Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2036323333.roa
File: 38392e3130362e3230372e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier: 1v24fnCR4WGXxXKvYh1dW2pfzQnU6JmuWRoacG5VM9g=
Subject key identifier: 53:01:50:4F:E3:AB:54:68:B6:67:A3:2D:64:C1:A0:DA:88:D0:25:C2
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 51AEE554A1B33B4219DE58BEDA4B1DEEC1BBD28D
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2036323333.roa
Signing time: Thu 14 Aug 2025 13:52:41 +0000
ROA not before: Thu 14 Aug 2025 13:47:41 +0000
ROA not after: Thu 13 Aug 2026 13:52:41 +0000
asID: 6233
IP address blocks: 89.106.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ae:e5:54:a1:b3:3b:42:19:de:58:be:da:4b:1d:ee:c1:bb:d2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Aug 14 13:47:41 2025 GMT
Not After : Aug 13 13:52:41 2026 GMT
Subject: CN=5301504FE3AB5468B667A32D64C1A0DA88D025C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:8b:12:a5:1c:35:39:11:e5:dc:ae:b7:ac:
be:eb:28:04:97:3c:7b:a0:3f:a5:4a:9c:31:b3:82:
6c:50:ed:4e:73:69:b4:bc:a1:82:48:03:8e:e7:be:
4e:be:44:8e:46:0f:16:c7:9f:ec:f0:bd:9c:37:01:
eb:a5:64:9d:53:6b:78:56:b8:be:0e:2e:33:11:aa:
c1:84:c2:ab:9e:b6:f7:a2:bb:62:8e:e6:38:c2:fe:
03:b0:2b:a2:d7:54:f9:30:a4:9f:1f:65:52:9e:28:
28:eb:0b:68:89:48:50:f7:34:8e:5d:2b:f0:e5:30:
89:01:e2:d3:b0:ef:50:68:db:3f:f7:63:67:1f:ac:
c2:c7:c0:df:15:b0:60:a9:92:a9:0a:d5:e9:4a:37:
4d:1d:02:32:ee:e9:21:ac:f4:71:ec:ea:95:9b:71:
ea:a5:96:01:fd:94:2b:70:42:18:67:a4:93:ae:d3:
69:53:4a:04:e6:32:1c:ae:65:6e:fa:2c:ce:a0:e2:
65:17:9c:69:fa:20:59:0c:8e:d9:b6:1f:f6:8b:62:
5f:79:f9:2d:ab:3b:bc:8f:1a:1d:21:3c:d8:b3:da:
53:81:45:f9:df:ce:4e:d4:a5:ba:d9:b3:12:fb:19:
92:ff:eb:14:28:68:e0:e4:5b:40:b8:64:0c:f3:b4:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:01:50:4F:E3:AB:54:68:B6:67:A3:2D:64:C1:A0:DA:88:D0:25:C2
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.207.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f6:37:85:30:42:e7:00:b2:6b:b1:3d:31:eb:4d:e7:c2:a4:
3d:74:83:98:dc:3f:a4:ae:99:e3:bd:84:f3:ef:e8:56:4b:9c:
04:6e:c4:82:79:bd:a7:f8:44:dd:0a:3d:4f:a3:16:47:de:7c:
6d:6f:95:39:fb:9d:28:0a:7a:ce:68:e1:8a:74:be:2c:53:17:
ba:46:b5:17:22:23:5a:ee:3c:b5:3e:3a:9f:c4:85:c8:a4:85:
81:89:79:22:aa:15:e2:c4:e5:03:a9:db:3c:bd:dd:10:5f:55:
41:64:8a:5d:2d:b5:2b:0e:11:57:54:77:05:61:9d:b2:a6:56:
9f:10:0a:68:92:97:a5:5b:06:d7:fb:fb:bf:fe:86:ac:65:4c:
49:d2:1a:a1:87:24:d7:7f:e4:c2:48:65:e1:22:98:03:f3:d7:
b0:e5:7b:c5:e7:79:2f:2e:5d:2a:a2:91:71:ff:a6:f7:ef:d0:
93:96:17:17:9a:8b:c3:e0:3c:6e:9d:af:08:8a:80:79:54:aa:
bd:77:83:82:fd:ce:54:b3:4f:80:c8:b7:08:7f:47:aa:bf:5c:
8e:b7:ea:32:72:a7:02:81:e2:0c:30:58:8c:d1:2c:92:aa:39:
fb:1b:e9:5a:32:18:a8:28:c5:0f:e7:e1:e1:22:03:2c:f3:a5:
83:b1:1a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:36 2025 by rpki-client