Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS134176.roa
File: AS134176.roa (raw, json)
Hash identifier: gEfxDp4upJ7IzUdlXKh2OIP1/l7cHiDr9m+UNu8MutM=
Subject key identifier: 8F:C0:52:DE:61:C2:E8:CF:30:24:2F:FF:CE:BC:9E:99:C9:19:9E:50
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 61241872D824E09E35C18039D00888DAD1CFA448
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS134176.roa
Signing time: Wed 20 Dec 2023 21:30:08 +0000
ROA not before: Wed 20 Dec 2023 21:25:08 +0000
ROA not after: Wed 18 Dec 2024 21:30:08 +0000
asID: 134176
IP address blocks: 2a0b:4340:80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:24:18:72:d8:24:e0:9e:35:c1:80:39:d0:08:88:da:d1:cf:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 20 21:25:08 2023 GMT
Not After : Dec 18 21:30:08 2024 GMT
Subject: CN=8FC052DE61C2E8CF30242FFFCEBC9E99C9199E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:34:d1:0a:5e:e9:30:ae:e4:dd:6f:29:06:
39:16:6b:34:4f:7e:df:8c:28:3d:ad:a0:08:b6:04:
ba:95:4d:6f:7f:4b:f3:d4:6a:cc:63:2c:c2:e3:e2:
2b:95:e4:38:d4:70:3d:47:3c:e5:d1:c4:ce:a4:1d:
a2:d4:ec:cb:21:ec:7f:4e:b1:da:eb:f6:a5:59:71:
09:70:2d:30:25:ec:67:a5:d5:b5:12:e0:be:1e:df:
21:d9:7d:13:1e:af:10:ec:09:0a:f0:ef:f9:96:5a:
43:72:71:1c:21:3f:48:5a:1e:36:87:13:dc:f8:80:
b2:94:42:68:9a:2e:3d:fb:d4:0c:7b:f4:86:ad:ec:
4e:f4:e2:3a:31:50:c8:3c:31:42:4c:04:92:87:59:
e0:01:4c:92:6e:83:69:c0:29:6a:14:b1:4f:b6:45:
e4:85:20:aa:a1:f9:ef:0c:37:fe:9a:ec:93:1e:c8:
5f:bd:dc:71:ef:63:b5:40:8c:dd:18:25:a7:f9:1a:
54:1e:fb:86:e8:d3:30:f8:ba:00:cb:a8:a4:ab:57:
33:9a:1c:cf:ef:6f:b1:0f:5d:95:17:69:9b:0c:e2:
98:03:e6:22:f4:b2:ea:6a:bc:8c:d0:87:9f:5f:03:
7b:f4:bd:4e:36:ba:21:81:04:6a:f3:0e:2c:97:9a:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C0:52:DE:61:C2:E8:CF:30:24:2F:FF:CE:BC:9E:99:C9:19:9E:50
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS134176.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:80::/44
Signature Algorithm: sha256WithRSAEncryption
c5:47:da:a1:b7:15:e7:d0:69:a1:28:b9:af:eb:5a:e4:01:68:
1d:e5:02:9c:e5:9c:46:c9:b3:32:e5:e3:34:03:c4:6c:9c:e1:
18:ed:74:02:60:5f:f5:13:23:63:f7:39:71:f1:23:f6:20:ba:
12:ba:ec:d6:6a:11:86:4f:c4:dc:44:ac:37:2a:a7:bb:1b:27:
a4:22:25:a7:bc:9a:8e:60:fe:9e:0d:05:a6:2c:9e:7a:f7:b2:
82:6c:2c:1a:41:c1:fc:41:2d:d3:ec:e3:47:67:88:6d:8d:f2:
40:a6:42:e1:76:7d:48:0a:f5:44:0d:03:2e:0c:ff:1e:75:01:
7a:a3:78:fb:87:62:38:97:a8:66:0e:0a:35:ff:51:16:e4:31:
72:51:41:52:61:40:c2:4d:84:c1:ce:16:c4:4f:eb:13:6a:28:
b5:49:e0:25:a5:a5:35:07:4f:8e:95:d4:da:a4:a2:83:19:eb:
3c:e1:4b:35:70:87:cd:e1:80:70:d1:ba:8b:d2:c5:ca:f1:76:
99:5a:6c:97:62:c3:c1:c0:3e:60:f5:ce:b4:7c:43:ff:29:3e:
fd:64:8b:c9:ee:cb:3a:c7:6f:a0:3d:5d:fe:cb:f4:96:6b:d6:
30:39:ca:1a:41:68:9f:54:07:80:98:cf:fd:52:e8:7b:82:73:
8a:fa:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:09:15 2024 by rpki-client on console-ams.rpki-client.org