Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
File: 34352e3134322e3136362e302f32342d3234203d3e203233393539.roa (raw, json)
Hash identifier: 4SGWojaG0z8X1sD1NWpXXF8eli6ALe8/g7Xy56yiuC4=
Subject key identifier: B8:55:2D:9E:C5:1B:6B:34:CC:57:4D:87:C6:5A:20:A8:1B:FD:1A:C5
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 785B3C1E6D9040DD3DC097570CECAB6CF7D62AD2
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
Signing time: Fri 23 Aug 2024 10:47:06 +0000
ROA not before: Fri 23 Aug 2024 10:42:06 +0000
ROA not after: Fri 22 Aug 2025 10:47:06 +0000
asID: 23959
IP address blocks: 45.142.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:5b:3c:1e:6d:90:40:dd:3d:c0:97:57:0c:ec:ab:6c:f7:d6:2a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Aug 23 10:42:06 2024 GMT
Not After : Aug 22 10:47:06 2025 GMT
Subject: CN=B8552D9EC51B6B34CC574D87C65A20A81BFD1AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:65:0e:9f:70:b9:59:d8:62:72:85:b2:43:
66:84:1e:12:61:d0:79:58:67:67:d1:52:1d:da:eb:
54:a7:38:41:3f:c9:d2:4a:30:33:2b:c7:1a:53:6a:
a1:27:f7:26:9a:3b:52:5c:5a:63:20:a9:d7:1d:72:
ab:74:70:62:96:2c:78:76:56:84:d4:a8:60:f9:ab:
93:54:c7:b5:5c:f8:1e:8f:9f:d9:ff:c1:02:08:d7:
00:e4:ef:67:a1:fd:3f:83:f7:d3:4a:25:38:a5:f7:
a3:c3:b7:af:63:08:a7:fd:e2:6c:ef:37:e8:b5:60:
b0:84:eb:40:29:9b:51:d5:22:b9:6f:ac:af:50:5e:
97:14:a2:be:68:69:07:2e:73:1f:7d:e3:ef:c0:e3:
58:5e:56:2f:b2:f5:13:09:78:44:7f:b0:a3:1f:42:
aa:db:be:07:3d:38:53:74:e2:53:be:37:1c:10:5b:
4f:87:fd:31:ac:15:80:9b:a5:0d:ba:b3:61:ae:34:
dd:f2:94:6b:a3:6a:a9:af:1c:c2:1a:92:e4:b3:4b:
72:27:17:c6:72:0a:e3:24:e0:0b:84:08:2e:92:07:
cf:ec:54:d2:e0:66:90:c0:84:5e:c6:e7:e3:c2:88:
36:c0:54:b5:1b:a3:77:b7:05:67:72:f9:92:cc:9e:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:55:2D:9E:C5:1B:6B:34:CC:57:4D:87:C6:5A:20:A8:1B:FD:1A:C5
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:84:db:a8:2c:87:df:26:97:f7:e1:63:00:6d:07:67:9f:f8:
d9:87:71:8a:ed:5e:9b:b5:a3:b0:c7:8f:7b:73:57:82:87:2a:
3e:a0:ca:58:f1:85:2f:2b:7e:6f:cf:c7:3c:9e:6e:90:9f:0c:
0f:21:67:66:40:52:c3:64:d3:78:36:e6:38:32:53:0a:5c:be:
5b:b2:aa:e8:29:5a:af:22:13:8f:19:9d:4a:8e:6a:49:17:52:
e8:98:80:90:0d:85:67:6f:b4:3c:7f:a8:40:65:88:75:a3:57:
d9:1a:7d:1f:1b:9e:2e:80:80:fe:89:ab:d7:d0:fd:4b:ae:fc:
6e:46:f7:8d:84:b2:ab:87:97:46:0e:31:40:88:69:9d:66:23:
56:d7:ce:63:36:88:73:01:9d:d1:73:a4:7c:64:7c:0a:d6:72:
91:c0:41:ef:e8:6f:d8:57:4f:a6:41:0d:87:9b:06:b3:e6:9b:
ef:a6:2e:3c:c1:01:63:2a:26:4c:52:e1:9b:af:09:90:7a:d3:
00:ef:37:2b:b2:21:c4:2b:08:db:0d:16:4a:16:cf:7a:78:86:
0d:f1:aa:a8:2e:30:16:a1:90:bf:b3:8c:67:7d:09:07:6f:10:
2b:6f:f6:19:c0:6e:c4:6a:b2:d7:9a:6f:a0:eb:8c:56:f1:ac:
6d:c8:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:35 2024 by rpki-client on console-ams.rpki-client.org