Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3234203d3e2033323134.roa
File: 3139322e3130392e3232382e302f32332d3234203d3e2033323134.roa (raw, json)
Hash identifier: n6+COn+FcOAorb4s3dJKTFRZAbaSOwMCmUq0X6fPsuA=
Subject key identifier: AB:21:CF:33:89:AC:8B:07:09:E2:52:3D:54:AC:19:15:AB:1A:33:7D
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 2327D0FA78C85BED828CC8C28A1BDC430DB27279
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3234203d3e2033323134.roa
Signing time: Thu 14 Aug 2025 13:52:41 +0000
ROA not before: Thu 14 Aug 2025 13:47:41 +0000
ROA not after: Thu 13 Aug 2026 13:52:41 +0000
asID: 3214
IP address blocks: 192.109.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:27:d0:fa:78:c8:5b:ed:82:8c:c8:c2:8a:1b:dc:43:0d:b2:72:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Aug 14 13:47:41 2025 GMT
Not After : Aug 13 13:52:41 2026 GMT
Subject: CN=AB21CF3389AC8B0709E2523D54AC1915AB1A337D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:e7:d5:24:d0:53:92:8a:93:d7:f7:e0:04:
54:a7:b3:5c:64:a9:fc:12:7f:d0:81:0d:29:84:0d:
a8:18:47:e0:7c:1c:28:41:67:4a:30:6c:3c:c4:ab:
17:68:23:ea:fb:62:cc:43:9a:4b:d3:53:6d:4c:2a:
97:0b:ad:5d:b2:16:54:4d:d3:29:c8:45:27:b7:6e:
a8:e0:27:ae:49:78:ad:6a:f0:85:a5:2e:a5:7a:8d:
20:13:a4:05:fa:70:b1:ec:9e:78:59:a7:3f:4e:a7:
4c:c4:79:63:0c:48:37:80:f4:97:97:c7:04:b6:30:
67:83:18:37:3d:e7:0b:db:97:68:f0:fe:4a:14:7f:
75:0c:64:b2:c5:6c:13:2c:e9:e2:00:b3:b4:9d:70:
fe:f5:19:7c:07:46:b3:a7:14:01:69:47:84:2c:d1:
a7:7a:5e:21:61:20:bf:54:d7:28:c1:e4:cf:c8:1d:
a5:b7:d7:51:fd:b3:b8:ea:33:71:e1:fe:82:83:73:
f3:cd:25:f1:9c:a9:1b:83:45:6f:ae:45:88:da:d7:
e1:f5:f2:49:aa:ae:06:3b:ac:a5:4f:b6:b4:93:d2:
6d:22:2d:98:3f:df:72:c7:b4:bb:f3:96:db:83:b3:
47:7a:1a:49:05:f5:9f:62:f8:ae:ef:96:d8:f8:cb:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:21:CF:33:89:AC:8B:07:09:E2:52:3D:54:AC:19:15:AB:1A:33:7D
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3234203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.228.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:53:f8:04:dc:48:fc:8d:3c:88:5f:0f:79:9f:3a:a0:c8:47:
32:1c:69:79:15:c0:f1:d6:2f:22:38:4d:6b:27:64:61:53:9d:
1d:7c:43:90:b0:4c:a9:44:2d:a4:6b:16:79:2e:a1:1e:26:6c:
eb:14:ca:ce:28:49:89:06:77:e5:95:24:3d:fe:01:38:20:92:
19:ad:96:5f:e9:a6:0a:e1:3a:61:8b:87:22:07:bd:b1:4a:97:
5a:d3:ea:02:41:d7:9e:c4:95:1b:7f:01:8f:e1:93:87:7e:f6:
d1:16:8a:02:60:aa:18:ba:af:25:51:0b:d2:97:8d:de:4f:d3:
e9:4e:09:ec:3d:24:e7:71:26:91:69:af:fc:53:2a:ee:15:de:
0f:6b:ac:83:0c:de:05:65:d3:e4:88:3c:a9:5c:fa:58:0f:6e:
3c:e8:d9:59:3f:c8:da:97:31:86:ca:57:01:38:d6:37:8e:fd:
53:12:a6:18:ce:f4:38:04:f6:e2:bc:dc:19:f3:bc:bd:43:17:
ca:ef:ec:dc:03:1e:08:79:2b:44:73:c9:fd:2b:39:ee:4f:2c:
e4:3b:8b:e4:e4:1d:b6:b7:90:d6:f0:ce:91:1b:2a:9f:c1:c4:
fe:97:c8:88:9a:b5:49:2b:bb:2b:cc:c6:42:eb:a9:3a:ec:09:
bc:14:63:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:56 2025 by rpki-client