Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: vawao1IEa+9cDILyqggC93YX4X7D/G78lZAiEHQ8qqc=
Subject key identifier: FA:0B:06:C3:8B:08:65:2D:01:7D:C1:1C:8D:77:D9:F0:58:2E:19:BA
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 760003432249A65B9094F49888146D1E560C4C42
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS0.roa
Signing time: Sat 07 Dec 2024 23:06:42 +0000
ROA not before: Sat 07 Dec 2024 23:01:42 +0000
ROA not after: Sat 06 Dec 2025 23:06:42 +0000
asID: 0
IP address blocks: 2a0e:6906:aaaa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:00:03:43:22:49:a6:5b:90:94:f4:98:88:14:6d:1e:56:0c:4c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 7 23:01:42 2024 GMT
Not After : Dec 6 23:06:42 2025 GMT
Subject: CN=FA0B06C38B08652D017DC11C8D77D9F0582E19BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:7f:a4:89:da:0a:56:37:57:d4:01:3f:ed:
c0:d8:84:40:a7:aa:d2:b3:5c:87:82:b5:45:22:8a:
6b:d0:d6:a9:10:d6:d6:6f:a0:9e:02:1a:51:50:69:
c4:75:4d:5c:5c:a3:5e:91:f4:aa:14:be:3d:d3:ff:
fc:b5:08:1c:b1:17:46:2c:26:77:b0:e1:36:e0:84:
55:cd:3a:f4:3b:ba:2c:7d:31:a9:6b:b6:2b:6e:66:
f8:21:fe:48:d4:02:f8:f9:60:41:12:ce:9d:f0:3b:
ad:03:cd:34:3a:9a:d8:38:82:48:89:55:d9:30:d1:
3d:18:d3:bc:94:16:72:3d:cb:af:03:b8:8d:4a:5f:
60:f3:35:20:d8:51:a7:a1:8e:0d:2e:ca:bf:1b:c9:
03:0e:6b:2a:26:9a:89:54:31:2f:3a:6f:0c:b2:8a:
a9:66:08:50:49:39:a4:29:74:56:83:1e:7c:c6:1d:
0f:d1:fe:8f:73:c8:7f:8a:fe:88:b2:b3:e9:58:8b:
96:77:25:ac:7a:83:ef:b3:1e:22:90:8c:dc:8e:e3:
83:17:57:fc:61:c6:1f:18:13:54:12:03:fe:f6:09:
77:61:95:54:4b:88:d0:91:1a:73:4a:24:56:7b:dd:
9c:be:9b:d3:71:18:3f:dc:e9:a7:24:9d:a6:84:20:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0B:06:C3:8B:08:65:2D:01:7D:C1:1C:8D:77:D9:F0:58:2E:19:BA
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6906:aaaa::/48
Signature Algorithm: sha256WithRSAEncryption
94:0e:eb:2c:80:a0:4f:f2:34:0a:23:de:57:8e:35:6b:7b:4b:
f2:d5:e4:ff:d4:66:9a:1d:94:a1:a6:d5:9c:fc:20:13:06:cf:
62:94:2b:c3:dd:a0:14:5e:bb:b7:83:56:70:54:e9:c3:f4:2f:
9c:1d:45:97:11:48:9d:52:2e:07:11:0c:a7:f6:fc:29:b1:37:
f2:c4:d7:11:96:cc:f1:f5:d8:9c:83:79:ea:ea:a6:64:d4:20:
c2:fb:04:ea:05:fb:7d:d3:da:0f:42:8e:56:cf:f4:02:de:b9:
85:5a:83:06:18:95:5c:46:f7:04:9d:d4:90:67:0a:27:9b:14:
dc:f2:ac:6a:e2:c1:e2:75:01:09:93:83:39:71:ce:69:58:2a:
c4:21:14:78:fb:4c:f2:b4:c5:28:41:19:5e:a6:b6:53:a1:38:
c9:36:8a:e6:bc:4f:c0:a4:b1:ec:68:d8:6f:10:4e:e2:e5:22:
d1:a7:cf:f9:bf:52:07:71:77:0b:ec:a3:59:0b:70:82:1b:52:
32:8d:d7:86:c7:82:7a:0d:51:df:e0:80:ef:75:62:05:25:8b:
c0:da:0d:56:19:a3:2d:69:7d:05:48:f2:c3:38:5e:8f:70:59:
92:a7:92:3a:3d:ae:8c:12:db:b8:6c:04:9b:ef:6e:3a:96:32:
06:be:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:45 2025 by rpki-client