Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2038383838.roa
File: 38392e3130362e3230372e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: +x/pZBg0TrhVxm83S1ATI+l+++Ea+Zqb7ltQ4UCk/Uw=
Subject key identifier: 75:AA:C5:A3:EF:58:1F:CE:C4:58:49:8A:35:C9:EE:57:41:8A:62:B4
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 77A87E130DFC9947BDD4FC8C679D2E6A16120179
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2038383838.roa
Signing time: Thu 14 Aug 2025 13:52:41 +0000
ROA not before: Thu 14 Aug 2025 13:47:41 +0000
ROA not after: Thu 13 Aug 2026 13:52:41 +0000
asID: 8888
IP address blocks: 89.106.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a8:7e:13:0d:fc:99:47:bd:d4:fc:8c:67:9d:2e:6a:16:12:01:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Aug 14 13:47:41 2025 GMT
Not After : Aug 13 13:52:41 2026 GMT
Subject: CN=75AAC5A3EF581FCEC458498A35C9EE57418A62B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:82:6e:76:ae:a7:d0:00:a8:71:a0:f2:33:
46:87:b2:82:f4:e3:28:79:ed:73:0e:e0:66:d3:07:
e1:6f:96:1e:9c:36:b0:44:82:3a:1c:c4:56:13:71:
e4:b8:21:c5:d0:e1:26:c7:b0:6b:2f:6e:00:bb:c6:
92:4c:5a:55:9c:02:a9:63:dd:99:d4:6e:ff:24:d6:
31:1c:9b:a9:50:85:5f:b3:f7:54:29:94:ba:30:5f:
98:da:77:42:40:3e:fa:2c:68:ed:ca:cb:e4:ce:e6:
39:41:e6:60:ac:ff:43:0c:a3:77:2a:2c:e2:28:2a:
b1:22:84:cc:26:e0:46:66:de:34:bf:63:fb:c0:25:
fb:82:7e:77:52:ad:b2:2e:cf:0c:27:83:98:c8:89:
51:38:14:47:16:1c:e0:21:68:56:ea:39:8b:5f:21:
b8:bb:3c:e1:48:fa:66:28:6a:ba:94:fb:3d:24:31:
e9:03:b0:c0:f7:4d:ef:81:ed:dc:d0:ed:ae:fb:fa:
20:fb:3f:97:f8:0f:65:f3:60:0e:38:0f:7a:cc:80:
f0:61:8a:ee:55:64:2f:aa:f7:9a:c1:23:d0:87:a6:
ff:7c:73:c5:ad:2b:19:fb:7b:1c:c6:4f:4c:a2:86:
cc:37:f8:42:f8:b7:a3:a2:f0:6a:bc:87:47:b9:d9:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AA:C5:A3:EF:58:1F:CE:C4:58:49:8A:35:C9:EE:57:41:8A:62:B4
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:9d:b0:40:9f:53:d5:60:5d:61:62:9b:76:3a:05:f0:be:c7:
47:21:ee:62:81:d2:5f:57:58:e9:78:a4:74:a3:a3:c3:41:1d:
28:eb:72:b4:14:62:1b:13:82:ac:62:94:94:f4:61:cb:65:08:
43:64:5b:f5:dd:06:90:36:65:87:0b:3f:a4:03:36:c8:60:fb:
50:ea:30:88:c1:24:e2:07:77:4c:99:0e:d8:c1:27:ce:03:67:
6a:05:73:aa:3d:94:36:0d:d1:69:e5:1b:d3:88:77:22:7c:68:
40:39:ca:27:02:fa:91:2d:97:a1:5c:b1:a1:16:cb:1b:73:0f:
97:16:cf:b1:6d:84:47:e5:9a:c7:f9:ea:49:e8:8f:6e:65:be:
b5:c7:61:41:7c:dd:74:2c:56:39:95:a6:0b:fa:8f:ae:c4:92:
ca:eb:1c:fc:38:e0:08:92:46:36:40:b0:42:24:be:9b:bf:83:
07:5b:3a:1b:61:a0:97:5d:c8:88:87:6e:55:9e:8f:f8:b0:b5:
35:be:ec:cc:7b:ce:58:af:78:2b:39:6e:48:e3:e0:b9:46:65:
41:b9:ea:34:88:0d:7e:4f:4e:2f:64:d9:fb:d8:e6:d6:14:54:
e1:bd:4f:88:20:6d:cd:b5:2b:7d:cc:bd:df:92:38:f9:b0:db:
5d:3c:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:05:38 2025 by rpki-client