Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/34352e3134322e3136372e302f32342d3234203d3e2033323538.roa
File: 34352e3134322e3136372e302f32342d3234203d3e2033323538.roa (raw, json)
Hash identifier: o40gAVjRGO+GImPAdQhp4fj5NR7BQgDbCNEN9vq8DrY=
Subject key identifier: 5C:D9:D8:2F:7F:64:0C:3E:CA:2A:09:03:AE:B7:C8:3D:00:71:19:A2
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 5B4738B56AE416F0371E25F7C300031C8D3EB9C0
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/34352e3134322e3136372e302f32342d3234203d3e2033323538.roa
Signing time: Fri 10 May 2024 08:47:00 +0000
ROA not before: Fri 10 May 2024 08:42:00 +0000
ROA not after: Fri 09 May 2025 08:47:00 +0000
asID: 3258
IP address blocks: 45.142.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:47:38:b5:6a:e4:16:f0:37:1e:25:f7:c3:00:03:1c:8d:3e:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: May 10 08:42:00 2024 GMT
Not After : May 9 08:47:00 2025 GMT
Subject: CN=5CD9D82F7F640C3ECA2A0903AEB7C83D007119A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2f:77:bd:e3:68:10:e5:dc:11:18:b5:b3:d6:
61:e4:51:ce:0a:c9:bf:52:80:ff:af:06:f5:26:8f:
99:d6:37:da:d9:31:b8:37:89:52:28:e8:cd:8c:c3:
a5:ad:44:ff:c2:0b:c8:51:1a:f5:d1:b7:67:23:fd:
a2:e8:dc:0a:31:23:83:30:e1:02:5d:b4:4d:21:fe:
fd:4d:ad:85:70:41:9d:5c:78:0d:42:54:88:7b:a5:
67:28:3c:c2:b5:24:94:c7:68:2f:7e:c2:d6:9b:06:
38:39:ec:59:47:06:e9:8b:9c:72:90:ef:2b:c5:a4:
bf:d6:97:b9:27:0f:68:1d:9e:25:fb:5e:0a:4a:d7:
c3:dd:12:6b:b6:3b:d9:be:90:8c:d0:9c:3a:fd:e2:
29:c7:65:02:7c:4e:db:e5:cf:6c:17:d1:2e:66:40:
9c:29:25:24:16:2c:eb:50:19:4f:24:00:be:1d:17:
c6:e5:aa:7d:f1:72:0c:53:f8:1f:d2:4b:c3:6d:f4:
76:d6:f3:ea:52:8f:ee:8d:77:3e:80:d0:9b:1a:8b:
af:34:34:37:f6:45:8a:36:3d:31:0a:86:31:26:aa:
72:3a:c4:82:ae:c4:f4:25:70:e4:0a:ce:bd:8c:49:
16:88:4f:23:8d:84:c5:a0:82:b6:96:9c:32:7e:a9:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:D8:2F:7F:64:0C:3E:CA:2A:09:03:AE:B7:C8:3D:00:71:19:A2
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3134322e3136372e302f32342d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.167.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b5:8e:41:11:be:5b:7e:c8:65:aa:d7:9a:21:60:e8:12:97:
0d:ea:13:a9:ab:cf:f0:80:e8:dd:f4:dc:99:ad:fb:63:8c:26:
c8:d1:58:e4:cf:ca:e4:c4:2b:d9:9c:9d:17:4f:f5:fb:b8:59:
75:b3:f8:b5:2f:8b:70:fa:5f:b6:a9:71:a5:9c:83:d6:1e:9e:
10:bf:2b:33:2b:90:e8:dd:57:e2:91:cc:61:b7:ff:5c:61:9c:
e7:11:48:7a:8f:4b:cb:38:21:97:52:2c:93:71:b7:23:2e:09:
4b:34:23:12:4c:f9:a9:22:a0:dd:cf:4f:ae:5f:09:02:9d:41:
aa:6b:72:e3:c4:2b:39:84:2c:b1:c7:33:26:a2:d9:38:5d:82:
34:2b:d6:df:24:5f:ba:3a:9f:72:f6:6e:69:af:ec:96:9c:1f:
76:f6:b8:04:cb:11:c4:27:b8:c5:f9:84:55:fb:df:ff:75:41:
90:06:0b:b2:17:48:51:b8:ad:cb:f5:98:15:05:a1:05:b7:9f:
f6:fa:58:2b:4c:31:67:a1:bd:73:e9:05:b1:4c:0d:6f:9d:cd:
48:0b:3f:5f:61:ca:40:14:60:b7:0e:c5:0b:53:bd:24:04:4e:
1c:82:17:2c:64:66:52:05:0e:f9:9b:98:e7:83:ce:2b:27:e5:
90:1d:7d:84
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIUW0c4tWrkFvA3HiX3wwADHI0+ucAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYxYzYxNjM2NGI4OTY1OWVkOWYxOGNiMGFmNzc0MjA0
MzdjYzdkYTAeFw0yNDA1MTAwODQyMDBaFw0yNTA1MDkwODQ3MDBaMDMxMTAvBgNV
BAMTKDVDRDlEODJGN0Y2NDBDM0VDQTJBMDkwM0FFQjdDODNEMDA3MTE5QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwL3e942gQ5dwRGLWz1mHkUc4K
yb9SgP+vBvUmj5nWN9rZMbg3iVIo6M2Mw6WtRP/CC8hRGvXRt2cj/aLo3AoxI4Mw
4QJdtE0h/v1NrYVwQZ1ceA1CVIh7pWcoPMK1JJTHaC9+wtabBjg57FlHBumLnHKQ
7yvFpL/Wl7knD2gdniX7XgpK18PdEmu2O9m+kIzQnDr94inHZQJ8Ttvlz2wX0S5m
QJwpJSQWLOtQGU8kAL4dF8blqn3xcgxT+B/SS8Nt9HbW8+pSj+6Ndz6A0Jsai680
NDf2RYo2PTEKhjEmqnI6xIKuxPQlcOQKzr2MSRaITyONhMWggraWnDJ+qZcRAgMB
AAGjggG6MIIBtjAdBgNVHQ4EFgQUXNnYL39kDD7KKgkDrrfIPQBxGaIwHwYDVR0j
BBgwFoAUdhxhY2S4llntnxjLCvd0IEN8x9owDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIxLzc2MUM2MTYzNjRC
ODk2NTlFRDlGMThDQjBBRjc3NDIwNDM3Q0M3REEuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kaHhoWTJTNGxsbnRueGpMQ3ZkMElFTjh4OW8uY2VyMGwGCCsGAQUF
BwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjEvMzQz
NTJlMzEzNDMyMmUzMTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMyMzUz
OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2OpzANBgkqhkiG9w0BAQsFAAOCAQEAkLWOQRG+W37IZarX
miFg6BKXDeoTqavP8IDo3fTcma37Y4wmyNFY5M/K5MQr2ZydF0/1+7hZdbP4tS+L
cPpftqlxpZyD1h6eEL8rMyuQ6N1X4pHMYbf/XGGc5xFIeo9Lyzghl1Isk3G3Iy4J
SzQjEkz5qSKg3c9Prl8JAp1Bqmty48QrOYQsscczJqLZOF2CNCvW3yRfujqfcvZu
aa/slpwfdva4BMsRxCe4xfmEVfvf/3VBkAYLshdIUbity/WYFQWhBbef9vpYK0wx
Z6G9c+kFsUwNb53NSAs/X2HKQBRgtw7FC1O9JAROHIIXLGRmUgUO+ZuY54POKyfl
kB19hA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:35 2024 by rpki-client on console-ams.rpki-client.org