Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/3134362e31392e3134352e302f32342d3234203d3e2038383838.roa
File: 3134362e31392e3134352e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: fudf0Tk2AERFb92w9HhJhitXCoCMum1lphDOYpO2nnA=
Subject key identifier: 18:F9:49:95:70:7A:F6:9E:AF:C9:D3:94:7E:2D:F3:79:08:75:59:A5
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 48ABE9A2785F6948E02798B91229BCF0A2FC60A3
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/3134362e31392e3134352e302f32342d3234203d3e2038383838.roa
Signing time: Sat 20 Sep 2025 16:52:47 +0000
ROA not before: Sat 20 Sep 2025 16:47:47 +0000
ROA not after: Sat 19 Sep 2026 16:52:47 +0000
asID: 8888
IP address blocks: 146.19.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ab:e9:a2:78:5f:69:48:e0:27:98:b9:12:29:bc:f0:a2:fc:60:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Sep 20 16:47:47 2025 GMT
Not After : Sep 19 16:52:47 2026 GMT
Subject: CN=18F94995707AF69EAFC9D3947E2DF379087559A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:34:2d:6d:44:e4:d8:83:3b:68:73:ef:a7:
b7:84:f0:fd:40:9f:d4:bd:d4:ad:be:73:70:18:1e:
43:ca:6e:77:40:aa:77:d5:71:90:3c:58:e0:39:ba:
e1:4a:ea:b9:ba:89:d2:7b:7e:28:59:33:03:34:e0:
8f:e6:b9:67:fd:99:a3:6d:e4:af:5f:fa:64:fc:b9:
f1:2e:21:91:7c:d7:e0:2b:b5:e2:1d:94:36:09:75:
9e:98:a0:03:ea:cb:9b:29:62:d8:db:67:e7:b3:19:
37:ff:05:b9:4b:ca:98:8c:90:76:be:74:da:5b:22:
ff:f2:de:ce:8e:0c:b1:58:28:0e:15:50:7c:25:8e:
72:3f:57:b0:af:d2:66:29:ae:7d:dd:c7:00:d8:28:
2b:b1:cf:8c:9a:8a:33:94:cd:69:5c:35:cd:df:24:
9b:78:10:07:72:42:a3:ab:a8:04:8e:b0:41:90:c5:
bb:a5:d3:ad:51:47:b3:01:d9:ae:d7:29:8d:a7:90:
47:fe:6e:60:7d:f6:78:b1:b6:4c:2b:ac:e3:71:c4:
e9:b3:00:b5:49:20:ca:c1:20:1e:e1:bd:6e:fc:2e:
a5:bd:33:60:d5:14:ee:c6:7f:b5:81:5c:6b:fe:34:
73:c4:60:4f:b5:fa:99:c7:ed:14:85:1f:17:a0:4f:
31:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:49:95:70:7A:F6:9E:AF:C9:D3:94:7E:2D:F3:79:08:75:59:A5
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/3134362e31392e3134352e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.145.0/24
Signature Algorithm: sha256WithRSAEncryption
66:46:8e:6f:1d:11:12:db:0f:30:b1:8f:eb:97:52:74:b7:d0:
48:f3:7c:86:17:6e:46:dc:12:ea:4c:c3:14:81:77:92:63:c8:
b7:60:94:0e:13:4f:53:96:25:ee:45:a4:24:56:47:43:f6:16:
c5:08:5f:b7:30:82:18:c8:28:95:92:69:b2:d2:a6:f3:7f:b3:
90:6a:8c:6e:a9:56:c1:a2:43:cf:b5:ac:6e:b3:26:cd:d6:18:
f0:06:d1:08:61:ad:f4:5d:cb:24:ab:e2:2b:aa:50:8c:6c:9c:
cc:0a:a7:bf:50:2e:82:39:ed:7f:8c:97:98:de:c6:c8:d6:c8:
93:80:be:b3:f3:80:9c:0d:79:8b:07:d9:72:f8:08:d5:43:fa:
f8:c0:5a:ec:26:33:fd:0a:94:62:b2:1f:73:dd:99:5c:19:83:
52:9b:e1:4b:74:5e:a6:fd:b7:d0:79:ce:99:2c:3f:3c:45:fb:
e5:08:e2:5e:60:56:ea:0c:87:11:82:ca:47:ad:1c:f6:a5:ed:
f6:bf:f6:b2:8d:77:f8:fe:96:e0:d4:8d:91:a7:cd:e2:64:b8:
5f:96:60:94:f4:c1:06:5c:0c:1a:d4:3b:cb:a9:b8:cf:2b:16:
33:77:ff:18:e7:1f:8b:03:d1:a5:fd:14:d5:7c:67:fe:e3:8e:
21:38:d4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:37:12 2025 by rpki-client