Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e2033323538.roa
File: 34352e3134322e3136362e302f32342d3234203d3e2033323538.roa (raw, json)
Hash identifier: K6aqEej9qisV0tIgdymlwB2eyV9rP8LpTjv/13c5phM=
Subject key identifier: 15:DC:47:AE:DE:DA:4E:1A:62:2F:D0:E6:46:77:10:FC:AA:E6:3D:34
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 2D070431FD44DF4378EB014256E1657D745DDB93
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e2033323538.roa
Signing time: Fri 10 May 2024 08:47:00 +0000
ROA not before: Fri 10 May 2024 08:42:00 +0000
ROA not after: Fri 09 May 2025 08:47:00 +0000
asID: 3258
IP address blocks: 45.142.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 23:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:07:04:31:fd:44:df:43:78:eb:01:42:56:e1:65:7d:74:5d:db:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: May 10 08:42:00 2024 GMT
Not After : May 9 08:47:00 2025 GMT
Subject: CN=15DC47AEDEDA4E1A622FD0E6467710FCAAE63D34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:c0:ee:61:66:2a:73:e3:cc:78:65:37:d9:
f6:f3:ec:e8:64:75:fe:c5:47:bf:76:1d:b9:d8:bd:
6e:25:2a:7e:7f:f5:35:d7:d0:8b:42:26:5d:a0:33:
01:38:35:ed:ec:51:f1:85:29:40:70:ca:46:35:41:
68:94:05:66:56:ec:46:65:a0:e9:82:53:ac:a9:8f:
c4:20:d7:40:4c:85:e0:50:bf:22:2e:33:17:07:0e:
5e:e2:59:04:58:be:6c:62:5c:60:91:a3:85:cf:1b:
4b:11:27:7d:e9:9e:15:da:66:dc:87:17:20:6d:c0:
33:b8:bc:ca:26:63:c0:2c:1f:2e:6b:4c:d7:43:52:
cd:c0:34:43:28:51:b3:42:df:39:a1:2d:53:06:3a:
51:a2:1d:24:6a:fb:00:93:81:bc:44:92:c9:d1:a7:
b6:af:bf:cc:00:7e:95:b4:49:6b:a0:1c:06:66:bb:
6b:3d:a5:d3:5a:b4:33:09:e5:31:1d:e9:68:65:bf:
d2:92:fb:f8:bc:5f:84:19:b9:8b:6b:b4:d7:5e:8b:
1a:09:a9:97:4d:3f:31:d1:fb:b8:80:f0:10:54:59:
55:6f:40:98:8e:cf:46:3e:bd:37:e4:4f:24:e6:c5:
85:b9:89:6a:87:5c:50:d6:30:26:b2:94:17:eb:db:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:47:AE:DE:DA:4E:1A:62:2F:D0:E6:46:77:10:FC:AA:E6:3D:34
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.166.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d6:c3:6b:7b:03:7b:85:99:cd:3d:d3:93:96:01:09:44:6d:
f4:f0:13:56:55:2f:2c:b8:16:7a:29:48:ba:ed:66:36:68:2b:
8d:ef:c2:7e:d8:78:0a:b6:55:94:6f:7b:65:8c:2a:d9:10:c8:
52:b9:9c:1b:d4:6b:22:d9:5f:77:eb:56:23:8a:80:08:03:70:
6e:a2:a3:8c:0d:f3:d4:06:e6:1a:11:c5:36:1b:5d:ab:d2:97:
76:75:e3:83:8c:7a:69:2f:43:bb:bc:5c:49:2f:35:b6:a9:93:
84:1d:35:dd:d4:8a:0b:2a:43:26:f2:b2:18:c1:a2:0f:9b:db:
c0:10:1a:ce:7a:b1:8c:55:ec:81:18:4e:41:76:f7:4b:85:3b:
c7:a3:2d:da:49:47:9a:26:11:16:62:d1:ae:16:d3:b3:ca:39:
83:f0:9b:92:41:46:c7:a1:d9:26:6d:5f:b1:b0:0a:53:4b:40:
c3:7c:e2:d5:f6:06:76:2f:34:52:cb:68:d1:c7:f8:b0:ff:f2:
4c:13:4b:0c:00:0c:b5:dd:9b:87:10:41:05:ea:e7:ee:ba:a3:
93:3c:12:87:d3:36:ca:25:da:57:f2:62:27:0d:a7:82:52:d4:
9c:c2:9b:80:1c:76:fc:a0:15:6b:39:65:4e:6e:3c:da:70:ea:
31:5d:94:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 05:31:24 2024 by rpki-client on console-fra.rpki-client.org