Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/37/38352e3139332e37382e302f32342d3234203d3e203136353039.roa
File: 38352e3139332e37382e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: VxApuIDEnwTqQ6WGnUzRodDciZZkhdWtDDb5ZPWEs7g=
Subject key identifier: 8D:9C:30:D5:1F:78:1F:1F:05:8F:5D:3F:78:81:DA:94:1C:7A:16:E5
Certificate issuer: /CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
Certificate serial: 7982F689408715CD176482BE7931B39C51164626
Authority key identifier: C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
Subject info access: rsync://0.sb/repo/sb/37/38352e3139332e37382e302f32342d3234203d3e203136353039.roa
Signing time: Tue 05 Nov 2024 06:51:47 +0000
ROA not before: Tue 05 Nov 2024 06:46:47 +0000
ROA not after: Tue 04 Nov 2025 06:51:47 +0000
asID: 16509
IP address blocks: 85.193.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl
rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:82:f6:89:40:87:15:cd:17:64:82:be:79:31:b3:9c:51:16:46:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
Validity
Not Before: Nov 5 06:46:47 2024 GMT
Not After : Nov 4 06:51:47 2025 GMT
Subject: CN=8D9C30D51F781F1F058F5D3F7881DA941C7A16E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:1f:e9:6f:2c:08:b2:f3:db:07:d6:10:cf:
13:15:f0:c2:e0:32:6e:36:91:e7:59:11:89:c1:ae:
62:ad:05:5b:47:20:be:69:62:e8:ae:63:6d:07:65:
3a:77:4e:97:58:66:a9:d2:69:52:39:d1:c6:f7:47:
78:9f:6a:57:7a:0d:9f:82:14:b3:0f:b9:42:9d:a7:
8a:92:c4:2d:31:14:fa:7c:5e:6c:af:62:bd:e6:1c:
cd:0f:63:fc:da:18:fc:30:16:db:6d:33:07:85:d4:
2b:61:2d:ed:37:a2:32:35:90:e9:b3:f1:5c:0b:a5:
4c:f6:bc:3c:3c:48:c4:7a:bf:e7:48:c2:5b:bf:f7:
a7:be:b2:65:17:2a:9a:c8:fd:59:53:2a:72:58:b4:
65:6e:76:79:e3:18:e5:3b:a5:c7:48:e0:8e:d7:f3:
39:6c:06:92:57:ac:c0:a8:50:e3:c9:6b:17:26:df:
af:45:e2:2a:7e:98:94:f2:59:e4:ea:6d:d0:c6:b0:
6e:6e:72:cc:5b:3b:42:f2:04:c5:2a:07:d3:bc:8b:
df:b8:86:45:bd:ea:77:d6:31:77:9d:64:8f:85:65:
39:10:95:ed:be:d8:ed:f7:14:e3:eb:a9:7c:dc:9f:
0e:f4:67:22:55:8a:ad:ca:67:57:d5:dc:61:55:d5:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9C:30:D5:1F:78:1F:1F:05:8F:5D:3F:78:81:DA:94:1C:7A:16:E5
X509v3 Authority Key Identifier:
keyid:C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/37/38352e3139332e37382e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b3:65:cd:5c:34:f5:90:df:bb:88:fa:c4:9c:bf:ba:c2:31:
b5:b9:58:2f:de:ed:80:58:80:68:1f:93:56:2c:77:7b:d0:ff:
8c:f0:96:4c:98:9a:bb:53:05:5e:2f:07:4e:58:b3:03:38:34:
9a:9f:ee:88:23:5f:fc:3d:71:26:66:de:1e:14:a7:91:16:98:
10:d5:5f:65:6d:0f:73:00:90:4e:32:1f:26:c5:47:8e:97:39:
f8:85:0d:b8:a3:5a:df:ef:b0:e8:9f:5e:5f:30:79:59:e3:38:
46:62:04:90:29:20:7e:80:28:f6:5b:44:1d:1f:68:37:9b:ed:
61:84:2e:e4:c1:35:db:ef:08:2b:ba:4b:dd:0a:59:12:31:e5:
89:ea:83:1f:a1:72:79:48:79:d1:92:8c:d9:8e:77:89:75:0d:
14:54:4a:33:ab:59:c4:3e:31:21:28:7f:a5:4a:d3:4a:70:b6:
47:61:34:1d:23:58:35:7d:03:62:90:e7:4c:91:b0:ea:8d:fa:
30:aa:68:39:2b:e9:dc:86:47:d0:c4:6a:dd:18:96:c2:35:53:
46:ea:c7:e3:d4:04:64:ef:fe:f7:6a:41:ed:f0:c5:19:95:11:
2d:21:cc:5f:5d:2d:e6:3d:ed:66:a3:42:21:a5:5d:75:61:57:
89:6f:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:08 2024 by rpki-client on console-ams.rpki-client.org