Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/39312e3232302e32352e302f32342d3234203d3e203134363138.roa
File: 39312e3232302e32352e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: /EynYq+86HkIlyKSsta3ZX9Qyr/lnO9XstZZ7070mZY=
Subject key identifier: B5:F2:05:FB:C6:F3:33:83:23:14:35:FB:4D:16:95:4F:81:50:5F:BA
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 7D36DC1F61053BB802F62CE095D152A2E8DA3F55
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/39312e3232302e32352e302f32342d3234203d3e203134363138.roa
Signing time: Mon 30 Dec 2024 15:30:42 +0000
ROA not before: Mon 30 Dec 2024 15:25:42 +0000
ROA not after: Mon 29 Dec 2025 15:30:42 +0000
asID: 14618
IP address blocks: 91.220.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:36:dc:1f:61:05:3b:b8:02:f6:2c:e0:95:d1:52:a2:e8:da:3f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Dec 30 15:25:42 2024 GMT
Not After : Dec 29 15:30:42 2025 GMT
Subject: CN=B5F205FBC6F33383231435FB4D16954F81505FBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:2b:6a:51:b9:26:76:69:ff:f5:6d:3a:9d:
e3:a2:62:d8:90:10:d1:44:5f:3a:84:dd:5e:57:d9:
47:22:ce:2a:04:dd:84:60:a6:67:5d:97:04:1e:cd:
be:ad:9b:05:3d:cb:50:06:5c:60:9e:73:96:61:7f:
f6:1e:56:14:4d:19:54:d3:d9:c9:24:8e:db:32:af:
94:53:7e:61:9d:d3:64:f9:e1:fe:44:9d:ff:64:47:
76:d9:39:60:a9:71:3f:fe:4e:8f:1d:c0:0d:ae:9a:
f0:db:e0:a3:89:af:0e:92:81:ed:d2:e5:c5:02:7e:
3a:7d:b9:c3:5f:9f:b2:16:eb:29:6e:02:fe:9d:c5:
2c:60:2b:8e:7f:67:6e:32:aa:7c:59:cd:4c:74:97:
88:7c:dd:d9:fb:ec:6e:73:2e:13:bd:20:83:3f:05:
0a:21:2a:a7:67:ce:dd:59:1f:e9:b7:7f:96:eb:ad:
cb:83:8e:06:eb:93:4b:ae:9f:78:2a:e0:ac:b7:be:
dc:45:b5:73:7b:ff:19:64:7f:09:76:d4:38:c6:84:
9e:02:05:64:40:15:76:28:db:40:32:75:74:81:c8:
c5:93:94:80:6d:87:ed:fe:34:2f:f1:90:44:fa:05:
1a:91:1f:92:2e:52:9a:e5:3a:55:b1:ca:71:ca:72:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F2:05:FB:C6:F3:33:83:23:14:35:FB:4D:16:95:4F:81:50:5F:BA
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/39312e3232302e32352e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.25.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a5:eb:ac:59:bf:f6:0c:c1:99:57:cc:46:5e:2e:42:13:a8:
f7:c4:e7:d7:6a:9b:6a:2d:fd:1b:4b:82:6b:9e:01:37:87:e7:
5d:5b:3c:4b:37:72:bc:5b:e8:d8:01:b9:14:7b:fb:b1:79:e1:
21:f5:b6:69:9a:e8:db:22:0a:c6:7d:9b:ed:24:6e:f8:9d:92:
ab:06:e0:05:db:1e:6c:67:2b:42:98:ef:56:80:c8:b3:31:be:
6f:f9:e6:35:81:14:45:e9:16:de:3c:d7:4c:e9:29:dd:ea:f6:
49:04:83:ce:e3:9e:8b:d8:5d:9c:1f:ee:67:e1:c6:a9:c3:f9:
8e:50:48:40:aa:91:a3:28:13:93:30:9e:2e:a1:17:b4:b4:d1:
45:95:30:10:ca:77:bd:73:19:c0:c1:a3:81:0b:5d:92:41:d2:
46:31:eb:91:4a:d3:d4:70:df:af:ad:64:f0:d1:97:83:8c:5e:
40:76:d8:d4:2e:85:eb:51:18:41:c2:25:92:d1:0b:5b:cb:e0:
53:86:c0:94:ce:74:b9:9c:ac:e2:6b:df:a6:55:06:43:50:59:
f1:67:91:27:26:c3:4a:ba:86:bc:b2:c8:a8:35:f6:4d:2b:0e:
37:b6:ec:5a:06:f6:08:06:06:f8:52:59:51:9c:f1:1b:69:c3:
24:bd:3c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:38 2025 by rpki-client