Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS50069.roa
File: AS50069.roa (raw, json)
Hash identifier: wM8gv0FO6hTaVvFbXaagNpyG5F9/YFqNL/AwKr8MZPc=
Subject key identifier: 35:7A:6D:1D:9B:1E:86:01:03:35:D1:AA:F9:E8:20:68:63:77:C6:13
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 3CA8F85173B6236319ECD26049A0282B06A76B6C
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS50069.roa
Signing time: Mon 01 Sep 2025 07:31:06 +0000
ROA not before: Mon 01 Sep 2025 07:26:06 +0000
ROA not after: Mon 31 Aug 2026 07:31:06 +0000
asID: 50069
IP address blocks: 45.142.245.0/24 maxlen: 24
188.244.98.0/23 maxlen: 24
2a0d:2900::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a8:f8:51:73:b6:23:63:19:ec:d2:60:49:a0:28:2b:06:a7:6b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 1 07:26:06 2025 GMT
Not After : Aug 31 07:31:06 2026 GMT
Subject: CN=357A6D1D9B1E86010335D1AAF9E820686377C613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:b1:6d:f4:c2:35:0d:f4:0f:a6:ce:dc:a2:
56:74:11:fa:69:be:1c:5b:44:4d:f7:1a:30:df:3c:
1f:5b:5e:98:ef:ff:40:5f:81:78:9f:24:99:9d:99:
f3:ae:f6:c8:7c:94:32:83:d0:22:05:67:b2:68:62:
f1:6f:f7:43:d4:75:8e:34:2f:57:5b:66:79:24:40:
f7:0d:9d:6b:67:01:b1:60:f2:d1:26:a8:07:92:cb:
11:41:84:97:e3:34:be:53:aa:72:a8:5d:e6:82:97:
a1:a0:09:5a:4b:cf:37:e6:ce:ca:50:5c:57:ad:23:
09:44:75:a6:f2:f8:14:91:3c:48:f2:3d:91:02:6c:
bd:bc:43:e3:6c:30:e9:2f:64:c5:65:3d:96:5b:48:
08:f9:68:83:ec:7c:f4:9b:79:6e:37:8a:52:ee:36:
1f:1b:7a:76:1e:32:47:5b:f3:72:c2:11:19:f4:db:
65:22:c0:51:13:22:18:80:ac:2e:e7:e6:47:36:ac:
27:ac:e0:57:23:02:41:2b:87:e0:a1:99:72:40:ef:
32:76:d9:d7:92:b3:f4:58:64:c9:d3:43:7f:49:e2:
7e:8a:f9:88:9e:3d:60:45:07:5d:2a:6b:8a:0a:4a:
61:15:5e:9f:f4:4b:28:7c:b9:36:ff:9a:c9:84:01:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7A:6D:1D:9B:1E:86:01:03:35:D1:AA:F9:E8:20:68:63:77:C6:13
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS50069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.245.0/24
188.244.98.0/23
IPv6:
2a0d:2900::/32
Signature Algorithm: sha256WithRSAEncryption
68:bd:c0:54:c3:96:5c:16:89:b0:6a:cb:99:c1:f2:4e:9b:24:
b3:3e:b7:7d:51:3c:65:50:bb:f7:98:ff:01:11:db:d9:90:a5:
10:3b:66:fb:35:39:b1:be:a2:89:df:03:e4:fe:fe:ec:ec:99:
4b:66:7b:2e:61:80:ab:74:64:13:16:0c:3e:08:47:8d:73:7f:
7f:07:0b:8e:b5:82:ce:e2:dc:47:56:87:93:72:78:83:05:1c:
a7:e6:1f:e1:d4:21:88:b7:20:4d:44:a9:04:2b:d9:8e:cf:b1:
b1:d7:a5:8f:26:bc:b0:8d:7a:5a:5d:5e:f1:ba:16:71:32:15:
a3:70:f8:bf:38:dc:6c:86:42:cf:8a:b4:83:6d:05:4c:f5:2d:
68:aa:1e:67:10:83:32:eb:fe:8e:c2:1d:19:2f:1c:ad:80:b1:
34:3c:1c:70:03:d6:02:87:ac:22:83:da:d1:14:6c:51:b5:95:
65:88:f7:6e:2b:a0:ba:f4:d5:a0:d0:79:f6:63:1e:19:04:ff:
ec:0a:00:5c:8e:ca:c9:a7:0c:f7:96:8b:5b:e6:b1:61:c7:ed:
62:bf:32:09:d1:82:d0:da:5c:ea:39:8c:08:d3:86:da:1b:1d:
50:b7:6a:11:4a:20:37:82:b5:67:14:e4:4c:2c:0e:8f:9c:6b:
eb:27:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:18:00 2025 by rpki-client