Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS23961.roa
File: AS23961.roa (raw, json)
Hash identifier: LhAUfTK/KnleM7KidDUNJqVAVLYyfiSJ5Hkeny+HOkw=
Subject key identifier: 4F:E6:0F:E7:2A:12:A7:96:6D:AB:9C:60:F2:4E:DD:81:EA:64:5B:72
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 3C09CAAF8A2F0D0971E93A2C1EBA3252F6A8C67B
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS23961.roa
Signing time: Thu 10 Jul 2025 18:54:28 +0000
ROA not before: Thu 10 Jul 2025 18:49:28 +0000
ROA not after: Thu 09 Jul 2026 18:54:28 +0000
asID: 23961
IP address blocks: 45.11.104.0/22 maxlen: 24
45.11.104.0/23 maxlen: 24
45.150.240.0/22 maxlen: 24
45.150.242.0/23 maxlen: 24
188.244.96.0/23 maxlen: 24
194.156.162.0/23 maxlen: 24
2a0b:4341:b02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:09:ca:af:8a:2f:0d:09:71:e9:3a:2c:1e:ba:32:52:f6:a8:c6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Jul 10 18:49:28 2025 GMT
Not After : Jul 9 18:54:28 2026 GMT
Subject: CN=4FE60FE72A12A7966DAB9C60F24EDD81EA645B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:80:93:7b:7b:69:c9:8d:dc:68:66:d0:68:fd:
fe:1d:cb:6b:22:63:3e:ab:f2:66:67:8f:79:86:2f:
c1:55:59:c3:53:18:a3:64:b9:c5:13:38:54:66:6a:
18:28:77:b5:94:fb:8f:16:44:32:1a:05:75:ad:f0:
50:c6:04:55:0c:92:5a:cd:82:d1:1a:fc:f2:65:82:
1d:bb:91:ed:de:5f:58:fc:86:62:74:15:94:cc:83:
be:23:23:0b:5e:28:6a:46:f2:33:74:24:0b:aa:8e:
84:97:77:fd:1c:65:ce:1c:aa:94:27:94:6e:01:77:
59:40:f6:ee:c3:a0:df:55:7f:c1:1d:c6:40:38:c3:
c0:2e:ea:87:c1:f0:77:0c:6a:11:4a:d3:7c:7b:e2:
c1:cc:55:75:67:c3:a6:72:7b:e2:c6:c2:a1:78:31:
b1:f6:19:d7:5a:00:6d:30:45:fc:de:8f:51:34:1a:
dc:bb:2f:60:06:29:cf:9d:1c:d4:53:e8:91:34:3e:
a2:c8:c7:32:a6:75:e5:73:e2:8b:50:91:95:f6:da:
bc:b7:01:1b:64:b5:2f:51:15:c0:9e:5f:38:32:33:
c2:2b:e4:bd:ae:e2:0c:87:ef:80:2a:98:a0:b6:d5:
27:fb:49:d6:45:8f:5d:d5:31:e2:2f:56:f8:ca:fb:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E6:0F:E7:2A:12:A7:96:6D:AB:9C:60:F2:4E:DD:81:EA:64:5B:72
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS23961.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.104.0/22
45.150.240.0/22
188.244.96.0/23
194.156.162.0/23
IPv6:
2a0b:4341:b02::/48
Signature Algorithm: sha256WithRSAEncryption
57:65:65:6b:0b:cb:a3:27:a8:3d:94:c1:cc:0a:c5:16:38:a9:
e4:a3:87:65:45:8f:1d:a7:8c:8f:cf:f3:c9:4c:e2:4d:91:c3:
3f:57:f4:43:84:f5:78:7f:e3:26:62:a0:e0:c8:35:bb:40:ef:
ca:96:63:72:d3:02:5d:5c:65:c3:d2:aa:b5:4e:c3:52:c6:a4:
10:5e:f9:8b:cd:10:48:dc:7a:d9:1b:3e:48:d0:bb:fe:62:4d:
21:be:51:3c:1d:ff:62:08:df:70:06:a0:0f:d9:62:85:8a:e3:
d9:02:15:75:db:6a:2c:02:fe:48:86:b5:ef:7c:94:53:7c:e5:
a7:88:ae:40:c7:dc:9b:d2:a0:da:d1:c8:e7:19:85:a9:38:ae:
e2:fc:30:13:6e:14:ff:c5:d0:e6:19:a4:11:15:16:80:f7:af:
bd:93:c2:e6:08:c4:f5:56:ed:8e:a8:a0:a3:33:00:df:e3:58:
db:3e:c6:34:c1:53:35:95:9e:e6:43:88:e6:6e:88:49:1c:0d:
e9:b3:ac:c4:14:c8:1c:ec:9d:94:a8:7a:72:da:e3:a1:00:99:
fe:89:e1:fd:a1:3c:e8:d3:fd:a1:29:d8:e5:7d:61:77:b1:19:
65:5b:89:0e:31:df:19:40:b7:fa:c3:3b:af:20:75:e2:65:54:
76:78:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:46:12 2025 by rpki-client