Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/37/326131323a663463303a3a2f32392d3438203d3e20323130343334.roa
File: 326131323a663463303a3a2f32392d3438203d3e20323130343334.roa (raw, json)
Hash identifier: HhN3ELLZe66TJ+fij1LtP0zX5dGcB65eWUhaxPnm+ok=
Subject key identifier: 5F:0A:49:2D:26:AE:7E:DA:2B:7A:99:D3:0A:8F:32:21:62:08:46:01
Certificate issuer: /CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
Certificate serial: 7C2E6E5B235B138F03071B1DF2BF62405F86D0CE
Authority key identifier: C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
Subject info access: rsync://0.sb/repo/sb/37/326131323a663463303a3a2f32392d3438203d3e20323130343334.roa
Signing time: Fri 23 Aug 2024 10:47:04 +0000
ROA not before: Fri 23 Aug 2024 10:42:04 +0000
ROA not after: Fri 22 Aug 2025 10:47:04 +0000
asID: 210434
IP address blocks: 2a12:f4c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl
rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2e:6e:5b:23:5b:13:8f:03:07:1b:1d:f2:bf:62:40:5f:86:d0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
Validity
Not Before: Aug 23 10:42:04 2024 GMT
Not After : Aug 22 10:47:04 2025 GMT
Subject: CN=5F0A492D26AE7EDA2B7A99D30A8F322162084601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:26:bc:e1:1b:44:11:80:66:18:a9:0a:46:
30:ae:6a:c9:cc:98:a5:60:4a:c3:b9:f6:22:4c:09:
56:33:c6:6a:88:8e:0b:9a:63:c4:6b:d8:c3:4d:a3:
46:07:7d:f9:9f:f4:4d:90:46:00:a3:a0:e1:d3:89:
27:fd:e6:9a:bc:40:93:35:74:3c:d8:e8:62:9e:4c:
7f:cd:06:08:d4:4e:33:37:53:cc:fe:f9:95:95:a1:
7e:a3:dd:63:d5:9f:b6:18:ce:05:2a:e9:a5:f8:fd:
43:46:f7:18:30:7c:78:a5:3b:df:1f:77:cd:d7:fb:
2a:d6:ea:65:21:24:be:88:11:52:53:2a:23:f9:53:
54:7e:65:db:b9:39:ad:c5:99:e4:09:de:89:8f:77:
4a:7d:a4:b1:fc:4e:32:ce:fe:72:33:cf:d5:fb:6b:
8d:30:6c:1c:ab:28:0b:18:ac:b7:b7:10:8b:74:b8:
67:c8:5f:3f:87:e7:cd:ea:32:c2:c5:a6:63:f7:3d:
46:03:d2:02:a4:96:c4:5b:6d:f4:f1:49:34:90:42:
c4:cc:64:ed:7a:79:71:51:04:1f:48:01:db:85:9c:
6f:83:d6:c7:84:41:d8:bc:47:de:ca:86:4a:ab:55:
d0:05:d1:74:b6:d7:7f:c6:4d:62:79:1d:9f:80:ce:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0A:49:2D:26:AE:7E:DA:2B:7A:99:D3:0A:8F:32:21:62:08:46:01
X509v3 Authority Key Identifier:
keyid:C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/37/326131323a663463303a3a2f32392d3438203d3e20323130343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f4c0::/29
Signature Algorithm: sha256WithRSAEncryption
58:a5:be:bc:25:2b:6f:74:ee:7c:49:4f:58:6e:1f:df:a6:9c:
69:3a:fa:99:9f:c2:61:48:90:33:e4:3e:36:26:e2:d3:a8:03:
ca:fb:d3:29:42:9e:42:a6:19:af:23:fd:0a:fa:11:e4:23:37:
40:27:eb:69:2a:85:54:55:8f:05:0c:2d:99:34:b4:2a:08:1b:
af:a2:81:58:c4:3a:fc:18:fa:67:5f:26:6d:2f:00:91:63:53:
b2:a0:3e:4e:dd:a3:32:d0:71:f3:b2:33:fd:92:de:c2:57:ee:
e8:a0:13:f5:61:d5:7d:80:b8:01:a9:3a:9a:b0:e7:d9:c5:79:
4f:54:20:2c:aa:eb:84:41:5f:6a:4d:35:db:2b:05:ce:87:45:
3b:38:dd:ad:e7:38:8e:e5:17:18:04:75:f5:af:92:21:bb:f7:
2e:07:1c:c3:11:0e:86:20:86:46:ff:85:55:28:7c:47:27:61:
95:e8:2d:aa:0b:b1:26:e5:2b:75:f4:08:2b:1a:8e:39:c0:13:
74:ac:39:b9:a6:62:b9:ef:e5:31:e8:b5:7a:28:61:fb:c5:db:
a6:be:f7:b7:dd:fb:22:2d:dd:19:d8:93:a3:c7:be:79:36:89:
84:d5:de:6b:e5:be:26:ee:e1:b1:56:79:52:ca:a3:46:31:b4:
1a:17:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:24 2024 by rpki-client on console-fra.rpki-client.org