Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
File: 34352e3134322e3136362e302f32342d3234203d3e203233393539.roa (raw, json)
Hash identifier: cdfbFagAOq5UzAOo/KDGsj1lk7UHOmDCbQnDevli0jQ=
Subject key identifier: FF:8A:58:29:B6:B7:67:B6:1A:2E:4A:89:F6:EE:0C:BC:EB:A3:D9:EE
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 0234A80C4F470CAA63FE7697133CF2F225344BD3
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
Signing time: Fri 22 Sep 2023 10:19:35 +0000
ROA not before: Fri 22 Sep 2023 10:14:35 +0000
ROA not after: Fri 20 Sep 2024 10:19:35 +0000
asID: 23959
IP address blocks: 45.142.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:34:a8:0c:4f:47:0c:aa:63:fe:76:97:13:3c:f2:f2:25:34:4b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Sep 22 10:14:35 2023 GMT
Not After : Sep 20 10:19:35 2024 GMT
Subject: CN=FF8A5829B6B767B61A2E4A89F6EE0CBCEBA3D9EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:1a:30:76:da:a8:35:44:29:3d:98:ef:33:
7f:47:91:da:49:ba:55:cb:b3:7b:15:ee:5e:ab:f2:
42:32:76:86:f7:37:c1:57:12:67:a5:e1:71:14:9b:
8b:70:ec:5e:fa:25:70:f7:a0:87:aa:6a:48:70:ef:
88:4f:c4:73:d3:37:21:81:eb:ca:6a:9e:fc:6a:32:
4f:4c:9b:fa:9d:e3:0c:4e:60:fa:bd:ad:dc:04:6d:
f9:2b:18:e3:bb:2d:b1:00:0c:11:b0:d4:df:0a:69:
42:8a:2c:33:4c:16:dc:28:60:73:30:42:cd:96:42:
f9:6e:35:67:13:13:92:ac:ce:61:7b:31:bf:2d:d2:
1f:3e:7a:80:d6:ba:ce:03:3b:e7:53:57:7f:7c:0c:
ec:0e:04:6e:0f:fe:18:47:df:2d:86:c5:45:91:f0:
bb:36:31:8f:fc:55:00:9a:a6:01:e4:78:af:d1:b1:
00:9a:55:bb:9e:72:00:ab:4d:99:c3:72:dd:67:01:
56:ce:af:7f:dc:38:78:c0:a7:2f:2d:c6:83:1f:dd:
5f:fc:e8:1a:a0:a7:9f:c1:dc:bf:58:d1:f7:6b:76:
00:c1:ea:62:bd:af:d1:bd:66:33:22:a5:5f:6f:b6:
0c:72:9b:10:2c:7c:a9:af:77:85:f4:06:49:1b:d2:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8A:58:29:B6:B7:67:B6:1A:2E:4A:89:F6:EE:0C:BC:EB:A3:D9:EE
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.166.0/24
Signature Algorithm: sha256WithRSAEncryption
90:2e:7e:a9:19:94:fe:3c:e8:d6:39:e8:fe:37:1a:16:ee:ac:
68:5a:b3:b5:5e:51:10:38:12:3f:bf:2c:2b:32:84:cd:cc:c7:
55:89:f5:7b:5e:a8:29:6c:ba:63:f9:0c:69:de:89:67:b1:cf:
57:72:73:7d:a7:21:1e:91:58:74:16:0f:1c:a5:56:c5:3b:76:
0d:74:17:e8:d0:d1:15:70:54:8d:62:61:d4:a5:a8:9e:d0:49:
66:2b:ae:e7:d8:0e:9c:9e:91:57:e4:8a:64:c5:2e:22:8e:f5:
df:cd:34:22:8b:91:ad:29:f3:0a:2f:a8:ad:23:4b:28:ed:ca:
0d:79:29:e9:d4:6a:2d:03:d1:07:17:2b:d8:2c:34:44:24:8b:
07:4f:4d:b4:df:2e:30:5b:ab:51:03:73:d9:f1:c9:02:05:11:
bf:3b:d4:09:39:ee:e4:7b:bb:cc:8e:f7:6d:46:6f:da:d5:c1:
0a:1e:50:c6:64:6d:e4:f4:28:d4:44:ab:fe:51:a5:f4:8d:fb:
92:a6:be:de:7f:98:9a:49:7e:39:74:a4:94:5f:59:ee:4e:cc:
03:ba:fb:03:78:4e:cd:44:91:bc:d5:7b:a5:2d:21:84:0f:7d:
0b:1c:fa:53:ec:e8:24:52:25:87:9b:d9:3d:42:0e:ba:e7:84:
9e:39:f7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:08 2024 by rpki-client on console-ams.rpki-client.org