Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS137940.roa
File: AS137940.roa (raw, json)
Hash identifier: IsmicgQwl0KHlFzZkUL42B1CdMVzCW7tQai73q6zeGs=
Subject key identifier: 63:EF:2F:7C:79:44:67:20:0F:F5:85:E7:23:DC:03:06:12:5D:0C:37
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: E92E951F45223BF901CF662785D1F63EEB8E12
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS137940.roa
Signing time: Wed 20 Dec 2023 21:30:09 +0000
ROA not before: Wed 20 Dec 2023 21:25:09 +0000
ROA not after: Wed 18 Dec 2024 21:30:09 +0000
asID: 137940
IP address blocks: 45.142.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e9:2e:95:1f:45:22:3b:f9:01:cf:66:27:85:d1:f6:3e:eb:8e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 20 21:25:09 2023 GMT
Not After : Dec 18 21:30:09 2024 GMT
Subject: CN=63EF2F7C794467200FF585E723DC0306125D0C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:d0:7b:8f:6b:6e:de:23:16:53:2f:76:3f:
c8:e8:5a:eb:34:75:44:cc:e2:0a:4a:82:3a:9e:1e:
37:f0:d0:ca:a3:df:cc:44:f7:4e:05:b4:f6:59:33:
3d:ff:60:64:00:a1:90:8a:63:2c:29:40:9b:f0:5c:
c8:3f:6c:15:80:cd:5a:cd:ed:60:07:88:22:6d:6a:
fb:1d:16:0d:82:95:0e:eb:2b:5f:97:8e:76:6d:cf:
35:52:7d:3e:64:8e:9a:f3:c1:29:72:a1:2d:4b:78:
35:21:a0:56:cf:1b:26:3e:f8:29:51:7c:45:e0:97:
e5:b6:91:62:47:d7:c8:02:c6:4f:a3:3a:7d:b2:a6:
ef:07:b7:06:75:8e:c3:08:fa:86:1e:f4:54:f2:31:
4b:68:ac:48:75:7d:af:d4:ce:5d:61:cd:b3:4a:42:
69:11:47:a2:0a:99:36:e9:a2:0c:38:ea:64:c9:94:
3f:0b:3a:e9:4a:89:1e:17:59:b4:99:b8:79:b8:8a:
f0:c4:5c:42:00:a6:2d:e3:78:b8:4c:10:31:65:0d:
0d:cb:b7:c2:87:ce:3e:a7:8c:86:fb:d8:f3:c1:4f:
e6:c3:b5:ab:35:df:5b:f3:f3:40:4b:03:85:cb:3d:
e9:e0:6a:06:c6:91:ae:c3:4f:6b:ba:1b:c1:6c:37:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EF:2F:7C:79:44:67:20:0F:F5:85:E7:23:DC:03:06:12:5D:0C:37
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS137940.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.245.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:94:9b:b8:75:6a:36:30:f3:8d:a4:b1:dc:d7:02:d0:16:e3:
37:c5:4c:7c:10:16:72:65:f9:c8:ce:b2:e5:63:b5:ed:70:28:
bd:62:23:26:23:fe:90:ee:6f:20:03:c9:5f:fb:aa:e3:a6:e7:
46:04:77:85:d5:cd:e0:6f:51:e1:bf:2d:47:8c:b0:df:9e:de:
98:f2:01:de:ad:3a:49:97:78:e7:03:6d:88:af:3c:09:9a:48:
43:06:e6:1c:ac:bc:bf:4c:83:a4:db:45:aa:4d:ac:42:52:27:
a5:20:b1:f5:fd:37:f1:ae:a9:19:91:a5:c7:bb:7b:6d:87:a4:
e0:97:31:f7:57:62:fc:cf:bf:50:4c:fe:95:ea:6b:9a:25:f2:
8a:3c:68:58:f3:2c:a3:58:d7:b5:a1:0a:81:2d:5d:c6:0a:6d:
0d:6e:59:eb:b3:a6:70:b3:f6:a0:11:ee:96:d2:b7:23:4c:78:
28:24:d7:a8:92:3b:a3:eb:28:37:47:35:82:67:db:62:ec:de:
e1:9a:e5:c1:8a:fa:6d:60:6b:e7:2d:51:8d:09:3f:a4:92:7d:
1e:46:8b:24:3a:34:71:18:d6:41:8c:8a:62:fd:17:be:fe:13:
2b:f3:2c:8f:4e:1a:8a:fd:45:55:e8:bb:e5:51:3d:36:ad:e8:
b5:9f:35:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 11:41:58 2024 by rpki-client on console-ams.rpki-client.org