Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/MOrtqlHHBPindSEewAyigMF2ueI.roa
File: MOrtqlHHBPindSEewAyigMF2ueI.roa (raw, json)
Hash identifier: hJJvUAeKnCVQPcywRe1bab6B4D/g5ekgr6VS59KG7CI=
Subject key identifier: 30:EA:ED:AA:51:C7:04:F8:A7:75:21:1E:C0:0C:A2:80:C1:76:B9:E2
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01918F14ACF5F9093835D851B675252098FB
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/MOrtqlHHBPindSEewAyigMF2ueI.roa
Signing time: Mon 26 Aug 2024 14:26:22 +0000
ROA not before: Mon 26 Aug 2024 14:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200740
IP address blocks: 45.43.72.0/22 maxlen: 24
45.43.88.0/23 maxlen: 24
45.43.90.0/23 maxlen: 24
87.239.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8f:14:ac:f5:f9:09:38:35:d8:51:b6:75:25:20:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Aug 26 14:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30eaedaa51c704f8a775211ec00ca280c176b9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:6b:3b:3c:4c:f4:31:29:ae:8f:b1:79:7d:
02:2b:f1:a6:c8:c9:c7:53:8a:52:b0:ac:8b:88:c2:
ba:98:08:bf:fd:cf:81:77:42:00:0f:da:eb:31:b8:
f8:e2:9d:32:27:a9:eb:a7:19:c0:57:a1:65:b3:d6:
75:91:a5:21:92:37:64:ae:e1:16:cf:53:e0:8e:83:
bc:ae:28:2a:08:21:c3:b0:c0:f4:b3:ee:51:d5:fc:
f2:76:e1:1b:22:cc:34:b0:08:a2:2c:73:c6:60:2a:
3a:66:44:f2:cf:93:f3:8e:e1:9c:f2:a5:ad:76:f1:
5f:ce:5c:1e:6f:c6:3d:f8:64:48:24:5a:43:89:0d:
12:f1:e1:95:1b:8e:66:2d:e2:5d:62:66:f4:92:88:
41:ed:5f:aa:27:68:d0:f4:6d:96:d1:89:14:b4:d1:
d2:6d:65:ad:3a:b7:5f:c8:4d:b4:b4:f3:18:ae:76:
f7:91:61:86:97:df:2d:7d:1f:c0:53:65:a8:7d:71:
92:32:69:f5:5b:2c:aa:61:4a:4d:7b:7c:98:e3:a9:
bc:23:88:b2:08:4e:2e:f5:3f:4e:b9:a7:65:e3:66:
13:78:a6:23:ea:96:7e:64:e7:1d:07:67:ab:26:53:
49:ac:03:1d:cd:93:48:8f:c2:e6:13:d5:83:f9:bd:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EA:ED:AA:51:C7:04:F8:A7:75:21:1E:C0:0C:A2:80:C1:76:B9:E2
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/MOrtqlHHBPindSEewAyigMF2ueI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.72.0/22
45.43.88.0/22
87.239.250.0/23
Signature Algorithm: sha256WithRSAEncryption
96:f8:cf:44:e1:38:73:d2:ec:16:f0:f7:c1:3d:65:89:6c:ec:
df:af:03:bb:bd:d8:99:fc:7b:66:83:9c:21:14:b4:13:d5:3d:
4e:08:09:ba:cf:52:03:7a:22:10:fd:58:89:41:a5:d5:c0:1c:
dd:1e:29:18:8c:03:be:66:70:91:4c:05:7e:f9:8f:26:32:88:
fc:af:26:55:47:ce:c2:19:0f:ab:11:7e:4b:a4:b1:3e:a3:4d:
bf:a5:4d:dd:8b:a6:8e:e0:9b:0c:af:25:39:92:b1:90:56:ef:
39:86:8b:ce:0c:bd:5e:68:81:c3:72:03:22:6a:ec:9e:82:e5:
9d:a4:6b:35:95:65:c7:30:3f:1c:05:5b:a2:0b:1f:6a:49:0f:
ba:8f:09:39:39:1c:88:8d:5d:92:39:ef:2d:c3:53:b3:a8:38:
5d:62:26:d5:4f:eb:2b:87:27:87:4b:4e:43:bc:63:84:59:70:
d8:65:44:6c:10:ed:d2:3b:ab:88:43:b1:bf:ae:0f:77:94:d4:
d0:86:d2:55:10:e5:f1:24:f2:71:ad:44:d7:74:2a:9e:10:60:
75:d2:e5:b9:a5:65:d0:c4:dd:cc:19:74:6d:08:87:23:09:73:
04:3a:b9:5f:7b:6f:40:f6:46:e6:bc:d2:35:bd:b6:06:70:34:
64:e1:52:42
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZGPFKz1+Qk4NdhRtnUlIJj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjQwODI2MTQyNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGVhZWRhYTUxYzcwNGY4YTc3NTIxMWVjMDBjYTI4MGMxNzZiOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob1rOzxM9DEpro+xeX0CK/GmyMnH
U4pSsKyLiMK6mAi//c+Bd0IAD9rrMbj44p0yJ6nrpxnAV6Fls9Z1kaUhkjdkruEW
z1PgjoO8rigqCCHDsMD0s+5R1fzyduEbIsw0sAiiLHPGYCo6ZkTyz5PzjuGc8qWt
dvFfzlweb8Y9+GRIJFpDiQ0S8eGVG45mLeJdYmb0kohB7V+qJ2jQ9G2W0YkUtNHS
bWWtOrdfyE20tPMYrnb3kWGGl98tfR/AU2WofXGSMmn1WyyqYUpNe3yY46m8I4iy
CE4u9T9Ouadl42YTeKYj6pZ+ZOcdB2erJlNJrAMdzZNIj8LmE9WD+b1fMQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDDq7apRxwT4p3UhHsAMooDBdrniMB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvTU9ydHFsSEhCUGluZFNFZXdBeWlnTUYydWVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLStIAwQC
LStYAwQBV+/6MA0GCSqGSIb3DQEBCwUAA4IBAQCW+M9E4Thz0uwW8PfBPWWJbOzf
rwO7vdiZ/Htmg5whFLQT1T1OCAm6z1IDeiIQ/ViJQaXVwBzdHikYjAO+ZnCRTAV+
+Y8mMoj8ryZVR87CGQ+rEX5LpLE+o02/pU3di6aO4JsMryU5krGQVu85hovODL1e
aIHDcgMiauyeguWdpGs1lWXHMD8cBVuiCx9qSQ+6jwk5ORyIjV2SOe8tw1OzqDhd
YibVT+srhyeHS05DvGOEWXDYZURsEO3SO6uIQ7G/rg93lNTQhtJVEOXxJPJxrUTX
dCqeEGB10uW5pWXQxN3MGXRtCIcjCXMEOrlfe29A9kbmvNI1vbYGcDRk4VJC
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:27:50 2024 by rpki-client on console-fra.rpki-client.org