Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3132382e3232312e302f32342d3234203d3e203535393333.roa
File: 34352e3132382e3232312e302f32342d3234203d3e203535393333.roa (raw, json)
Hash identifier: cqZ8lBGzQ4i0hDt7//AquOKNj3mTgwV9sMDny4yUrV8=
Subject key identifier: 82:3D:2A:A1:A1:B6:63:C1:D6:20:BA:A6:70:DE:BC:B6:A0:F9:29:25
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 12573BC56A5FA4A9402B0F137FEE9B38A9978C4F
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3132382e3232312e302f32342d3234203d3e203535393333.roa
Signing time: Thu 06 Mar 2025 05:52:09 +0000
ROA not before: Thu 06 Mar 2025 05:47:09 +0000
ROA not after: Thu 05 Mar 2026 05:52:09 +0000
asID: 55933
IP address blocks: 45.128.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:57:3b:c5:6a:5f:a4:a9:40:2b:0f:13:7f:ee:9b:38:a9:97:8c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Mar 6 05:47:09 2025 GMT
Not After : Mar 5 05:52:09 2026 GMT
Subject: CN=823D2AA1A1B663C1D620BAA670DEBCB6A0F92925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:42:f6:90:d4:35:f3:4f:db:93:24:c9:53:
28:15:96:d1:0b:95:43:6d:51:fb:9e:bb:38:2b:19:
1e:7f:b0:d4:26:2d:cb:58:60:4d:e9:f2:d8:98:17:
05:aa:f8:03:7a:22:96:c9:38:9b:ef:76:86:70:cc:
b9:a1:7d:fd:95:6a:7a:7b:68:92:b9:d3:60:82:0e:
e2:93:0f:59:32:48:e7:38:a8:4a:3f:46:58:6d:9a:
20:cf:80:66:57:47:18:4f:04:c9:8b:74:63:3b:a9:
3d:54:f0:d4:8c:3f:af:c8:db:3b:66:9a:32:ab:93:
b6:b1:16:72:04:73:ff:1f:54:35:d2:61:29:40:4c:
c9:b5:a7:b8:bc:03:84:f6:b2:91:78:df:93:50:94:
69:27:08:01:72:b9:b7:56:9c:91:f0:3f:6e:7d:b7:
aa:ee:c2:54:23:be:ec:ec:94:45:8e:03:e7:ac:f5:
a0:c9:cf:3d:c2:01:e8:45:5e:66:be:4a:0e:74:b9:
2f:fd:b8:63:f6:82:fd:0b:d4:fa:3b:9a:74:3f:0c:
be:b2:c9:d3:30:7d:0d:29:bd:51:58:d1:ea:0c:cf:
3c:fd:7c:60:d4:d7:b6:2f:9d:13:58:8f:d9:e1:d1:
9f:8e:62:dd:39:c0:fd:f7:29:95:8f:9c:69:36:aa:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3D:2A:A1:A1:B6:63:C1:D6:20:BA:A6:70:DE:BC:B6:A0:F9:29:25
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3132382e3232312e302f32342d3234203d3e203535393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5d:a2:88:97:5a:02:9e:ce:a6:b3:77:29:07:eb:bd:65:a7:
24:42:46:e5:99:70:ef:9c:e1:ec:38:c8:6e:49:8b:ef:42:ee:
9d:f7:86:e7:09:aa:c9:5b:57:77:50:c2:3a:04:b1:8c:fa:6c:
ff:e2:30:f4:fa:ae:ca:9c:74:b6:0e:a9:15:d0:15:08:b4:a0:
2b:fc:1b:16:94:5d:18:46:d7:57:8c:dc:26:f0:ff:46:d6:82:
9a:cd:4b:69:59:ee:4c:cf:c5:d1:45:17:9f:12:48:ee:24:b2:
30:65:97:e2:0b:8f:17:82:f8:a2:45:ae:11:29:7c:8e:d8:cc:
e6:e4:92:cb:80:13:32:26:04:77:ec:5c:a8:6d:fb:ae:54:21:
e2:fb:74:d7:7f:30:04:04:b6:6c:03:3e:66:89:f3:54:92:94:
76:62:d6:20:25:0a:fd:9a:27:1c:28:31:06:b9:cd:64:98:06:
5c:78:ea:7b:16:12:5a:22:81:5a:94:67:c1:d4:08:f7:ed:a9:
39:6e:79:29:01:5e:e3:f6:42:83:ee:8f:69:58:c5:09:d1:a9:
a3:cd:55:09:58:b7:53:4b:c9:c3:53:c7:51:e1:4a:17:66:57:
e0:61:3d:a7:dd:ad:bd:d6:e4:75:c7:3e:d0:ed:c7:7f:17:c8:
29:c7:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:17 2025 by rpki-client