Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3132382e3232312e302f32342d3234203d3e203535393333.roa
File: 34352e3132382e3232312e302f32342d3234203d3e203535393333.roa (raw, json)
Hash identifier: btQjQHK0JUH8DjbqFjN+JnviFdVfu95zoVey0kffBdA=
Subject key identifier: 23:62:3B:BC:A1:3C:9F:F9:D1:EF:08:98:4D:3B:50:CE:F3:25:5F:8A
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 5518B1248E17060F2A652F53286E143FD4A9BB56
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3132382e3232312e302f32342d3234203d3e203535393333.roa
Signing time: Thu 04 Apr 2024 05:36:02 +0000
ROA not before: Thu 04 Apr 2024 05:31:02 +0000
ROA not after: Thu 03 Apr 2025 05:36:02 +0000
asID: 55933
IP address blocks: 45.128.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:18:b1:24:8e:17:06:0f:2a:65:2f:53:28:6e:14:3f:d4:a9:bb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Apr 4 05:31:02 2024 GMT
Not After : Apr 3 05:36:02 2025 GMT
Subject: CN=23623BBCA13C9FF9D1EF08984D3B50CEF3255F8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:33:62:9c:c0:41:6b:3f:e1:d6:aa:e4:2f:
b1:19:d2:cf:1e:b3:d5:49:98:c0:a4:be:b2:b3:af:
41:1f:a0:ce:70:2b:58:e3:8f:40:47:00:3c:77:8a:
24:e9:c5:6c:8f:87:78:8d:09:5c:d9:18:6d:20:39:
2e:3f:02:c4:de:cb:b0:4b:d7:e2:31:7a:7b:86:2b:
34:6d:09:2b:cb:b2:7b:8d:66:5a:9a:d4:ee:0e:37:
02:3f:b2:1b:17:6e:0a:37:bc:72:a6:a1:7d:e2:9d:
b7:5c:54:21:72:18:f3:13:9b:51:68:bf:33:c1:02:
5f:c3:f0:4b:a3:8f:b0:fa:fe:20:a0:a2:0d:28:bb:
bf:e1:fe:23:8d:ce:3a:76:ec:b1:71:48:3e:b7:9d:
55:b6:87:59:00:45:af:90:a3:a7:ae:bd:6e:e0:8f:
14:4a:69:3a:0e:b9:50:fb:e4:f9:47:af:65:3a:1e:
41:ec:56:fb:fe:7d:7f:91:fa:24:c4:07:f8:ea:3c:
1d:59:32:cd:51:f5:28:95:bc:19:89:6a:70:0f:b6:
4c:4b:3a:3d:51:5c:2b:53:4b:c0:db:d3:c2:0b:d5:
69:89:a4:02:86:9e:b3:34:e4:ec:5a:d8:7a:2d:89:
2c:c4:43:b8:1c:cd:da:e2:a8:20:ac:a8:fa:64:5f:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:62:3B:BC:A1:3C:9F:F9:D1:EF:08:98:4D:3B:50:CE:F3:25:5F:8A
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3132382e3232312e302f32342d3234203d3e203535393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.221.0/24
Signature Algorithm: sha256WithRSAEncryption
32:63:5d:68:ab:19:4e:b1:6d:9c:e6:b7:44:a6:2f:72:9c:6d:
c5:23:ef:6c:2e:c6:b7:8b:0f:7b:1a:e9:bf:86:81:ac:ad:ae:
25:e0:98:c2:c0:ff:a8:55:8b:49:99:55:0b:5d:56:09:58:b2:
0f:dd:54:f7:48:b7:e9:60:ee:5d:3e:4e:ad:e7:6b:83:01:d5:
37:97:76:8a:99:51:f5:44:47:2d:71:fa:67:e6:68:2c:ac:cf:
61:7d:ab:87:cb:03:80:80:42:bf:4c:e4:d0:49:52:cf:7a:9c:
3e:83:db:87:9b:e4:ed:70:17:61:70:d1:87:ac:b0:e5:88:94:
26:ba:94:03:8d:69:db:8b:ee:e4:53:87:7c:69:3b:94:9c:b3:
e0:63:db:81:5e:c0:48:93:55:93:b2:df:4c:cc:ca:05:66:fa:
5c:0b:bb:af:58:e6:c5:60:bf:c2:7d:51:06:fe:12:27:47:0a:
d8:49:eb:e9:d5:21:fc:8f:30:42:ed:ce:37:83:0d:e4:cb:96:
fb:65:42:73:5d:a5:71:47:dc:d9:45:fe:ce:5a:e2:45:85:6f:
2f:ce:4c:a3:d5:01:db:e3:ca:61:6a:c4:7a:6b:51:2b:8f:19:
b9:29:ff:d9:45:68:b3:13:7e:26:dd:6f:ef:e3:6f:4d:e7:90:
73:40:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:35 2024 by rpki-client on console-ams.rpki-client.org