Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3332203d3e2033323134.roa
File: 3139322e3130392e3232382e302f32332d3332203d3e2033323134.roa (raw, json)
Hash identifier: r8NT2TeBUNEER1TfdTTAbJARc4y5zGY40ebDwG/jO58=
Subject key identifier: 23:92:87:97:BA:81:02:A3:78:30:F7:2D:83:B1:0E:62:40:85:3A:53
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 0C3D8B2FC45E6D88F149DEF9A0F0213B2E0E3EF3
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3332203d3e2033323134.roa
Signing time: Wed 03 Sep 2025 09:52:43 +0000
ROA not before: Wed 03 Sep 2025 09:47:43 +0000
ROA not after: Wed 02 Sep 2026 09:52:43 +0000
asID: 3214
IP address blocks: 192.109.228.0/23 maxlen: 32
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3d:8b:2f:c4:5e:6d:88:f1:49:de:f9:a0:f0:21:3b:2e:0e:3e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Sep 3 09:47:43 2025 GMT
Not After : Sep 2 09:52:43 2026 GMT
Subject: CN=23928797BA8102A37830F72D83B10E6240853A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:3f:3e:b1:10:24:e4:7e:16:6f:d5:9a:63:
56:c1:63:25:ed:ab:cf:ff:da:48:9b:95:5a:c3:6b:
e1:1b:f2:29:53:7f:34:2b:49:70:0b:5a:5f:a9:e9:
94:54:ed:9b:d0:6d:55:5a:3b:24:a3:c1:54:13:ad:
95:17:48:92:81:cb:88:9d:40:c4:f7:cd:5b:1d:62:
ac:1a:9f:f6:41:a5:1f:81:38:c7:50:1a:3e:12:89:
60:3a:51:a5:f9:f6:63:f8:da:b0:75:97:46:23:0a:
a7:2a:97:8e:18:d2:01:ef:a3:a5:74:b6:2f:c1:a2:
e7:24:6c:0f:c5:ff:7e:40:b6:07:3e:dc:6d:21:e8:
da:ce:80:7a:f9:54:e5:6f:1b:7a:60:eb:99:a8:b0:
49:1c:d2:21:a0:4c:71:3e:8d:59:b2:cb:ba:fc:2c:
73:be:57:80:30:e2:1e:cb:3e:42:f5:56:4d:86:f0:
ca:da:ee:e1:b4:33:7f:81:3c:9b:c4:db:54:ab:5a:
10:8f:a0:4c:0f:7a:e0:6d:8d:66:25:bb:c7:23:97:
94:8e:f7:1c:67:87:72:67:81:b7:a3:ed:50:ba:c1:
02:3d:ee:f3:fa:5f:f0:99:90:87:8b:63:ca:b4:2a:
0f:a9:ed:08:b8:15:1b:a7:c4:ea:8c:de:c9:67:7b:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:92:87:97:BA:81:02:A3:78:30:F7:2D:83:B1:0E:62:40:85:3A:53
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32332d3332203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.228.0/23
Signature Algorithm: sha256WithRSAEncryption
44:fc:c0:7b:3e:b6:27:1c:75:46:df:d5:ec:2a:2b:4c:ff:39:
24:03:3e:73:7d:b8:8c:7a:3e:2c:d9:f2:ba:74:af:67:d8:d5:
42:95:93:29:df:ab:ce:ca:b3:b1:08:19:11:ea:e4:92:da:79:
10:f3:f9:65:89:1b:cb:a1:07:0f:fd:67:07:fe:b4:d9:84:8f:
13:41:b9:b2:9d:fe:d6:8e:ad:c0:26:63:0f:32:bb:7a:d4:97:
ab:5a:02:82:c8:62:8d:fe:be:38:3f:d6:cc:6f:59:ca:6a:39:
88:e9:33:83:5a:e0:22:93:5a:89:73:4f:4a:59:5d:69:23:97:
12:02:60:d7:45:a4:b2:bd:c8:17:08:c0:59:05:49:2a:6b:72:
14:94:78:fa:2e:de:7f:16:12:66:9f:c2:41:06:1d:47:ab:da:
00:b6:8f:3f:18:d8:c1:80:9c:f3:81:70:b3:da:3a:e6:08:22:
a8:18:5e:92:c6:28:17:7e:f7:39:71:59:26:1c:1d:73:b6:c4:
99:6c:01:3e:e7:98:d1:c9:67:cc:7d:e1:22:a8:b5:09:eb:ba:
b7:af:91:d6:46:53:61:e9:7f:f8:08:c3:89:79:97:41:a4:65:
62:7b:ec:64:bd:74:8c:7b:a8:ea:78:e0:ce:a0:6c:9f:0f:92:
00:4d:b1:ed
-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIUDD2LL8RebYjxSd75oPAhOy4OPvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYxYzYxNjM2NGI4OTY1OWVkOWYxOGNiMGFmNzc0MjA0
MzdjYzdkYTAeFw0yNTA5MDMwOTQ3NDNaFw0yNjA5MDIwOTUyNDNaMDMxMTAvBgNV
BAMTKDIzOTI4Nzk3QkE4MTAyQTM3ODMwRjcyRDgzQjEwRTYyNDA4NTNBNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZmj8+sRAk5H4Wb9WaY1bBYyXt
q8//2kiblVrDa+Eb8ilTfzQrSXALWl+p6ZRU7ZvQbVVaOySjwVQTrZUXSJKBy4id
QMT3zVsdYqwan/ZBpR+BOMdQGj4SiWA6UaX59mP42rB1l0YjCqcql44Y0gHvo6V0
ti/BouckbA/F/35Atgc+3G0h6NrOgHr5VOVvG3pg65mosEkc0iGgTHE+jVmyy7r8
LHO+V4Aw4h7LPkL1Vk2G8Mra7uG0M3+BPJvE21SrWhCPoEwPeuBtjWYlu8cjl5SO
9xxnh3Jngbej7VC6wQI97vP6X/CZkIeLY8q0Kg+p7Qi4FRunxOqM3slne2g/AgMB
AAGjggG8MIIBuDAdBgNVHQ4EFgQUI5KHl7qBAqN4MPctg7EOYkCFOlMwHwYDVR0j
BBgwFoAUdhxhY2S4llntnxjLCvd0IEN8x9owDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIxLzc2MUM2MTYzNjRC
ODk2NTlFRDlGMThDQjBBRjc3NDIwNDM3Q0M3REEuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kaHhoWTJTNGxsbnRueGpMQ3ZkMElFTjh4OW8uY2VyMG4GCCsGAQUF
BwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjEvMzEz
OTMyMmUzMTMwMzkyZTMyMzIzODJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMzMzIz
MTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBwG3kMA0GCSqGSIb3DQEBCwUAA4IBAQBE/MB7PrYnHHVG
39XsKitM/zkkAz5zfbiMej4s2fK6dK9n2NVClZMp36vOyrOxCBkR6uSS2nkQ8/ll
iRvLoQcP/WcH/rTZhI8TQbmynf7Wjq3AJmMPMrt61JerWgKCyGKN/r44P9bMb1nK
ajmI6TODWuAik1qJc09KWV1pI5cSAmDXRaSyvcgXCMBZBUkqa3IUlHj6Lt5/FhJm
n8JBBh1Hq9oAto8/GNjBgJzzgXCz2jrmCCKoGF6SxigXfvc5cVkmHB1ztsSZbAE+
55jRyWfMfeEiqLUJ67q3r5HWRlNh6X/4CMOJeZdBpGVie+xkvXSMe6jqeODOoGyf
D5IATbHt
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:28 2025 by rpki-client