Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3132382e3232332e302f32342d3234203d3e203432383331.roa
File: 34352e3132382e3232332e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: 3k02TqF7UL8WQ67metjOPdy4UaUvJiGbuKXoK/DBBhg=
Subject key identifier: C6:CA:F9:CD:B2:C5:A9:A3:81:A9:2D:1D:CF:AA:E2:63:FB:64:A8:EE
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 692DF8642D21633CC6869ED956FFFA9C2F83C801
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3132382e3232332e302f32342d3234203d3e203432383331.roa
Signing time: Thu 04 Apr 2024 05:36:17 +0000
ROA not before: Thu 04 Apr 2024 05:31:17 +0000
ROA not after: Thu 03 Apr 2025 05:36:17 +0000
asID: 42831
IP address blocks: 45.128.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:2d:f8:64:2d:21:63:3c:c6:86:9e:d9:56:ff:fa:9c:2f:83:c8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Apr 4 05:31:17 2024 GMT
Not After : Apr 3 05:36:17 2025 GMT
Subject: CN=C6CAF9CDB2C5A9A381A92D1DCFAAE263FB64A8EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:a6:4c:6a:f2:2d:38:dc:b0:18:a8:fa:09:
3c:c7:d4:c9:60:6a:e5:aa:43:af:1c:4b:cd:9d:0a:
47:c7:f0:f7:f2:9c:db:2d:01:a6:e0:05:40:eb:14:
49:7a:08:ef:4f:e2:8f:c1:e2:80:f6:b2:c3:cc:94:
19:3c:ac:f7:16:32:c4:a9:c6:8d:c6:1a:e8:61:19:
74:82:c4:60:fb:b2:b6:5b:32:67:7a:c9:07:98:4e:
7c:56:be:09:37:a9:84:62:59:6d:c7:b5:54:2a:b5:
e9:8c:60:27:78:2e:fb:81:ec:67:64:49:45:05:1c:
79:49:07:9f:15:b8:ce:cb:e1:47:db:37:d9:eb:c7:
91:10:ad:01:21:38:02:c2:16:2c:b6:8e:bd:c8:cf:
dc:8b:2f:23:87:b6:62:33:4e:8b:b7:78:ee:10:16:
85:7b:92:f9:1b:5a:25:2b:39:0c:7b:f9:7c:82:50:
a6:24:09:00:23:a0:70:55:b1:54:39:8e:f3:3f:45:
af:7f:ac:0e:60:af:cc:b6:9f:b2:eb:d7:2d:8a:cb:
ac:43:93:25:77:40:33:7b:7d:9d:36:4c:83:23:b9:
6f:c7:ce:4d:de:8a:d2:65:29:50:9f:80:4e:fb:e4:
06:45:9d:3d:dc:d0:a0:d8:4a:50:1f:07:54:e8:86:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CA:F9:CD:B2:C5:A9:A3:81:A9:2D:1D:CF:AA:E2:63:FB:64:A8:EE
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3132382e3232332e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4a:7f:91:a6:50:ba:2b:d3:f5:36:aa:db:20:4f:a1:85:da:
59:3e:ac:18:70:cb:28:03:63:30:b4:5a:0b:37:b2:7c:84:81:
27:1b:3b:24:93:31:2b:19:ad:5e:e5:5f:6f:30:b2:8a:a6:d1:
44:f5:7b:7a:a4:db:b5:00:f0:41:0b:22:64:70:e9:ef:e1:c0:
7a:99:47:6c:57:39:d9:72:94:81:42:bf:41:2f:eb:d2:6f:02:
be:bd:50:15:a0:23:a1:03:1a:98:19:85:02:f0:24:d5:33:fe:
20:9b:d3:df:61:a8:11:48:f0:bb:4c:3d:d4:ae:45:92:58:5a:
14:97:81:86:de:72:2e:c0:e8:5b:f0:3a:8b:bc:00:3b:7c:51:
53:84:b4:52:61:f7:75:9a:1f:10:b6:ed:8d:ff:79:d2:61:98:
1c:09:67:c5:3e:ea:bc:30:37:f0:61:bc:be:9b:f8:b0:ab:36:
64:36:8b:27:04:47:18:33:6f:3e:58:64:2c:51:d7:46:35:c0:
09:d1:24:d5:98:6d:03:f0:b8:6d:f6:2a:e2:3c:4c:50:fc:6b:
4c:10:20:2c:29:26:45:93:57:5b:f5:d7:df:8c:7d:37:91:4a:
3e:36:1c:36:78:9c:b0:af:e7:08:1c:e2:1a:48:1f:d0:42:50:
61:76:05:64
-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIUaS34ZC0hYzzGhp7ZVv/6nC+DyAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYxYzYxNjM2NGI4OTY1OWVkOWYxOGNiMGFmNzc0MjA0
MzdjYzdkYTAeFw0yNDA0MDQwNTMxMTdaFw0yNTA0MDMwNTM2MTdaMDMxMTAvBgNV
BAMTKEM2Q0FGOUNEQjJDNUE5QTM4MUE5MkQxRENGQUFFMjYzRkI2NEE4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV9qZMavItONywGKj6CTzH1Mlg
auWqQ68cS82dCkfH8PfynNstAabgBUDrFEl6CO9P4o/B4oD2ssPMlBk8rPcWMsSp
xo3GGuhhGXSCxGD7srZbMmd6yQeYTnxWvgk3qYRiWW3HtVQqtemMYCd4LvuB7Gdk
SUUFHHlJB58VuM7L4UfbN9nrx5EQrQEhOALCFiy2jr3Iz9yLLyOHtmIzTou3eO4Q
FoV7kvkbWiUrOQx7+XyCUKYkCQAjoHBVsVQ5jvM/Ra9/rA5gr8y2n7Lr1y2Ky6xD
kyV3QDN7fZ02TIMjuW/Hzk3eitJlKVCfgE775AZFnT3c0KDYSlAfB1Tohp+9AgMB
AAGjggG8MIIBuDAdBgNVHQ4EFgQUxsr5zbLFqaOBqS0dz6riY/tkqO4wHwYDVR0j
BBgwFoAUdhxhY2S4llntnxjLCvd0IEN8x9owDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIxLzc2MUM2MTYzNjRC
ODk2NTlFRDlGMThDQjBBRjc3NDIwNDM3Q0M3REEuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kaHhoWTJTNGxsbnRueGpMQ3ZkMElFTjh4OW8uY2VyMG4GCCsGAQUF
BwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjEvMzQz
NTJlMzEzMjM4MmUzMjMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzgz
MzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALYDfMA0GCSqGSIb3DQEBCwUAA4IBAQAfSn+RplC6K9P1
NqrbIE+hhdpZPqwYcMsoA2MwtFoLN7J8hIEnGzskkzErGa1e5V9vMLKKptFE9Xt6
pNu1APBBCyJkcOnv4cB6mUdsVznZcpSBQr9BL+vSbwK+vVAVoCOhAxqYGYUC8CTV
M/4gm9PfYagRSPC7TD3UrkWSWFoUl4GG3nIuwOhb8DqLvAA7fFFThLRSYfd1mh8Q
tu2N/3nSYZgcCWfFPuq8MDfwYby+m/iwqzZkNosnBEcYM28+WGQsUddGNcAJ0STV
mG0D8Lht9iriPExQ/GtMECAsKSZFk1db9dffjH03kUo+Nhw2eJywr+cIHOIaSB/Q
QlBhdgVk
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:40 2024 by rpki-client on console-ams.rpki-client.org