Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/326131323a393038303a3a2f32392d3438203d3e20323130343239.roa
File: 326131323a393038303a3a2f32392d3438203d3e20323130343239.roa (raw, json)
Hash identifier: Tx/zxDbOIkuV43flrId1jUgv0LfApslwFhd2brpciVU=
Subject key identifier: 0E:88:C2:6B:73:F6:2E:F9:52:63:FD:25:3F:09:4D:6C:7C:DA:69:B1
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 54A260DE9C8CE6B06C2F870B18177EEC318D2B21
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/326131323a393038303a3a2f32392d3438203d3e20323130343239.roa
Signing time: Fri 25 Jul 2025 10:52:37 +0000
ROA not before: Fri 25 Jul 2025 10:47:37 +0000
ROA not after: Fri 24 Jul 2026 10:52:37 +0000
asID: 210429
IP address blocks: 2a12:9080::/29 maxlen: 48
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 14:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a2:60:de:9c:8c:e6:b0:6c:2f:87:0b:18:17:7e:ec:31:8d:2b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Jul 25 10:47:37 2025 GMT
Not After : Jul 24 10:52:37 2026 GMT
Subject: CN=0E88C26B73F62EF95263FD253F094D6C7CDA69B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:74:d2:b4:c4:89:c2:a3:26:5e:c6:93:60:6c:
42:a8:d3:fd:03:9a:5e:b7:fd:99:55:25:6e:a2:8a:
4d:b8:5f:c6:8c:f1:fa:be:31:b1:fd:6d:bd:ac:cc:
a6:d8:0d:25:62:05:de:80:13:98:10:6f:32:65:5c:
63:72:27:63:81:a5:24:f6:cd:ce:9d:04:33:77:54:
26:92:30:06:d5:04:1e:19:7d:23:a2:a8:1a:45:24:
09:84:5c:88:c3:6a:58:ee:75:f8:65:16:7f:e6:1e:
ec:dd:56:44:31:e4:b0:ee:8b:d1:64:49:7d:a1:91:
44:59:8d:8f:e6:3c:9c:dc:a8:dc:9d:ef:68:7f:75:
74:aa:f7:69:a4:7f:9a:ab:b4:f1:02:e8:fc:c4:a0:
52:5a:92:d2:16:d7:af:1b:41:63:77:b0:1e:45:d9:
c6:84:f1:a2:b9:dd:a3:cc:c4:d3:72:89:ba:44:c8:
01:fc:77:8f:d2:2e:ea:b7:4a:1a:95:8f:62:90:6a:
3d:52:c7:0f:c7:f6:12:56:e8:8b:2a:52:91:50:31:
e9:3a:78:1a:1f:c0:e5:bf:2f:f5:4d:97:5f:36:da:
05:4c:60:d2:48:e4:cf:6f:81:87:fe:4c:a9:b6:4f:
16:db:13:ca:fc:92:4b:4a:fd:96:49:17:cc:d7:28:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:88:C2:6B:73:F6:2E:F9:52:63:FD:25:3F:09:4D:6C:7C:DA:69:B1
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/326131323a393038303a3a2f32392d3438203d3e20323130343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9080::/29
Signature Algorithm: sha256WithRSAEncryption
c9:51:6b:7c:5e:31:bd:61:2f:82:70:bc:0b:19:51:ba:2a:7e:
7e:3a:2b:d6:77:ea:e1:fa:71:2c:32:0b:53:e2:f0:d9:3e:0a:
25:b4:87:fb:93:90:f7:3a:6c:80:b4:f2:81:1f:8e:2b:08:1f:
16:49:70:5f:35:a2:f6:8e:71:68:c8:70:06:68:c9:84:45:72:
63:31:9e:30:05:c3:7b:88:10:72:c6:ef:0d:9f:43:d7:43:ea:
b8:1c:cd:bb:6b:8b:8f:62:19:96:c3:bd:de:08:96:09:66:ca:
cd:49:c5:6e:f8:55:2e:0c:8e:20:c0:86:aa:39:0a:65:b0:ef:
b8:a1:08:da:3f:72:97:6c:3b:ea:cc:d2:cc:98:a2:ad:51:f5:
9f:5e:39:b1:cd:2c:ba:4c:0a:d8:0b:9a:6a:3a:e9:20:9f:da:
ac:c8:56:23:ab:69:87:fe:f3:83:5d:c2:6b:c4:cd:27:ce:a6:
44:91:e1:3a:db:ff:4b:fb:01:a5:94:bc:9b:05:e3:e3:f7:0e:
cd:06:04:2b:46:b2:65:18:66:13:f7:ad:88:fe:ed:10:f1:1c:
93:3f:e9:03:2f:7b:07:ea:ae:8a:44:d0:44:2e:3c:8a:5f:31:
64:4f:13:fc:59:b7:7d:ae:1b:72:85:d1:a0:4c:03:5a:c2:a6:
56:b4:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:50:30 2025 by rpki-client