Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS49466.roa
File: AS49466.roa (raw, json)
Hash identifier: +r3BOG0kQ/r/Kw7LNnHSscoEOFLcg9hxzdIhj+DXDec=
Subject key identifier: C2:62:BF:08:64:05:78:6F:9E:01:04:B6:C7:0D:C7:D5:3E:DB:99:D0
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 5A61AB4E9B64686DD8ADFF007F4A9300AF52BB8D
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS49466.roa
Signing time: Wed 20 Dec 2023 21:47:56 +0000
ROA not before: Wed 20 Dec 2023 21:42:56 +0000
ROA not after: Wed 18 Dec 2024 21:47:56 +0000
asID: 49466
IP address blocks: 93.93.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Nov 2024 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:61:ab:4e:9b:64:68:6d:d8:ad:ff:00:7f:4a:93:00:af:52:bb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 20 21:42:56 2023 GMT
Not After : Dec 18 21:47:56 2024 GMT
Subject: CN=C262BF086405786F9E0104B6C70DC7D53EDB99D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:98:10:ac:bc:74:ee:0f:8d:5f:9b:38:ba:
da:66:01:95:5a:17:04:f1:46:6b:5d:6f:8e:b5:aa:
08:ff:b7:a9:78:1a:0d:19:23:20:12:a0:44:5f:2e:
87:81:42:76:9f:e1:02:4e:d4:cf:49:cd:86:66:ad:
2c:a9:9c:df:71:4b:7f:5c:de:f5:2e:97:66:84:22:
d7:79:bf:d9:58:2b:51:c8:8f:8f:3a:4b:bf:ab:c4:
63:da:2e:e7:f4:de:f0:b5:6b:2f:30:3c:ee:e5:06:
d7:9c:d0:5c:69:e4:17:c4:6b:54:6f:3e:3b:7a:bc:
6a:e2:86:dc:da:ef:b3:e5:7e:b6:4a:c8:38:c7:34:
b8:44:a9:12:89:2e:b3:88:c8:bd:04:6d:77:f7:98:
a2:2f:1d:ab:62:dc:81:5e:c9:2f:e1:5c:d5:d4:ac:
b3:b9:7c:62:73:5c:31:3f:97:78:6b:44:99:5a:d9:
2f:54:61:ec:28:0e:54:b2:25:b6:71:51:7d:33:8f:
b4:11:12:32:f9:46:e5:44:86:d9:f6:85:4e:95:3d:
7b:fb:3b:65:96:c8:be:76:cb:b7:45:3b:45:0a:14:
cc:70:59:2b:0b:d4:e0:5a:dc:ae:d1:0e:74:27:a4:
8f:fc:6c:cc:46:b6:05:ad:5f:f1:ed:62:e1:9a:5a:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:62:BF:08:64:05:78:6F:9E:01:04:B6:C7:0D:C7:D5:3E:DB:99:D0
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS49466.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.244.0/22
Signature Algorithm: sha256WithRSAEncryption
36:d6:8a:de:1b:fa:8a:e3:9b:85:38:b3:60:d6:9d:b0:c8:39:
5c:de:3c:2b:8e:37:b4:b7:69:fd:08:81:0b:14:e7:7e:a9:33:
de:dc:d0:d6:c4:70:e7:c6:5d:42:9a:b2:fc:0c:7e:ae:ee:44:
cb:e1:1f:75:06:76:f7:43:f6:fc:7e:5b:be:4b:cc:1a:96:68:
f1:fb:74:4e:0b:f4:c4:2e:b7:0c:0f:f5:d3:42:b4:7b:af:12:
e6:b8:ab:d4:08:00:f9:0f:76:f7:00:e2:32:d0:1b:f1:6d:d9:
92:0e:2b:1c:47:2a:51:5d:d7:7b:2b:cb:45:56:13:fe:a5:a2:
b8:f5:95:79:6a:ec:a3:8a:ce:d7:c3:f7:8f:83:c2:80:56:d6:
84:81:b5:8b:cf:23:38:8a:68:1e:15:da:4e:8c:e1:b3:65:6e:
76:7e:55:b0:21:ab:bd:b9:a8:47:7a:e2:a3:a9:9a:77:f5:5d:
a2:b6:73:26:24:cc:57:cb:e6:7c:8d:54:ac:47:b0:45:6e:8e:
f8:09:22:32:43:bf:97:d1:a8:ef:59:c2:7f:c5:64:66:98:50:
bd:57:eb:73:2f:54:59:0a:07:fb:cf:4e:26:01:b9:77:be:a9:
24:8f:8a:97:1f:1a:41:f0:2b:a5:a9:94:91:26:eb:35:64:ba:
25:8e:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 21:19:54 2024 by rpki-client on console-ams.rpki-client.org