Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2036323333.roa
File: 38392e3130362e3230372e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier: 27lfFoNVgTguOc17/fS5q6+LYeUJkOgGcCsBHKHx0+c=
Subject key identifier: F4:98:A3:CE:54:6E:CE:BA:86:02:0B:DF:B5:D1:98:8C:18:EF:4D:38
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 6CAE110957519DC9601072DBFA48F7659CA5DDA5
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2036323333.roa
Signing time: Thu 12 Sep 2024 13:50:18 +0000
ROA not before: Thu 12 Sep 2024 13:45:18 +0000
ROA not after: Thu 11 Sep 2025 13:50:18 +0000
asID: 6233
IP address blocks: 89.106.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ae:11:09:57:51:9d:c9:60:10:72:db:fa:48:f7:65:9c:a5:dd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Sep 12 13:45:18 2024 GMT
Not After : Sep 11 13:50:18 2025 GMT
Subject: CN=F498A3CE546ECEBA86020BDFB5D1988C18EF4D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0d:c8:23:a1:63:98:76:2c:ee:92:a6:48:f3:
5a:2e:15:cf:94:a2:c7:45:9a:39:c4:49:77:c0:37:
d5:9d:bc:25:e9:55:d5:c5:d1:23:8a:14:2d:76:68:
4e:34:a6:45:b4:35:9a:51:31:db:bc:e4:4b:a6:01:
60:57:d1:43:7e:da:6a:25:53:36:f9:a7:79:58:19:
9a:5b:f7:41:6b:e0:39:6a:4c:ac:92:0f:8e:44:c1:
41:49:38:fd:24:6a:52:66:4c:b1:44:c1:bb:59:f2:
d4:c4:ae:fb:24:f1:1f:92:53:d7:b6:c0:4a:eb:13:
f0:f1:64:3b:fc:c6:c3:3b:4f:b7:4a:d7:58:a3:ce:
eb:92:d1:78:0d:00:a6:50:32:e3:c2:bd:66:db:f0:
69:ff:7e:a7:d6:b0:d1:71:ae:bc:de:db:80:5b:9c:
26:d5:34:92:63:42:8c:e7:27:ee:21:f1:99:0a:e6:
f2:ee:07:65:4d:b9:6b:37:a2:2d:37:98:f9:d2:d6:
c2:af:e5:2d:66:58:d7:4b:71:50:e1:57:86:e0:db:
3c:81:74:2f:da:c7:1a:8e:7d:48:c7:59:06:9d:59:
80:d2:84:b2:0f:06:58:df:73:fc:4e:88:aa:db:cc:
6e:23:07:0f:13:fe:5d:ce:20:6d:b2:cb:95:32:64:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:98:A3:CE:54:6E:CE:BA:86:02:0B:DF:B5:D1:98:8C:18:EF:4D:38
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0e:52:d7:ee:76:5e:ea:ca:02:22:91:7f:70:08:f5:02:c5:
14:71:47:69:bb:43:ec:dc:ff:6a:5c:52:30:5a:2c:2b:88:35:
00:40:64:9c:4a:23:bf:6a:50:4f:fa:d8:fc:1e:d7:2f:86:38:
3e:16:d7:a9:3c:6b:b8:a5:fb:5c:8c:38:ba:61:69:84:57:43:
c5:9a:dd:9d:ed:62:76:2f:86:18:02:0a:b4:e7:f2:97:d6:1f:
44:a2:1b:bd:d9:be:16:b9:a8:f2:7a:ae:29:a0:66:ec:76:91:
8a:19:57:6a:ba:f1:74:aa:ba:f0:5f:a5:80:51:67:9b:a0:bc:
1f:48:0a:14:cc:49:a4:f6:07:0f:67:ac:2d:34:8c:72:69:17:
6d:ab:66:32:c8:87:a7:dc:b2:c2:29:1d:24:e4:03:ca:73:78:
30:12:f1:ee:e5:06:8e:23:0a:4c:20:58:cf:5c:a1:02:a8:53:
08:97:da:08:a2:c4:f0:37:1c:b4:81:31:bf:ed:bb:30:bc:81:
5f:7e:0f:12:7d:23:8b:f1:82:f3:8c:8d:8c:f6:3f:8e:69:68:
a1:59:73:71:c9:fd:1b:f8:82:d6:60:3f:de:aa:6b:04:ed:00:
ff:2b:28:23:44:c3:ee:47:83:f9:a4:1c:fd:9c:47:d1:19:35:
cf:67:a4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:09 2024 by rpki-client on console-fra.rpki-client.org