Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS61414.roa
File: AS61414.roa (raw, json)
Hash identifier: B1grZBO1rO8YFTVIY3I2HFZPM9hw7VRsk0+Yqir87oM=
Subject key identifier: 01:77:ED:02:DB:30:D0:07:C6:5E:62:D0:27:3C:1F:F5:60:EB:FA:76
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 74FEC84B9F893C093775A9B517C76D38C71E035A
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS61414.roa
Signing time: Fri 07 Feb 2025 08:30:43 +0000
ROA not before: Fri 07 Feb 2025 08:25:43 +0000
ROA not after: Fri 06 Feb 2026 08:30:43 +0000
asID: 61414
IP address blocks: 93.93.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:fe:c8:4b:9f:89:3c:09:37:75:a9:b5:17:c7:6d:38:c7:1e:03:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Feb 7 08:25:43 2025 GMT
Not After : Feb 6 08:30:43 2026 GMT
Subject: CN=0177ED02DB30D007C65E62D0273C1FF560EBFA76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:26:08:90:15:50:41:86:75:d9:45:4a:32:
e2:82:df:c2:64:cf:fc:6c:e6:f7:37:04:a6:11:37:
02:49:84:25:7b:10:2a:9a:54:0a:81:f5:0d:70:00:
8b:e6:b4:b8:48:e4:7f:36:90:d9:51:8b:63:f5:e7:
b0:4a:4e:de:47:ec:5c:d5:6c:ab:18:d8:0a:d2:bf:
f3:90:48:ad:ab:cd:86:0d:27:60:01:ad:37:bb:3c:
d2:8f:57:ce:d5:9e:2a:8f:7b:17:b4:27:10:27:7d:
ee:5e:fb:cf:dc:e0:15:3c:9c:25:ac:6a:34:a7:c4:
f8:51:37:ef:79:77:75:cc:c1:a0:1a:fb:9a:cb:2a:
34:b0:89:78:ee:f4:be:f0:7e:e8:20:64:5a:91:13:
2f:a4:9b:49:26:71:57:4d:b0:45:11:31:fc:6e:5e:
41:1b:75:ea:82:40:dd:7f:0f:ba:a6:ce:8e:eb:af:
34:ab:a7:46:30:e4:3a:1f:34:66:5d:d1:6c:b7:9a:
b0:9a:3f:f5:52:75:20:a7:b9:44:da:a1:fa:27:5a:
aa:88:ef:bd:de:f6:a0:7b:04:8f:3a:43:02:5e:87:
66:15:bb:34:c8:b8:3c:5e:22:6a:bb:ac:a2:56:1d:
4e:2f:6b:d2:10:3b:20:9a:0b:29:57:3b:b8:c2:45:
14:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:77:ED:02:DB:30:D0:07:C6:5E:62:D0:27:3C:1F:F5:60:EB:FA:76
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS61414.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.246.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:1e:a5:24:af:a1:65:40:7e:2e:c7:40:bf:2c:8f:04:4d:8e:
a6:cd:1e:bd:0b:9b:a3:22:46:b8:ce:8c:07:91:51:53:a6:6b:
0d:38:2b:70:21:49:2c:8c:53:5d:e4:62:c2:11:44:7d:53:9b:
bc:4a:25:4c:8e:14:fa:13:f9:41:bf:ed:f0:bd:bb:87:6b:d7:
52:7a:80:a1:a6:76:1a:0a:ed:58:37:ce:3f:d2:b9:cb:8f:e0:
3b:ed:7c:99:27:ce:86:74:8a:24:59:ed:23:df:1b:e8:60:97:
00:5f:7e:0f:09:bf:08:e7:de:2b:a9:f3:27:95:50:1b:04:db:
67:ec:1e:de:79:fc:b8:8b:cc:f0:14:93:b3:50:9c:8c:8e:02:
72:13:92:04:92:c5:e4:17:63:ea:13:5c:87:7f:e5:92:82:cd:
e2:43:7b:f3:3e:90:74:a0:d0:9b:10:df:c3:df:1c:08:a5:f8:
ad:56:7e:63:94:fb:af:f2:f8:5e:e4:bf:5a:71:01:51:3c:5c:
c1:84:3c:4e:d1:5e:ee:28:86:fb:bd:97:2c:c3:9f:a5:4f:d6:
9f:9d:8f:b0:6e:5a:f0:93:c4:cc:25:9d:06:f3:a7:09:54:12:
25:68:27:ed:e8:53:06:25:7c:b9:b0:1b:41:ea:cb:38:d4:c5:
0d:ca:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:18 2025 by rpki-client