Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS134176.roa
File: AS134176.roa (raw, json)
Hash identifier: l+0dq2j9ynSMramn3g6pXdU+6X15oxHOUAUxSuwkj6c=
Subject key identifier: 61:91:87:0B:74:8D:8F:14:C4:F4:00:E3:72:18:C7:2F:43:8A:3E:29
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 5821584336EDFA4C9D0DB623F94904BA0FD35FF2
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS134176.roa
Signing time: Wed 20 Nov 2024 21:30:33 +0000
ROA not before: Wed 20 Nov 2024 21:25:33 +0000
ROA not after: Wed 19 Nov 2025 21:30:33 +0000
asID: 134176
IP address blocks: 2a0b:4340:80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:21:58:43:36:ed:fa:4c:9d:0d:b6:23:f9:49:04:ba:0f:d3:5f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Nov 20 21:25:33 2024 GMT
Not After : Nov 19 21:30:33 2025 GMT
Subject: CN=6191870B748D8F14C4F400E37218C72F438A3E29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:7f:24:54:e9:b5:74:03:19:bb:80:bf:3a:
5e:d9:3d:ba:8e:a1:9a:f6:3a:65:16:e8:f2:1b:de:
7e:d0:36:08:2f:64:2c:05:01:4b:e8:b4:06:d8:c5:
24:af:49:36:95:5c:ff:09:cd:20:d9:91:34:f3:66:
3b:4a:2b:57:a9:56:9b:19:75:8f:e7:b1:8d:e8:b7:
c0:f2:8a:cc:3c:45:d2:a4:52:14:63:6b:b6:12:98:
be:cf:98:4b:5d:dc:57:20:68:94:89:cf:67:6d:0f:
24:24:fc:dc:6e:ca:7d:a7:cc:af:19:fa:7d:81:d4:
56:3d:d9:30:56:a9:25:7a:68:df:b6:76:88:0a:32:
6f:91:a8:2a:45:00:a3:98:d0:39:0a:cb:09:d0:cd:
af:28:16:9a:39:61:9e:4b:9c:05:da:11:fd:b5:e7:
ca:da:6a:ba:b5:ec:08:bb:cf:34:51:8c:70:1a:58:
c4:a0:0d:4d:18:a8:83:1e:e0:74:30:b7:85:4b:5c:
54:b5:89:d4:31:66:ad:0d:b0:66:06:55:63:29:28:
bf:ac:b0:df:4c:1b:d7:65:ec:fc:24:ec:72:f9:64:
20:a9:c2:7e:74:0f:fc:ec:ba:25:4b:b5:88:e7:c5:
ae:8a:54:28:f6:d2:16:08:39:4e:35:69:88:64:d2:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:91:87:0B:74:8D:8F:14:C4:F4:00:E3:72:18:C7:2F:43:8A:3E:29
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS134176.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:80::/44
Signature Algorithm: sha256WithRSAEncryption
79:b3:8c:24:6a:df:62:fe:18:89:aa:02:56:f1:eb:a9:12:8d:
3a:34:30:2a:72:47:5d:16:d0:16:83:c0:df:56:75:6f:30:4e:
b5:9c:8d:57:03:74:d6:9c:eb:1d:3f:9f:6d:a1:ed:8e:83:18:
39:ab:d7:c4:a5:30:c0:11:27:b7:db:42:9d:4c:6a:d0:01:7c:
36:5b:bb:d7:a7:c9:83:3c:73:40:3e:7a:e7:c6:7c:b0:2b:c6:
35:b2:1f:d3:30:8e:e3:b0:44:ec:81:13:9f:95:96:e0:49:4e:
e9:9b:6b:e5:39:34:aa:c6:2f:d3:05:c9:27:e3:8c:58:a7:4a:
a2:d9:3e:e4:40:be:59:61:da:7a:60:f1:8a:63:11:e1:59:d8:
49:2d:7c:bf:22:cd:3f:d2:52:11:f6:73:65:d7:cd:e6:61:b5:
28:c9:f5:c4:4d:3e:db:c2:0d:53:c3:73:5d:3c:79:9a:1c:fd:
76:33:8d:5f:bf:c2:4f:30:0f:c4:4c:32:13:88:37:94:dc:0a:
d1:30:b0:e3:42:dd:fa:36:48:75:ae:7d:50:4f:b6:b3:4e:a3:
07:08:17:e2:45:38:f4:67:70:64:ba:c2:d5:19:e6:1c:9c:14:
8c:b2:a3:d6:78:b3:27:60:6b:ab:7c:6a:76:32:e1:bf:66:1e:
cc:c5:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:49 2024 by rpki-client on console-ams.rpki-client.org