Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e20393439.roa
File:                     38392e3130362e3230372e302f32342d3234203d3e20393439.roa (raw, json)
Hash identifier:          K8VPY4wMhnaou1sg2pSZLzU2fegNuCUi3p9UovAsHVM=
Subject key identifier:   6B:89:81:CC:5B:4B:77:47:36:29:F9:18:1A:DA:D9:7F:27:B9:39:82
Certificate issuer:       /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial:       6ADF9E451B66A5484013A44657E0AEDB0CCF9C48
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access:      rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e20393439.roa
Signing time:             Fri 23 Aug 2024 10:47:07 +0000
ROA not before:           Fri 23 Aug 2024 10:42:07 +0000
ROA not after:            Fri 22 Aug 2025 10:47:07 +0000
asID:                     949
IP address blocks:        89.106.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
                          rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:df:9e:45:1b:66:a5:48:40:13:a4:46:57:e0:ae:db:0c:cf:9c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
        Validity
            Not Before: Aug 23 10:42:07 2024 GMT
            Not After : Aug 22 10:47:07 2025 GMT
        Subject: CN=6B8981CC5B4B77473629F9181ADAD97F27B93982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cd:c0:ec:44:66:28:aa:49:bd:94:eb:43:7a:
                    a8:1a:2c:fc:63:0d:56:1c:38:99:0d:f1:8b:a9:48:
                    dd:1b:79:71:75:8b:00:dc:58:e0:c6:6f:6a:e4:5f:
                    ff:6b:a8:04:73:a2:15:e7:23:9b:d6:d6:02:22:32:
                    9a:93:6e:d9:50:d9:e8:b5:32:a3:9d:9a:82:ad:4d:
                    3b:38:d4:ac:a2:26:e0:c8:5a:55:b8:f0:71:15:26:
                    a0:1a:e5:0e:95:58:08:1d:7f:d8:62:f4:34:e3:1c:
                    3b:c0:ed:7e:24:08:16:85:58:43:5a:a2:d3:6f:dd:
                    15:5a:b4:5d:c4:a0:89:35:9e:f1:4d:ad:3a:2e:69:
                    c2:07:47:91:53:da:c2:23:ae:2b:5e:8c:94:bd:d7:
                    d1:39:6f:25:af:46:38:f2:e9:42:ff:4b:c9:2d:59:
                    43:49:1c:f4:d1:91:70:ca:d7:f0:9b:24:60:fb:98:
                    a7:12:9d:7c:a7:b6:7f:b5:fd:d2:0a:69:e6:1d:56:
                    10:50:88:68:82:c2:51:5e:68:2d:fd:86:54:bc:ae:
                    9b:38:92:b1:dc:a4:8f:bd:0f:d6:92:b9:5b:f3:63:
                    bb:d6:b6:58:9e:b5:4a:b5:89:75:93:e8:75:5c:c3:
                    fa:5a:7a:64:68:13:c5:f6:41:68:96:92:a9:f2:35:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:89:81:CC:5B:4B:77:47:36:29:F9:18:1A:DA:D9:7F:27:B9:39:82
            X509v3 Authority Key Identifier:
                keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:d1:85:c7:ed:72:4a:10:46:ce:f5:48:6d:00:11:f9:a5:a0:
         66:6c:12:62:14:2b:1e:53:6a:35:fb:83:47:44:70:02:c7:f6:
         a3:a7:73:8e:78:98:10:c5:53:9e:7b:9a:81:fa:29:61:7e:18:
         34:2d:44:b2:5e:b5:b8:31:3c:a7:02:2c:9e:37:19:e8:36:18:
         bb:4f:3f:f9:5f:37:fa:ea:1f:e3:3e:4c:df:cd:6e:0f:ab:6b:
         b0:7c:0a:9c:18:fe:43:49:9b:48:76:f9:51:63:cc:5f:09:54:
         fa:0d:53:a8:32:81:ce:06:6e:da:7f:e7:27:d4:c0:15:b6:98:
         b1:65:a3:8f:ee:fa:5b:c3:b2:5e:d2:02:4c:e0:a3:93:f8:91:
         be:ca:08:c3:17:ae:9b:50:dd:19:ec:a8:78:32:a9:96:45:e0:
         7a:c0:a0:21:94:0d:70:8c:73:ad:dc:dc:ee:c1:4c:81:24:50:
         0e:4f:34:9e:72:69:6b:e3:76:b8:ce:61:89:33:37:dc:90:d1:
         0b:c1:26:1d:09:55:9b:52:e2:6e:f4:c6:0e:94:0f:da:6b:ac:
         66:72:a2:27:61:d2:f7:9a:79:2a:3c:c4:f2:ba:12:62:1b:ee:
         2a:e1:4b:0e:94:56:af:95:5a:de:30:ba:0f:23:7e:71:a3:7d:
         aa:94:0f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:09 2024 by rpki-client on console-fra.rpki-client.org