Route Origin Authorization
$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/1/3138352e37372e3232342e302f32322d3234203d3e203335393136.roa
File: 3138352e37372e3232342e302f32322d3234203d3e203335393136.roa (raw, json)
Hash identifier: dgkLn/IDTw0/ECfrB36EoKIW6PRgJQi0AK39F8rqOJ4=
Subject key identifier: 90:1A:C7:20:D2:E8:19:6B:D8:38:95:78:9E:C2:83:A4:62:E6:94:CB
Certificate issuer: /CN=f827056c07ea5582db063b6af62f8f3076237cd7
Certificate serial: 37C8B44AE5AEEA6BF4250DDBC43617A2E6B92123
Authority key identifier: F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
Subject info access: rsync://rpki.multacom.com/repo/MCOMCA/1/3138352e37372e3232342e302f32322d3234203d3e203335393136.roa
Signing time: Thu 14 Nov 2024 18:28:58 +0000
ROA not before: Thu 14 Nov 2024 18:23:58 +0000
ROA not after: Thu 13 Nov 2025 18:28:58 +0000
asID: 35916
IP address blocks: 185.77.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl
rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c8:b4:4a:e5:ae:ea:6b:f4:25:0d:db:c4:36:17:a2:e6:b9:21:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f827056c07ea5582db063b6af62f8f3076237cd7
Validity
Not Before: Nov 14 18:23:58 2024 GMT
Not After : Nov 13 18:28:58 2025 GMT
Subject: CN=901AC720D2E8196BD83895789EC283A462E694CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:b2:41:65:6c:0e:c3:0d:a7:b0:55:7d:43:
34:2a:9a:89:e7:bd:18:29:59:cf:7a:8a:dd:12:ba:
99:c6:37:9b:8f:20:57:8d:09:f9:28:ac:e0:f1:ec:
8d:e2:b8:84:28:18:31:81:d2:8a:d1:50:e9:8d:8e:
d7:8c:10:df:fe:9e:7a:c2:3c:86:fb:fb:73:18:c1:
5c:b9:02:5a:e0:05:b3:20:6e:42:fb:30:81:fc:0e:
6c:89:94:41:4f:0f:64:10:50:6a:9d:c8:58:f3:fb:
ce:e5:c1:67:b7:6d:15:c2:55:a2:ac:03:cb:93:d5:
a3:ab:2c:94:81:d6:16:1e:a5:99:7f:f6:77:5d:85:
10:0d:85:19:cb:fb:a4:ad:cc:b5:c5:bd:1c:63:5c:
3a:31:a6:97:ab:39:45:96:59:32:35:87:9e:2d:85:
11:75:1d:d2:4a:8c:28:86:4c:da:1f:4e:75:70:9e:
14:5b:54:96:52:0b:d0:5d:17:b5:cc:cc:53:c0:e5:
64:0e:b8:22:a1:8e:dd:87:e7:c4:84:20:ba:53:4a:
5b:0f:3d:06:31:a5:27:03:df:28:94:50:5e:99:9d:
91:1b:68:d1:9a:d2:25:ae:a8:f7:8c:09:00:e5:2a:
b5:bc:46:66:c1:ed:9b:c3:7a:2f:0f:71:68:45:20:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:C7:20:D2:E8:19:6B:D8:38:95:78:9E:C2:83:A4:62:E6:94:CB
X509v3 Authority Key Identifier:
keyid:F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/1/3138352e37372e3232342e302f32322d3234203d3e203335393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.224.0/22
Signature Algorithm: sha256WithRSAEncryption
05:3f:0d:83:cd:b0:fa:49:a6:35:0c:cd:f1:f9:5d:9e:d6:04:
c2:de:11:a7:fa:a1:46:27:0c:ed:5c:03:37:bd:8e:cb:cc:82:
66:ee:6f:65:eb:6b:ab:61:08:b6:f4:b3:f7:90:5d:f3:fc:80:
af:d3:14:48:b0:a2:8e:98:19:1d:6b:29:75:a3:2a:03:31:74:
84:2d:29:aa:6c:03:62:df:ea:6e:ef:e6:8d:26:90:3f:56:95:
6e:e5:87:4b:0d:72:b6:2c:c9:d4:92:e2:2b:b0:0e:21:24:1b:
04:a9:cd:5f:5f:6c:42:4c:18:f7:49:d0:6a:44:94:ec:39:bc:
7c:af:4d:09:6a:ac:05:c6:4c:7d:89:63:ae:3c:d5:42:2a:29:
2e:c9:45:c8:ba:e2:fd:6f:d9:41:61:70:9c:96:3d:f0:36:62:
50:df:4e:2c:89:e1:42:a2:16:b9:b4:58:37:a1:a4:9b:f4:97:
62:7b:92:8f:ea:6a:75:7d:ed:27:2d:d7:42:a2:a4:c5:38:af:
e9:47:43:4f:14:6f:d9:a6:1e:a9:55:18:87:c7:e3:7b:f3:c0:
ea:0b:45:43:dc:f4:45:4d:75:a0:5d:30:db:da:4d:ab:89:0d:
5b:04:a9:31:58:2e:9f:f5:2d:a6:da:a0:41:ff:07:ac:f7:d8:
a9:0a:84:f2
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUN8i0SuWu6mv0JQ3bxDYXoua5ISMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjgyNzA1NmMwN2VhNTU4MmRiMDYzYjZhZjYyZjhmMzA3
NjIzN2NkNzAeFw0yNDExMTQxODIzNThaFw0yNTExMTMxODI4NThaMDMxMTAvBgNV
BAMTKDkwMUFDNzIwRDJFODE5NkJEODM4OTU3ODlFQzI4M0E0NjJFNjk0Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBR7JBZWwOww2nsFV9QzQqmonn
vRgpWc96it0SupnGN5uPIFeNCfkorODx7I3iuIQoGDGB0orRUOmNjteMEN/+nnrC
PIb7+3MYwVy5AlrgBbMgbkL7MIH8DmyJlEFPD2QQUGqdyFjz+87lwWe3bRXCVaKs
A8uT1aOrLJSB1hYepZl/9nddhRANhRnL+6StzLXFvRxjXDoxpperOUWWWTI1h54t
hRF1HdJKjCiGTNofTnVwnhRbVJZSC9BdF7XMzFPA5WQOuCKhjt2H58SEILpTSlsP
PQYxpScD3yiUUF6ZnZEbaNGa0iWuqPeMCQDlKrW8RmbB7ZvDei8PcWhFIGXnAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUkBrHINLoGWvYOJV4nsKDpGLmlMswHwYDVR0j
BBgwFoAU+CcFbAfqVYLbBjtq9i+PMHYjfNcwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraS5tdWx0YWNvbS5jb20vcmVwby9NQ09N
Q0EvMS9GODI3MDU2QzA3RUE1NTgyREIwNjNCNkFGNjJGOEYzMDc2MjM3Q0Q3LmNy
bDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMS1DY0ZiQWZxVllMYkJqdHE5aS1QTUhZ
amZOYy5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jw
a2kubXVsdGFjb20uY29tL3JlcG8vTUNPTUNBLzEvMzEzODM1MmUzNzM3MmUzMjMy
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzM1MzkzMTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
uU3gMA0GCSqGSIb3DQEBCwUAA4IBAQAFPw2DzbD6SaY1DM3x+V2e1gTC3hGn+qFG
JwztXAM3vY7LzIJm7m9l62urYQi29LP3kF3z/ICv0xRIsKKOmBkdayl1oyoDMXSE
LSmqbANi3+pu7+aNJpA/VpVu5YdLDXK2LMnUkuIrsA4hJBsEqc1fX2xCTBj3SdBq
RJTsObx8r00JaqwFxkx9iWOuPNVCKikuyUXIuuL9b9lBYXCclj3wNmJQ304sieFC
oha5tFg3oaSb9Jdie5KP6mp1fe0nLddCoqTFOK/pR0NPFG/Zph6pVRiHx+N788Dq
C0VD3PRFTXWgXTDb2k2riQ1bBKkxWC6f9S2m2qBB/wes99ipCoTy
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:48 2024 by rpki-client on console-fra.rpki-client.org