Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3234203d3e2031303330.roa
File: 3139322e3130392e3232382e302f32332d3234203d3e2031303330.roa (raw, json)
Hash identifier: IWuaCMlUKFKfqAvplpfWayIBJyyNeMnfjEvsVA6sEkE=
Subject key identifier: 18:B6:A3:FB:F7:BB:9C:D8:9E:56:16:29:67:88:04:E4:FF:B3:BA:76
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 566AA19F14031CFD462EF9F3E43DCC68E4394605
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3234203d3e2031303330.roa
Signing time: Thu 14 Aug 2025 13:52:41 +0000
ROA not before: Thu 14 Aug 2025 13:47:41 +0000
ROA not after: Thu 13 Aug 2026 13:52:41 +0000
asID: 1030
IP address blocks: 192.109.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:6a:a1:9f:14:03:1c:fd:46:2e:f9:f3:e4:3d:cc:68:e4:39:46:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Aug 14 13:47:41 2025 GMT
Not After : Aug 13 13:52:41 2026 GMT
Subject: CN=18B6A3FBF7BB9CD89E561629678804E4FFB3BA76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:98:f3:fb:41:0d:75:18:76:28:03:ab:20:
4e:c1:35:3c:b9:e0:cc:ce:e7:78:83:16:05:b7:b2:
54:7f:b7:bf:92:3b:d3:2c:a4:69:db:a6:a9:f4:82:
90:52:35:f6:12:be:66:f0:07:bb:25:5e:ce:65:be:
b2:4f:61:7e:a5:80:37:c5:f5:95:e0:e8:2c:a1:1e:
0e:bb:6e:8c:cc:ad:b9:cd:3b:3d:b3:a9:fc:65:ee:
0c:b3:50:b6:1b:10:3e:ed:b6:93:6d:01:19:b1:12:
dc:b3:3c:d4:90:51:92:1e:19:c3:0f:fa:93:b4:39:
be:bb:43:0b:4b:5a:51:63:0f:35:ad:d4:5b:e3:90:
a4:2b:29:09:8a:9c:ba:df:1d:02:49:fe:fb:51:3d:
0f:60:cb:f0:1b:19:a7:8a:95:9a:e5:fc:ed:c4:8a:
13:b4:24:c8:ec:d4:cc:10:bd:bc:4d:63:be:cb:a7:
c9:5d:c9:6e:cf:75:5a:f0:15:36:92:bb:6f:c2:a6:
e1:d6:93:fc:79:91:85:90:e6:90:51:fe:b8:0f:51:
56:97:98:d8:3a:5e:2a:a2:2a:a9:da:2c:c1:9a:b8:
f6:68:fa:54:8a:a7:ef:36:d7:73:b5:19:86:39:47:
7b:2e:24:93:ca:4b:32:81:a2:6d:cc:37:71:df:3b:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B6:A3:FB:F7:BB:9C:D8:9E:56:16:29:67:88:04:E4:FF:B3:BA:76
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3234203d3e2031303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.228.0/23
Signature Algorithm: sha256WithRSAEncryption
10:f3:72:be:47:12:ce:0e:ba:eb:3b:cb:62:4a:42:d2:31:be:
a8:80:34:8a:3b:16:05:99:38:b4:1e:70:2b:7d:f8:62:1b:5d:
83:bd:e1:af:44:b1:7f:06:f7:a3:63:fe:b4:3c:ea:a6:fe:a9:
e8:0a:dc:a3:9a:8e:61:a7:df:c6:f5:54:1f:59:42:08:92:82:
f7:e1:0a:50:08:15:a6:a0:03:12:29:33:d2:08:70:c3:b4:fb:
18:a2:46:8b:f9:c9:5f:a1:6e:40:81:6e:92:fe:64:6b:51:53:
5c:0b:7a:dd:b9:4d:a3:70:93:b2:11:0b:25:61:5c:ad:17:13:
a1:61:09:41:a4:10:30:15:c9:8e:3d:6e:dc:9a:1f:70:2c:7b:
01:20:d1:0f:65:22:75:9d:14:37:a4:c3:29:0e:9e:a5:1e:56:
e1:6b:ee:18:2f:bc:27:e6:2f:ed:f6:4a:45:f8:61:cc:84:5c:
70:e8:87:40:51:4e:c9:9c:46:e1:6d:cd:61:41:27:32:26:c3:
87:80:79:35:d8:cf:3d:77:23:27:77:32:82:2a:59:e8:57:64:
aa:3d:79:b5:a1:84:19:97:3e:94:bc:98:be:23:ad:0d:50:f7:
dd:3e:81:d9:b5:73:10:14:08:ed:fb:27:96:ab:f3:e2:22:2d:
90:91:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:45:51 2025 by rpki-client