Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/sbo_Rfr7LvOFnblqE0TKGsqvDlM.roa
File: sbo_Rfr7LvOFnblqE0TKGsqvDlM.roa (raw, json)
Hash identifier: API8ZHFuiC2OgQkUrj3aT704MzhdQz/qc006d3u5n3s=
Subject key identifier: B1:BA:3F:45:FA:FB:2E:F3:85:9D:B9:6A:13:44:CA:1A:CA:AF:0E:53
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01977DBD77988F48DBA83B59D8E550E14E83
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/sbo_Rfr7LvOFnblqE0TKGsqvDlM.roa
Signing time: Tue 17 Jun 2025 11:54:18 +0000
ROA not before: Tue 17 Jun 2025 11:54:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206535
IP address blocks: 2a13:c444::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:bd:77:98:8f:48:db:a8:3b:59:d8:e5:50:e1:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 17 11:54:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1ba3f45fafb2ef3859db96a1344ca1acaaf0e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:1a:f0:84:47:6f:4a:ea:b5:9c:a6:74:7f:
6a:e9:30:0e:6a:48:0d:0e:ab:af:4c:6f:d3:df:45:
30:09:9c:4a:e6:4e:88:b4:bf:14:bf:ac:fe:82:54:
dc:f7:e0:3f:0b:cc:6e:18:97:e5:db:5f:f4:f4:f0:
45:93:52:39:44:03:98:bd:b7:4a:f6:f6:25:92:3e:
d0:bc:e3:d3:18:ee:cc:8f:ac:88:74:f4:52:89:d6:
b4:95:a7:97:7f:ac:4c:8c:48:7c:69:de:b0:d7:9f:
01:7b:25:95:bd:6b:2a:1e:09:f2:04:f1:7a:58:1e:
38:33:6b:ec:18:74:f3:77:57:84:af:1d:b3:1a:87:
a8:a4:2b:aa:45:c2:b4:30:51:46:e9:dd:c5:ea:1e:
fe:20:1e:a4:6f:39:e7:a6:90:84:b9:e2:8b:61:0e:
bd:58:a1:03:09:2c:6d:26:a8:5a:f5:4c:81:c1:03:
e2:cb:98:0a:44:0a:8e:b0:a0:6a:6b:b3:18:4f:7c:
4a:c8:2d:86:76:bc:0b:a5:c0:23:16:3b:ec:3f:de:
72:a1:01:60:35:2d:97:88:da:7e:84:42:77:51:70:
e9:eb:da:27:73:3e:b4:93:6f:85:3e:e5:08:9c:d5:
24:ff:92:bb:71:e5:e9:97:91:0c:95:c4:aa:e8:48:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BA:3F:45:FA:FB:2E:F3:85:9D:B9:6A:13:44:CA:1A:CA:AF:0E:53
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/sbo_Rfr7LvOFnblqE0TKGsqvDlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c444::/32
Signature Algorithm: sha256WithRSAEncryption
51:f9:ae:59:5a:eb:03:f4:38:25:95:74:1c:78:db:a7:d5:a7:
ed:92:59:4a:34:64:f6:da:d4:e8:26:7b:3f:ed:a5:a5:36:b5:
06:80:eb:e7:03:f1:fe:1c:3f:4a:1c:e8:10:55:74:9d:3e:db:
04:93:af:f4:04:a4:c0:d7:d8:c3:59:b2:15:f4:29:ad:1d:d7:
44:ef:8b:4b:e8:df:cc:3d:8a:02:3c:56:3d:f1:32:0a:cb:f2:
cd:69:f4:9e:b6:66:07:94:3b:61:72:bf:58:82:32:2f:a9:9c:
1f:cb:7a:b1:ed:16:f2:aa:00:61:86:5c:62:fe:2d:21:d2:08:
9e:a5:e0:13:00:2f:1f:cd:0d:a9:c5:7b:61:02:24:55:f6:2d:
7d:b3:71:01:fc:11:a2:77:2c:4b:e6:8d:20:f2:f4:ab:09:21:
e5:26:e0:44:43:3d:4b:a0:6f:c2:1d:fb:5e:e6:94:9d:4d:f8:
aa:63:de:9a:84:0a:8a:f0:e9:ed:6c:ba:a3:c5:cf:57:98:d4:
c3:fe:19:03:78:48:a8:c4:6f:e6:98:64:3f:58:38:82:de:d8:
ee:db:e0:92:74:6a:b3:75:50:7f:cc:ef:ef:05:b5:e1:a3:fc:
db:e9:c1:16:8f:e6:a2:78:5b:38:d8:f6:7f:70:24:ba:f9:8e:
c8:54:83:69
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZd9vXeYj0jbqDtZ2OVQ4U6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwNjE3MTE1NDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWJhM2Y0NWZhZmIyZWYzODU5ZGI5NmExMzQ0Y2ExYWNhYWYwZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzQa8IRHb0rqtZymdH9q6TAOakgN
DquvTG/T30UwCZxK5k6ItL8Uv6z+glTc9+A/C8xuGJfl21/09PBFk1I5RAOYvbdK
9vYlkj7QvOPTGO7Mj6yIdPRSida0laeXf6xMjEh8ad6w158BeyWVvWsqHgnyBPF6
WB44M2vsGHTzd1eErx2zGoeopCuqRcK0MFFG6d3F6h7+IB6kbznnppCEueKLYQ69
WKEDCSxtJqha9UyBwQPiy5gKRAqOsKBqa7MYT3xKyC2GdrwLpcAjFjvsP95yoQFg
NS2XiNp+hEJ3UXDp69oncz60k2+FPuUInNUk/5K7ceXpl5EMlcSq6EjntQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLG6P0X6+y7zhZ25ahNEyhrKrw5TMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvc2JvX1JmcjdMdk9GbmJscUUwVEtHc3F2RGxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPERDAN
BgkqhkiG9w0BAQsFAAOCAQEAUfmuWVrrA/Q4JZV0HHjbp9Wn7ZJZSjRk9trU6CZ7
P+2lpTa1BoDr5wPx/hw/ShzoEFV0nT7bBJOv9ASkwNfYw1myFfQprR3XRO+LS+jf
zD2KAjxWPfEyCsvyzWn0nrZmB5Q7YXK/WIIyL6mcH8t6se0W8qoAYYZcYv4tIdII
nqXgEwAvH80NqcV7YQIkVfYtfbNxAfwRoncsS+aNIPL0qwkh5SbgREM9S6Bvwh37
XuaUnU34qmPemoQKivDp7Wy6o8XPV5jUw/4ZA3hIqMRv5phkP1g4gt7Y7tvgknRq
s3VQf8zv7wW14aP82+nBFo/monhbONj2f3AkuvmOyFSDaQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:27:29 2025 by rpki-client