
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/326131323a393038303a3a2f32392d3438203d3e20323130343239.roa
Signing time: Fri 23 Aug 2024 10:47:06 +0000
ROA not before: Fri 23 Aug 2024 10:42:06 +0000
ROA not after: Fri 22 Aug 2025 10:47:06 +0000
asID: 210429
IP address blocks: 2a12:9080::/29 maxlen: 48
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e6:09:1b:0d:ca:3c:c3:5b:b6:3a:8c:3f:36:df:e8:55:23:8a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Aug 23 10:42:06 2024 GMT
Not After : Aug 22 10:47:06 2025 GMT
Subject: CN=9D4274A2DA4C3571BAF334256500E28B9BB3E91C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:20:96:88:a7:22:e2:72:9d:bc:1c:b7:02:ce:
80:65:9b:61:5d:c6:fa:f4:a7:79:7b:6a:ef:7c:08:
7e:6c:09:c2:af:d3:bf:c0:fc:29:f7:00:48:21:7e:
bc:36:fd:02:c4:fc:d5:b3:35:f7:fc:f0:4c:ff:c5:
30:59:a8:cd:fe:e2:8a:b1:b5:ef:69:77:f9:29:b7:
e1:33:0e:9d:1b:ff:1d:e1:5d:f4:4a:05:a1:31:08:
b3:6f:18:6a:3e:a8:6e:f4:68:4f:43:09:07:29:74:
af:66:62:a9:e6:aa:69:aa:a0:d1:51:f6:07:67:e4:
9d:65:63:9a:2e:ec:d5:88:b4:f0:11:1e:15:cd:55:
7f:bd:06:d6:0f:6a:b7:9f:25:1d:41:07:0c:e2:d9:
a6:7b:4c:dd:29:f4:5e:53:58:78:ea:72:be:23:30:
20:c2:2e:28:40:7c:6d:22:b8:91:c5:5b:8e:f8:77:
d0:17:67:88:96:95:50:19:44:1e:b5:d9:8d:43:c2:
dd:65:2e:aa:44:4c:35:7a:e7:59:5f:74:1c:03:36:
da:b5:15:9a:c8:5a:d7:30:d5:76:3c:20:96:cc:7b:
01:6f:20:f1:06:d4:1e:7c:a1:2d:60:29:d4:7c:60:
bc:f3:b9:5c:4c:b9:28:ef:ef:cf:f0:5f:f5:1a:a0:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:42:74:A2:DA:4C:35:71:BA:F3:34:25:65:00:E2:8B:9B:B3:E9:1C
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/326131323a393038303a3a2f32392d3438203d3e20323130343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9080::/29
Signature Algorithm: sha256WithRSAEncryption
20:01:30:df:01:91:65:09:80:84:fa:7a:a4:18:d8:41:00:60:
cc:94:19:12:87:46:7d:f9:2a:6b:8f:0a:a0:41:de:1a:b5:d5:
3b:f1:81:71:3d:03:ce:be:91:6c:3f:db:bc:91:75:ec:fd:5e:
68:3c:3e:0f:d6:a6:d0:7b:90:e5:a8:89:00:ca:77:c4:ce:47:
95:5f:86:01:47:26:40:b2:24:e2:1f:cc:b9:3c:3c:8b:ee:aa:
b3:a3:f6:d9:fe:8d:2c:d9:c5:65:8a:32:ab:49:e4:2e:cb:35:
b0:49:56:39:ec:12:49:a2:3a:11:b3:dc:69:02:03:c7:ee:63:
56:97:ba:b0:ac:ec:4b:e0:07:aa:68:24:92:33:20:89:7c:b3:
1b:46:2d:78:35:c5:de:01:d4:57:2a:44:32:9a:21:89:ca:15:
03:18:b5:1f:b2:f1:d4:fe:46:d5:56:59:d4:22:44:2e:85:62:
9a:c2:f3:ce:ab:1d:bf:55:49:ff:ed:32:86:96:68:f3:00:72:
98:46:2a:a0:4c:25:5f:08:30:55:9c:b3:56:28:34:ac:1d:51:
0f:4a:e4:81:15:6c:1e:45:c8:c9:fb:b4:fa:b9:af:4d:0b:1b:
22:0d:0d:c2:ef:c4:fe:be:32:69:76:b3:a3:cc:3c:2e:d4:d4:
5f:e7:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:48:23 2025 by rpki-client