Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3332203d3e2033323134.roa
File: 38392e3130362e3230372e302f32342d3332203d3e2033323134.roa (raw, json)
Hash identifier: cWOcabFavWjkySavPrplmzMPliOfCilJfdwcGa3xpLc=
Subject key identifier: CC:7C:A2:FC:4E:33:DE:FB:C8:92:A9:C8:2D:27:08:BF:E8:6E:F4:E0
Certificate issuer: /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial: 158F0F8E4CBB39F44DC5CA8235AA9E65A00D4D7A
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access: rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3332203d3e2033323134.roa
Signing time: Wed 03 Sep 2025 09:52:43 +0000
ROA not before: Wed 03 Sep 2025 09:47:43 +0000
ROA not after: Wed 02 Sep 2026 09:52:43 +0000
asID: 3214
IP address blocks: 89.106.207.0/24 maxlen: 32
Validation: OK
Signature path: rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:8f:0f:8e:4c:bb:39:f4:4d:c5:ca:82:35:aa:9e:65:a0:0d:4d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
Validity
Not Before: Sep 3 09:47:43 2025 GMT
Not After : Sep 2 09:52:43 2026 GMT
Subject: CN=CC7CA2FC4E33DEFBC892A9C82D2708BFE86EF4E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:92:49:9e:e2:fe:c7:17:29:c5:9d:37:6a:
b2:ec:b0:bb:6b:08:b6:d3:e4:ff:f5:cc:ba:c6:bf:
03:ec:e1:d8:54:42:fa:1a:4a:c1:cc:92:66:09:02:
58:38:ce:4d:74:30:cb:e6:c7:37:86:3b:45:e7:ac:
e8:2e:aa:39:63:c9:af:32:d0:b1:f2:91:18:bc:86:
c0:ba:85:2d:a9:7a:f5:52:70:98:da:9f:3e:91:4f:
55:9d:f1:1a:12:e7:a6:cb:a7:39:4f:b0:c5:a8:00:
84:f5:cc:92:1d:e0:b4:e6:1f:de:6b:cc:d7:84:06:
10:8b:9f:1d:c1:7b:7f:fb:73:5e:b4:70:94:21:9b:
c8:2c:a6:97:d3:7a:ba:b5:a4:c5:83:a5:d2:dd:b3:
2d:72:2b:7a:55:03:0a:1a:43:cf:d2:14:3d:f4:2a:
94:5e:69:5c:95:de:48:7a:2d:45:a7:a9:49:da:54:
ca:e1:2f:4e:b2:ab:10:5a:80:6a:0c:80:31:83:60:
9f:d2:b7:36:17:e9:a0:d2:e0:7a:d5:89:5c:8e:88:
ff:c1:20:12:51:d5:25:22:62:c0:ad:f1:6b:d1:b4:
6c:1f:46:e8:ec:b9:d9:1d:92:9c:f5:57:f9:57:47:
98:f4:e7:32:e1:53:f4:74:ab:5f:8c:fb:b6:6e:6a:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7C:A2:FC:4E:33:DE:FB:C8:92:A9:C8:2D:27:08:BF:E8:6E:F4:E0
X509v3 Authority Key Identifier:
keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3332203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.207.0/24
Signature Algorithm: sha256WithRSAEncryption
17:58:fd:0a:65:fc:ad:85:f4:b3:21:8d:79:c3:7b:c5:ac:ee:
71:fc:f7:c2:58:73:31:8f:d1:d9:3f:47:e9:c4:86:aa:46:e5:
b9:4d:e8:d4:c2:b0:bd:aa:80:0a:cd:a5:7c:9c:44:ce:e7:87:
e7:a4:b2:56:7e:29:cd:ca:a2:40:ce:ca:e7:15:95:2c:72:7c:
92:91:f0:6a:f1:33:5e:42:3f:9b:67:7f:8d:6b:c4:f7:71:d2:
6a:23:9f:c1:2f:0e:58:bf:78:47:ed:79:bb:a5:6c:0b:35:b6:
77:1b:d3:99:6c:1f:cb:38:30:a9:ac:56:ce:f0:9a:94:4a:5c:
59:8d:13:4a:a3:5f:88:09:ef:26:65:15:5b:b9:93:e1:45:53:
1b:af:77:b0:f8:d2:bf:3c:fc:c1:5c:b9:32:db:15:16:b9:b3:
1a:c7:17:56:57:1d:f5:f8:17:e1:5c:1e:bb:47:97:f4:34:a1:
18:7a:4a:d4:56:4c:a4:21:fe:91:ac:6a:29:61:e7:d8:44:c3:
e5:4f:3a:56:c0:48:19:a8:f2:b0:76:50:bb:2a:54:36:e6:b6:
43:bb:76:35:0a:97:3f:61:fc:3c:38:5d:48:e0:80:aa:06:93:
81:8e:42:37:a7:44:3b:52:88:6b:73:b3:50:71:bb:d7:05:40:
58:ff:c0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:35 2025 by rpki-client