Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS205058.roa
File: AS205058.roa (raw, json)
Hash identifier: hR6zv14UdZ8rXK1yW8zxqWDK6plfOEP9yLmuwyDTnIY=
Subject key identifier: 8A:6D:2F:E1:14:71:B2:2E:0F:07:E9:2D:95:94:D7:C5:D4:5D:63:6E
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 2CF29DD3621620562A8BDB972D83BE86223DC41B
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS205058.roa
Signing time: Wed 20 Dec 2023 21:30:10 +0000
ROA not before: Wed 20 Dec 2023 21:25:10 +0000
ROA not after: Wed 18 Dec 2024 21:30:10 +0000
asID: 205058
IP address blocks: 2a0b:4340:b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f2:9d:d3:62:16:20:56:2a:8b:db:97:2d:83:be:86:22:3d:c4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 20 21:25:10 2023 GMT
Not After : Dec 18 21:30:10 2024 GMT
Subject: CN=8A6D2FE11471B22E0F07E92D9594D7C5D45D636E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:8a:02:3c:6e:07:2d:0a:c2:5b:9a:d9:37:
2e:0e:ed:9a:06:38:70:65:0a:dc:55:d8:cb:03:d9:
48:53:e6:f8:e1:51:a5:5a:32:b7:af:ee:50:a1:3e:
0d:26:a4:e6:97:47:6b:1d:c0:61:76:c4:0f:c2:7b:
34:f7:1a:c5:70:91:65:14:cf:d7:5b:af:1a:8b:73:
ff:97:90:83:78:f8:d1:15:7f:21:75:05:3c:a7:ae:
7e:44:00:c2:c8:85:6e:5f:d0:7d:b0:5e:e0:27:00:
43:05:2e:1f:99:ed:3d:3f:23:6c:1f:50:0d:c5:1b:
f2:41:3f:c9:a3:dd:46:16:64:45:0a:79:bd:ca:4b:
2b:ec:47:a4:ae:52:34:33:e2:c4:e7:4f:a2:3e:59:
6c:a5:53:84:65:86:1e:a4:20:a1:e2:1c:6b:b8:f8:
58:42:8b:05:9d:e2:41:1b:27:be:8f:27:30:2b:50:
9d:67:a6:b7:05:db:42:f5:e1:55:f9:e8:50:d8:bd:
47:8b:e4:2f:ca:e4:b2:a2:0b:1a:41:78:f2:1b:ee:
87:a5:9e:be:2c:f2:82:e0:2b:e1:c1:96:2a:cd:51:
2e:dc:3b:73:2e:a2:5c:fd:09:3d:19:e2:ef:6d:79:
f7:d6:78:d2:49:d3:9e:db:0e:44:2b:6a:43:56:27:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6D:2F:E1:14:71:B2:2E:0F:07:E9:2D:95:94:D7:C5:D4:5D:63:6E
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:b0::/44
Signature Algorithm: sha256WithRSAEncryption
20:1b:53:1e:a9:d6:c8:8a:5e:1f:8b:62:64:64:93:af:96:ab:
a6:06:ed:09:3a:59:e0:0a:1d:6d:53:f9:24:3f:a6:2a:49:c1:
a3:b7:b4:d2:54:d7:a8:db:ff:cc:d2:7c:53:79:45:1d:55:0f:
c6:b4:0e:9e:85:84:a7:4d:2f:2e:41:e2:a6:70:0f:b3:01:23:
63:20:00:40:20:55:83:d6:2e:e2:34:f8:de:32:f2:e4:83:3d:
9d:df:6a:64:39:2c:df:40:b8:28:9a:89:dc:84:42:e3:c2:10:
c1:a3:4c:48:50:57:68:73:5f:5b:9d:6e:61:a8:df:18:43:d4:
23:8e:03:10:8c:cc:d2:5f:31:91:93:90:9c:42:63:fe:b6:88:
f5:e8:33:7e:55:b2:cf:58:f8:86:ab:4b:52:62:ac:99:a1:59:
51:64:76:1c:53:a5:c1:44:72:75:6a:26:97:60:15:99:e7:f7:
d3:6e:8d:d8:ba:7c:59:e7:cb:6d:21:43:f9:27:57:0e:c9:d2:
70:46:16:d2:1f:72:fe:38:39:5a:10:81:08:f3:9d:ba:b4:1d:
ff:0f:d7:54:cb:da:a6:7c:35:b0:2c:c8:1b:39:19:e1:dc:30:
9e:20:a5:9a:5f:3d:a9:1c:74:69:83:ad:e2:ef:3d:8c:cc:21:
20:d8:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:40:48 2024 by rpki-client on console-ams.rpki-client.org