Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/326131313a383038333a343a3a2f34382d3438203d3e20323132353132.roa
File: 326131313a383038333a343a3a2f34382d3438203d3e20323132353132.roa (raw, json)
Hash identifier: rA+VWBlNmMTlI1MqkG6iCSfZp+G+euQmUo4P37LAf6I=
Subject key identifier: 48:32:1C:7D:F6:3F:7E:07:E4:C8:6A:96:9A:4C:2E:63:5E:FB:AD:36
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 298DF6CB972727246F7619D9F51442D6FD044C13
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/326131313a383038333a343a3a2f34382d3438203d3e20323132353132.roa
Signing time: Wed 23 Apr 2025 12:03:00 +0000
ROA not before: Wed 23 Apr 2025 11:58:00 +0000
ROA not after: Wed 22 Apr 2026 12:03:00 +0000
asID: 212512
IP address blocks: 2a11:8083:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8d:f6:cb:97:27:27:24:6f:76:19:d9:f5:14:42:d6:fd:04:4c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Apr 23 11:58:00 2025 GMT
Not After : Apr 22 12:03:00 2026 GMT
Subject: CN=48321C7DF63F7E07E4C86A969A4C2E635EFBAD36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:e2:16:9c:a9:86:9c:f2:38:20:92:49:ef:
dd:52:ed:b4:ac:31:99:84:af:8e:f1:fc:df:0e:78:
c9:47:9f:8f:a8:d9:a6:ad:01:fd:66:8b:1d:0a:11:
40:a0:57:18:8b:5d:20:85:5f:4c:d2:bc:b9:51:04:
b1:e3:22:ab:40:66:d1:bb:5d:ea:e4:4f:e1:87:f5:
0b:e0:9e:18:ca:74:2b:07:07:24:28:a7:23:7b:62:
68:e5:aa:71:d2:18:79:97:bc:2e:65:97:e9:a2:bc:
30:5a:8d:7a:63:37:ac:63:d0:5b:cf:6c:8f:bb:f8:
fd:e7:14:85:14:20:d6:9e:2d:e2:e8:d9:eb:de:c0:
73:5a:de:1a:ee:9e:35:37:06:f8:51:dc:47:d4:07:
95:c5:6e:ae:be:da:4d:86:37:90:d9:62:68:cd:ab:
7f:76:84:fe:bd:ef:71:66:f0:87:2f:c9:d5:03:43:
a8:b4:77:9a:5b:9a:d1:49:cb:14:63:ea:8f:d8:b5:
2a:bc:af:ad:dd:70:d7:99:3d:08:30:fc:bb:11:ae:
89:a0:83:eb:4d:9b:74:8a:37:d4:b5:fd:ab:a6:6f:
ee:68:65:7f:5d:4f:40:b2:d0:07:ed:8a:4b:df:03:
d7:54:9b:e0:8e:3b:ee:52:90:86:32:6c:18:53:0c:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:32:1C:7D:F6:3F:7E:07:E4:C8:6A:96:9A:4C:2E:63:5E:FB:AD:36
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a383038333a343a3a2f34382d3438203d3e20323132353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8083:4::/48
Signature Algorithm: sha256WithRSAEncryption
25:73:9e:eb:95:23:0a:92:cc:a1:0f:fd:5d:3a:04:f2:84:f2:
99:b1:75:7f:58:05:9b:77:4e:62:2e:90:b6:6d:f4:0e:49:9f:
d3:e5:c7:c9:aa:b1:25:d7:9e:94:ec:7f:f9:c3:d3:5e:69:8b:
2c:cb:fb:eb:f7:e4:9b:be:6d:11:ff:4d:1d:e3:d8:1e:19:4d:
4f:b2:86:22:ab:28:96:92:e4:c1:0e:55:16:35:f4:44:b3:b1:
02:91:39:71:0e:2e:c9:9f:45:53:41:4b:ea:ac:9f:46:45:55:
8e:f9:29:5f:09:a5:06:e6:89:96:85:8a:6c:5f:5e:f9:f3:75:
54:a9:90:e0:c3:33:07:fd:df:48:12:25:2c:17:1c:a6:a6:50:
f3:be:16:32:ca:65:fd:52:67:5f:66:1f:b8:28:20:fe:33:10:
74:84:4c:7f:e3:e8:c5:9e:b4:e0:f0:9d:e7:0d:26:e9:eb:5e:
e0:d0:e8:bf:8c:0b:d6:f9:3a:39:71:47:44:d6:5e:1c:a2:5d:
d6:f4:3d:e0:1a:ab:9a:36:8a:56:6c:47:e2:fd:f7:86:55:cb:
0e:16:87:58:78:15:af:17:76:e6:d3:ef:dc:8b:7b:20:78:16:
c8:99:b8:74:d4:1f:04:66:db:00:bf:9c:9b:df:01:c1:02:9c:
d9:bf:b8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:14:23 2025 by rpki-client