Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/37/38352e3139332e37382e302f32342d3234203d3e203136353039.roa
File: 38352e3139332e37382e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: 8ibSY19O8V5ycSe73auuxPB6n3z86FH6HYh2fAUJuGc=
Subject key identifier: 11:45:81:E3:8C:88:C7:57:71:53:35:DE:2E:D6:60:34:A8:82:BB:B3
Certificate issuer: /CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
Certificate serial: 62B9B2805FAF8AD6DDD01B38C334EF5FFCDB3648
Authority key identifier: C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
Subject info access: rsync://0.sb/repo/sb/37/38352e3139332e37382e302f32342d3234203d3e203136353039.roa
Signing time: Tue 05 Dec 2023 05:54:07 +0000
ROA not before: Tue 05 Dec 2023 05:49:07 +0000
ROA not after: Tue 03 Dec 2024 05:54:07 +0000
asID: 16509
IP address blocks: 85.193.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl
rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b9:b2:80:5f:af:8a:d6:dd:d0:1b:38:c3:34:ef:5f:fc:db:36:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
Validity
Not Before: Dec 5 05:49:07 2023 GMT
Not After : Dec 3 05:54:07 2024 GMT
Subject: CN=114581E38C88C757715335DE2ED66034A882BBB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:39:d4:91:b4:85:40:f9:95:ed:67:2d:cf:
75:d1:83:f6:1c:4b:d3:f3:6b:23:65:96:5b:fb:71:
de:60:e8:d8:27:a5:90:c0:36:95:f2:ba:2c:44:1b:
ad:08:08:b9:6e:65:60:4e:94:7e:08:40:b4:0f:71:
a8:c4:ce:c7:d1:34:0b:a6:76:61:4b:bb:50:dc:cc:
15:a0:d7:8e:4f:f8:d0:f3:ca:5e:5c:aa:02:f5:8e:
e2:dd:3c:a7:0b:26:c1:13:a0:a7:b2:5d:2b:6b:d4:
3c:1e:16:59:1e:39:27:8f:7e:b6:62:fa:ef:f4:04:
c3:c3:b5:e0:b1:51:21:93:a8:35:e2:2c:78:21:ad:
79:e7:8a:80:b4:7e:02:29:ab:f6:ff:a3:00:7c:2d:
10:34:5c:d1:05:5e:da:a9:ce:47:4d:3a:7e:3d:69:
3d:c0:b8:4d:dc:38:1a:45:ba:42:8d:10:d5:54:73:
a6:48:21:3b:6e:c5:b7:c4:46:d1:6a:92:7e:03:14:
bf:88:fe:59:cf:ba:5d:e1:04:9b:9e:11:a7:32:16:
cc:15:03:3b:13:b8:86:9d:93:ad:23:0e:9f:43:e6:
1e:d4:2b:30:c5:83:e7:49:79:df:68:2f:54:fe:15:
a7:6e:71:34:16:f1:ef:97:15:00:f7:84:88:12:fa:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:45:81:E3:8C:88:C7:57:71:53:35:DE:2E:D6:60:34:A8:82:BB:B3
X509v3 Authority Key Identifier:
keyid:C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/37/38352e3139332e37382e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.78.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8a:6d:6c:bb:91:7b:c9:6d:67:36:da:6c:c2:ad:ff:4e:ee:
c7:4b:3c:62:9f:0c:44:65:b8:65:e2:a8:d6:20:43:f4:e8:6e:
5f:8c:a4:3b:3f:f7:a3:e0:99:11:e2:ad:ca:27:2c:d4:5c:d2:
ea:13:0b:53:65:5b:5b:17:3a:7a:b2:14:0d:06:e2:5f:87:92:
04:55:53:d8:f7:1c:ac:d3:04:c2:eb:58:91:bc:48:36:a7:b0:
b1:b9:63:b1:b1:3d:48:e5:e3:27:6b:cf:48:95:93:f5:7e:26:
12:f3:fb:cb:42:46:b5:3a:bd:f4:da:5a:ce:db:0c:77:8e:2d:
7b:9a:76:3c:b6:53:c1:01:18:2f:b2:24:d6:43:17:22:83:f9:
68:d1:30:02:4c:97:59:da:92:10:3d:6c:77:4c:6e:54:1b:4d:
2e:8e:7f:5d:92:ff:27:fe:c9:ce:7b:93:20:31:58:14:be:25:
cc:a9:0f:c2:fc:11:b1:88:7f:78:6c:05:74:51:8b:ee:57:ae:
27:bf:70:5f:a9:a0:7a:d7:fb:88:bc:22:57:f9:47:96:eb:c7:
ed:6d:98:4d:26:ad:78:5f:bd:38:76:af:2f:75:0b:91:66:5c:
7b:2c:6c:4b:c5:19:9b:dc:22:c1:81:1b:68:33:61:8b:52:7d:
cf:df:ae:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:02:05 2024 by rpki-client on console-ams.rpki-client.org