Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/Fa9itx4Z-f13MazwFVWy9d_c1As.roa
File: Fa9itx4Z-f13MazwFVWy9d_c1As.roa (raw, json)
Hash identifier: 1NYFu8I+dDX4ueMnUw2iGkeE/EpTL8iGojHp8imEkDU=
Subject key identifier: 15:AF:62:B7:1E:19:F9:FD:77:31:AC:F0:15:55:B2:F5:DF:DC:D4:0B
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 018F1255910D988379E9F7037C1CFBE4C10C
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/Fa9itx4Z-f13MazwFVWy9d_c1As.roa
Signing time: Wed 24 Apr 2024 22:59:08 +0000
ROA not before: Wed 24 Apr 2024 22:59:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12301
IP address blocks: 45.11.109.0/24 maxlen: 24
45.11.110.0/24 maxlen: 24
45.11.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:12:55:91:0d:98:83:79:e9:f7:03:7c:1c:fb:e4:c1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Apr 24 22:59:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15af62b71e19f9fd7731acf01555b2f5dfdcd40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:06:d6:fb:5f:5b:d0:14:cc:03:7c:5b:7b:
32:ec:d4:e5:72:af:8c:4c:fc:2b:34:10:f5:f2:ea:
23:ec:97:f2:bc:a8:ea:80:93:83:a8:0c:9f:49:41:
64:a0:17:05:74:a3:e5:a3:bc:41:3d:f5:56:62:27:
fb:34:87:ec:59:7e:bc:38:d7:53:da:af:c8:5d:ea:
84:62:11:2a:c5:43:49:87:ed:a8:ef:e1:74:c5:0a:
46:06:0f:8e:c0:bd:d8:98:09:79:d3:d6:10:5e:38:
ee:d8:2e:29:c4:cc:fc:83:6f:c2:a1:96:7a:2b:27:
5e:82:5e:0c:5c:74:fe:6f:b8:65:f7:19:ca:3f:88:
5f:3f:8b:09:48:c0:2e:ce:7f:e5:3d:54:84:de:55:
0a:2d:89:fc:fe:cd:95:dc:a0:ca:a1:28:55:3c:28:
f1:76:66:95:be:83:7a:1b:f8:4b:d0:81:2b:3a:46:
f9:09:c2:df:64:ee:15:06:23:f2:80:b5:4e:7b:16:
70:7a:5c:9a:02:e1:8f:f0:0b:b4:31:8a:23:63:f7:
20:be:93:72:9f:85:a6:af:6d:b0:62:75:91:5b:f4:
fc:d1:5e:4a:c5:9f:06:fd:53:9d:47:ab:4e:d3:7b:
92:83:c8:b8:83:4e:b9:05:25:22:2f:e3:cc:98:5d:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AF:62:B7:1E:19:F9:FD:77:31:AC:F0:15:55:B2:F5:DF:DC:D4:0B
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/Fa9itx4Z-f13MazwFVWy9d_c1As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.109.0-45.11.111.255
Signature Algorithm: sha256WithRSAEncryption
9a:7a:9b:ae:24:45:fe:4f:67:20:49:46:85:da:eb:5c:3e:3c:
a9:8e:4b:ad:3c:69:c4:c5:ae:4b:30:76:93:9e:f3:31:de:0a:
eb:e0:b2:53:7e:1b:2e:4d:d0:75:c9:6d:aa:fd:12:66:4d:81:
ae:da:f4:1a:a5:52:78:3c:f1:a1:9c:3e:31:19:a8:4d:7f:25:
fb:a5:24:88:4b:33:d9:11:bb:22:68:21:15:dc:e2:34:a4:cd:
18:e1:98:7b:43:d6:ed:33:26:d7:7f:7f:f8:04:d9:9b:8d:39:
34:1b:1b:3b:df:15:4f:3d:3c:33:0c:4e:6f:70:c3:4e:2b:41:
77:22:c3:35:b0:d6:35:ad:b3:00:51:6a:2c:42:e9:06:a2:5a:
58:c8:5e:06:7c:2a:5f:38:60:fd:9f:08:c2:84:b5:00:08:fe:
03:f4:89:e9:c7:1b:4b:f6:b0:07:fc:c3:c5:4b:38:0d:d6:34:
9b:02:de:0a:a3:3f:67:00:f7:56:eb:ce:b7:bd:c0:0c:58:01:
64:9a:f5:95:86:30:5c:51:18:a7:15:d0:70:14:90:48:f9:ea:
a8:4a:a2:40:5e:be:ef:dc:eb:f5:71:e9:93:70:7e:90:9b:fa:
5a:f5:7e:92:1e:cb:42:78:52:8f:15:5b:10:34:64:54:2e:54:
fe:4b:3e:1a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY8SVZENmIN56fcDfBz75MEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Y2Q2N2I1Zjk3YmE3OTVhNmJmODY5MDZiNzcxYzFkZDJj
YjFkYzkwHhcNMjQwNDI0MjI1OTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWFmNjJiNzFlMTlmOWZkNzczMWFjZjAxNTU1YjJmNWRmZGNkNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU0G1vtfW9AUzAN8W3sy7NTlcq+M
TPwrNBD18uoj7JfyvKjqgJODqAyfSUFkoBcFdKPlo7xBPfVWYif7NIfsWX68ONdT
2q/IXeqEYhEqxUNJh+2o7+F0xQpGBg+OwL3YmAl509YQXjju2C4pxMz8g2/CoZZ6
Kydegl4MXHT+b7hl9xnKP4hfP4sJSMAuzn/lPVSE3lUKLYn8/s2V3KDKoShVPCjx
dmaVvoN6G/hL0IErOkb5CcLfZO4VBiPygLVOexZwelyaAuGP8Au0MYojY/cgvpNy
n4Wmr22wYnWRW/T80V5KxZ8G/VOdR6tO03uSg8i4g065BSUiL+PMmF0G4wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBWvYrceGfn9dzGs8BVVsvXf3NQLMB8GA1UdIwQY
MBaAFAjNZ7X5e6eVpr+GkGt3HB3Syx3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMt
NTc0NjJjMjgzMjk0LzEvRmE5aXR4NFotZjEzTWF6d0ZWV3k5ZF9jMUFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMtNTc0NjJjMjgzMjk0
LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtC20D
BAQtC2AwDQYJKoZIhvcNAQELBQADggEBAJp6m64kRf5PZyBJRoXa61w+PKmOS608
acTFrkswdpOe8zHeCuvgslN+Gy5N0HXJbar9EmZNga7a9BqlUng88aGcPjEZqE1/
JfulJIhLM9kRuyJoIRXc4jSkzRjhmHtD1u0zJtd/f/gE2ZuNOTQbGzvfFU89PDMM
Tm9ww04rQXciwzWw1jWtswBRaixC6QaiWljIXgZ8Kl84YP2fCMKEtQAI/gP0ienH
G0v2sAf8w8VLOA3WNJsC3gqjP2cA91brzre9wAxYAWSa9ZWGMFxRGKcV0HAUkEj5
6qhKokBevu/c6/Vx6ZNwfpCb+lr1fpIey0J4Uo8VWxA0ZFQuVP5LPho=
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:45:46 2024 by rpki-client on console-fra.rpki-client.org