Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MTXD_MQhnWQE3w0cniukvf1epss.roa
File: MTXD_MQhnWQE3w0cniukvf1epss.roa (raw, json)
Hash identifier: fkSoSgky1p/QblkF2k4s7+mJsaIKFiAWEmviSmpHBl4=
Subject key identifier: 31:35:C3:FC:C4:21:9D:64:04:DF:0D:1C:9E:2B:A4:BD:FD:5E:A6:CB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019184FD10453EA61CADD2E85B58CA9EFA78
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MTXD_MQhnWQE3w0cniukvf1epss.roa
Signing time: Sat 24 Aug 2024 15:24:22 +0000
ROA not before: Sat 24 Aug 2024 15:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50321
IP address blocks: 89.213.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:84:fd:10:45:3e:a6:1c:ad:d2:e8:5b:58:ca:9e:fa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 24 15:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3135c3fcc4219d6404df0d1c9e2ba4bdfd5ea6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:45:48:f6:61:2a:84:9e:64:5a:d4:ab:e0:a6:
e6:07:ca:b8:a8:8d:ed:42:b4:8a:0b:53:74:28:40:
54:be:67:73:60:e1:94:7e:06:7a:fe:83:d6:24:b6:
77:e7:ef:61:50:69:ca:3b:59:4f:74:7a:17:1e:f5:
e9:04:c1:f6:bd:fc:fd:d9:27:9e:eb:b6:f2:98:bd:
1d:0c:c7:50:b5:6a:ff:16:c4:d7:60:36:61:21:ea:
84:d4:06:c8:a9:4d:49:4a:30:48:f2:0c:c0:37:07:
96:4e:f9:78:7c:da:89:4d:b1:ec:76:02:65:95:7f:
b5:11:a2:d8:47:de:68:38:72:5e:ed:2a:0e:f8:6d:
5e:31:ab:bd:27:55:5d:e3:09:6f:90:e6:9a:b7:20:
17:10:29:cc:4a:09:6b:7e:7c:36:cf:6c:3b:16:a1:
7a:19:57:93:19:fe:19:6c:c9:49:8e:53:98:28:bc:
48:b6:52:80:22:55:da:7b:1d:87:10:91:79:2e:0c:
1b:07:54:db:bd:9a:94:ae:5a:43:b2:0f:8f:70:9f:
b6:2e:24:e2:28:d8:3d:e0:5a:1b:13:99:1f:58:ac:
7c:ce:61:f8:b9:11:61:92:d4:50:5a:a3:d5:89:d5:
bd:42:0f:16:35:39:9f:bd:26:cb:c4:73:0b:29:f4:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:35:C3:FC:C4:21:9D:64:04:DF:0D:1C:9E:2B:A4:BD:FD:5E:A6:CB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MTXD_MQhnWQE3w0cniukvf1epss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1d:d8:e3:a7:ad:b4:a6:43:eb:9e:47:d4:b3:0e:7e:09:eb:
06:7c:eb:c9:30:cc:dc:b9:e3:1e:2d:e0:83:a5:22:f5:68:37:
d5:77:f9:f5:5a:4b:3f:66:86:ad:4d:f6:75:3c:82:4f:09:2a:
11:46:07:e9:b0:81:84:f3:7d:da:87:26:a6:a9:8c:c7:18:b0:
e2:17:0a:d2:1f:f1:49:42:27:f8:5c:3d:13:cf:97:ba:3f:5d:
98:8e:9c:23:52:5c:d4:10:c3:21:a9:d7:60:0d:c5:82:c9:2d:
13:72:7f:a3:52:a0:a5:30:a8:e3:b1:4d:74:b0:de:5b:3a:fc:
2c:66:25:6d:61:73:07:66:44:2f:25:b0:7d:f1:58:8e:c2:34:
61:b8:f7:bd:d1:ee:7d:64:c1:5f:5a:ed:70:75:bd:13:54:0e:
d0:ba:bc:d4:df:af:9c:ac:8c:56:d9:66:4f:fc:3b:d0:3a:0e:
a8:1e:5c:0a:dc:19:fb:0e:73:1c:a1:db:03:5a:49:4e:bd:79:
52:04:2c:c6:c1:58:32:f6:a3:c7:63:18:11:d5:77:08:38:da:
37:1c:28:7e:48:cf:fb:6a:2a:09:2c:de:41:b8:ac:26:db:92:
ef:55:91:c9:4a:d8:d0:70:fa:80:6f:c8:0f:a3:39:2f:04:30:
5c:1c:59:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGE/RBFPqYcrdLoW1jKnvp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwODI0MTUyNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTM1YzNmY2M0MjE5ZDY0MDRkZjBkMWM5ZTJiYTRiZGZkNWVhNmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEVI9mEqhJ5kWtSr4KbmB8q4qI3t
QrSKC1N0KEBUvmdzYOGUfgZ6/oPWJLZ35+9hUGnKO1lPdHoXHvXpBMH2vfz92See
67bymL0dDMdQtWr/FsTXYDZhIeqE1AbIqU1JSjBI8gzANweWTvl4fNqJTbHsdgJl
lX+1EaLYR95oOHJe7SoO+G1eMau9J1Vd4wlvkOaatyAXECnMSglrfnw2z2w7FqF6
GVeTGf4ZbMlJjlOYKLxItlKAIlXaex2HEJF5LgwbB1TbvZqUrlpDsg+PcJ+2LiTi
KNg94FobE5kfWKx8zmH4uRFhktRQWqPVidW9Qg8WNTmfvSbLxHMLKfR0vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDE1w/zEIZ1kBN8NHJ4rpL39XqbLMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTVRYRF9NUWhuV1FFM3cwY25pdWt2ZjFlcHNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdVyMA0G
CSqGSIb3DQEBCwUAA4IBAQAuHdjjp620pkPrnkfUsw5+CesGfOvJMMzcueMeLeCD
pSL1aDfVd/n1Wks/ZoatTfZ1PIJPCSoRRgfpsIGE833ahyamqYzHGLDiFwrSH/FJ
Qif4XD0Tz5e6P12YjpwjUlzUEMMhqddgDcWCyS0Tcn+jUqClMKjjsU10sN5bOvws
ZiVtYXMHZkQvJbB98ViOwjRhuPe90e59ZMFfWu1wdb0TVA7QurzU36+crIxW2WZP
/DvQOg6oHlwK3Bn7DnMcodsDWklOvXlSBCzGwVgy9qPHYxgR1XcIONo3HCh+SM/7
aioJLN5BuKwm25LvVZHJStjQcPqAb8gPozkvBDBcHFn2
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:15 2024 by rpki-client on console-fra.rpki-client.org