Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS10111.roa
File: AS10111.roa (raw, json)
Hash identifier: W7ljfGFlhm5MW6NJJ6dXWF53mqspJi+NYdsHbUk0VxA=
Subject key identifier: 4F:2B:CA:54:5F:3A:36:31:8A:4E:C2:EF:5F:13:01:6E:B3:FA:5B:0A
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 58F37C76D6C357CBD8C677ED9D66CFD2F667DC0A
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS10111.roa
Signing time: Thu 01 Aug 2024 17:05:19 +0000
ROA not before: Thu 01 Aug 2024 17:00:19 +0000
ROA not after: Thu 31 Jul 2025 17:05:19 +0000
asID: 10111
IP address blocks: 45.151.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f3:7c:76:d6:c3:57:cb:d8:c6:77:ed:9d:66:cf:d2:f6:67:dc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 1 17:00:19 2024 GMT
Not After : Jul 31 17:05:19 2025 GMT
Subject: CN=4F2BCA545F3A36318A4EC2EF5F13016EB3FA5B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:27:77:8f:55:e7:f0:d3:98:5a:bf:b5:08:
b2:d2:c0:17:78:43:b1:e1:5a:b0:2b:c5:4c:49:55:
ab:f4:bf:08:da:69:66:bd:0e:28:4a:91:af:17:e9:
ed:7d:34:a6:cd:58:bb:ad:fc:d7:58:73:31:d7:5a:
7f:91:9a:47:fc:79:54:eb:6a:ca:64:ab:18:4b:54:
48:d0:3b:24:02:f2:0e:61:19:15:fd:b8:a7:d9:e6:
16:63:f7:54:3d:be:97:b2:d4:8d:ff:55:ed:a7:e0:
7d:cd:9b:bb:e3:ef:f7:93:e1:58:aa:d0:72:19:24:
4e:8c:11:dd:42:b3:f6:c1:02:09:c5:95:af:90:23:
a0:8f:1a:65:cf:ca:bc:d7:1a:33:52:0f:22:ae:c7:
72:77:de:b2:f0:fa:68:83:87:fb:0e:45:d0:58:87:
0c:fe:ea:57:fa:ab:74:29:19:e7:51:3d:29:a4:32:
d3:7b:f6:77:c4:3a:2c:06:36:1b:51:07:d8:59:36:
c0:bb:c7:63:9b:c0:e6:86:cd:1d:97:84:2b:6f:10:
ed:07:98:5a:27:a8:02:a2:cd:1f:cd:6c:f6:9f:9b:
f8:43:cf:b2:65:ee:43:c1:0f:01:1b:04:c3:31:26:
a7:6a:e5:3c:35:12:43:cd:9f:8e:5d:e5:51:5c:5d:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2B:CA:54:5F:3A:36:31:8A:4E:C2:EF:5F:13:01:6E:B3:FA:5B:0A
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS10111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.47.0/24
Signature Algorithm: sha256WithRSAEncryption
54:64:49:79:12:2e:92:9f:e3:54:64:fb:ea:8b:0d:6d:8d:07:
2f:c3:4d:35:d7:fb:7d:92:fa:69:f0:f8:73:c4:84:c4:c1:e2:
ae:26:96:09:91:94:1d:a4:93:5a:67:ee:e5:b7:71:96:03:4e:
19:09:fb:a7:66:c4:34:f7:e1:9d:5a:73:2b:89:24:5e:9e:11:
42:2a:0d:6b:8f:63:c6:0b:aa:35:fe:f0:50:bc:d8:3e:6e:19:
61:9b:55:2d:64:71:9e:0d:0e:82:4e:39:19:ef:0b:e1:e4:39:
d1:71:9c:c9:b8:17:2d:98:10:54:4d:f9:53:67:af:8b:be:24:
57:21:fd:df:ae:d0:02:73:ba:50:5f:4d:81:af:20:5e:3f:29:
62:8f:8b:46:3f:3f:5a:7e:01:91:1f:d4:11:e7:76:bb:25:17:
fa:27:64:06:a1:24:6f:b5:8a:93:20:07:90:57:76:bf:b1:97:
78:b2:97:93:77:e9:97:5d:2b:d7:70:b9:38:ae:74:5b:05:dc:
f7:d0:5c:8d:60:63:9b:38:65:8d:55:7d:2a:11:ba:8e:5e:84:
55:7f:60:ad:a2:19:c6:cb:81:1e:e4:87:53:c4:31:3e:aa:30:
13:ff:da:d2:66:cb:eb:ce:8a:09:67:dc:08:4b:55:9e:62:65:
b5:f4:90:fc
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUWPN8dtbDV8vYxnftnWbP0vZn3AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNDA4MDExNzAwMTlaFw0yNTA3MzExNzA1MTlaMDMxMTAvBgNV
BAMTKDRGMkJDQTU0NUYzQTM2MzE4QTRFQzJFRjVGMTMwMTZFQjNGQTVCMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2Sd3j1Xn8NOYWr+1CLLSwBd4
Q7HhWrArxUxJVav0vwjaaWa9DihKka8X6e19NKbNWLut/NdYczHXWn+Rmkf8eVTr
aspkqxhLVEjQOyQC8g5hGRX9uKfZ5hZj91Q9vpey1I3/Ve2n4H3Nm7vj7/eT4Viq
0HIZJE6MEd1Cs/bBAgnFla+QI6CPGmXPyrzXGjNSDyKux3J33rLw+miDh/sORdBY
hwz+6lf6q3QpGedRPSmkMtN79nfEOiwGNhtRB9hZNsC7x2ObwOaGzR2XhCtvEO0H
mFonqAKizR/NbPafm/hDz7Jl7kPBDwEbBMMxJqdq5Tw1EkPNn45d5VFcXWPDAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUTyvKVF86NjGKTsLvXxMBbrP6WwowHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTAxMTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtly8w
DQYJKoZIhvcNAQELBQADggEBAFRkSXkSLpKf41Rk++qLDW2NBy/DTTXX+32S+mnw
+HPEhMTB4q4mlgmRlB2kk1pn7uW3cZYDThkJ+6dmxDT34Z1acyuJJF6eEUIqDWuP
Y8YLqjX+8FC82D5uGWGbVS1kcZ4NDoJOORnvC+HkOdFxnMm4Fy2YEFRN+VNnr4u+
JFch/d+u0AJzulBfTYGvIF4/KWKPi0Y/P1p+AZEf1BHndrslF/onZAahJG+1ipMg
B5BXdr+xl3iyl5N36ZddK9dwuTiudFsF3PfQXI1gY5s4ZY1VfSoRuo5ehFV/YK2i
GcbLgR7kh1PEMT6qMBP/2tJmy+vOigln3AhLVZ5iZbX0kPw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:23 2024 by rpki-client on console-ams.rpki-client.org