Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS205603.roa
File:                     AS205603.roa (raw, json)
Hash identifier:          //T+E3L/VN5dC5ePPuIB+Skdn/z4I/wb64Ns5rAbRHw=
Subject key identifier:   8B:05:0F:0F:61:AD:7B:7F:AE:92:48:E7:23:27:3A:59:6F:8B:67:AA
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       716EA291EADEAC2335B286B6857DC3E94AFF9D41
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS205603.roa
Signing time:             Wed 20 Nov 2024 21:30:32 +0000
ROA not before:           Wed 20 Nov 2024 21:25:32 +0000
ROA not after:            Wed 19 Nov 2025 21:30:32 +0000
asID:                     205603
IP address blocks:        2a0b:4340:6::/48 maxlen: 48
                          2a0b:4340:60::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6e:a2:91:ea:de:ac:23:35:b2:86:b6:85:7d:c3:e9:4a:ff:9d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Nov 20 21:25:32 2024 GMT
            Not After : Nov 19 21:30:32 2025 GMT
        Subject: CN=8B050F0F61AD7B7FAE9248E723273A596F8B67AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:7c:57:06:13:0b:01:ef:3d:f3:75:fd:7a:
                    77:27:5b:d7:68:37:2a:e8:d0:7f:fd:b9:36:10:0f:
                    a4:37:2c:2e:66:17:73:48:a1:4b:72:f2:c2:98:13:
                    d8:93:2e:10:d1:62:f9:05:47:a0:4e:6c:d5:9a:b8:
                    55:ab:a2:06:54:41:b4:b1:da:76:43:59:41:0c:72:
                    be:b1:1c:71:22:ab:aa:df:53:cd:cc:72:70:2e:61:
                    65:14:e6:ce:eb:12:3a:ab:fe:14:ed:35:f1:f6:20:
                    f4:b0:53:fb:b1:1f:6b:6a:65:c6:49:17:a9:eb:0b:
                    3b:14:ac:61:79:3b:c4:f7:89:b0:f4:54:00:5c:00:
                    46:3a:b8:d5:6b:21:38:43:9b:29:19:6e:cf:bf:a0:
                    48:28:cb:1e:e3:2f:d6:a9:78:6f:39:48:0b:a5:6a:
                    d8:e9:13:dc:ac:24:fa:e2:a8:95:94:28:11:69:1a:
                    35:48:81:de:60:fa:9b:3a:ca:69:80:f1:1b:c4:dd:
                    35:41:03:80:a9:81:f1:9d:48:aa:f8:05:8b:6c:bd:
                    bc:23:75:10:9f:aa:20:d6:14:96:1c:3b:93:e8:c9:
                    ee:00:94:4b:a8:8a:13:2b:c9:cd:af:6f:02:33:4d:
                    13:54:12:f3:87:8b:0e:48:a0:09:bd:82:99:27:8b:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:05:0F:0F:61:AD:7B:7F:AE:92:48:E7:23:27:3A:59:6F:8B:67:AA
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205603.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:6::/48
                  2a0b:4340:60::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:e1:0b:96:be:67:6c:c4:46:be:b0:2a:77:54:03:36:d1:3c:
         d4:62:49:06:cd:41:fc:a3:42:15:03:75:02:d7:69:eb:e0:6d:
         93:d0:25:bf:8f:c0:74:ec:01:cb:47:ae:2f:cb:2a:b4:ae:ac:
         17:94:52:c6:a8:fa:39:86:cf:9b:f1:f3:67:fa:ad:a3:9f:8f:
         38:18:c1:0e:49:a9:0b:94:c9:13:3c:86:75:81:2d:ca:98:0c:
         db:51:68:25:c0:d4:f2:6e:7a:1d:7b:2e:6a:8e:a5:dd:a7:c2:
         34:92:6c:02:15:a6:91:43:76:0c:5e:77:b9:fc:0c:e5:bb:1f:
         b1:d6:8e:bc:7c:b6:b0:08:f8:ad:87:bc:5f:22:c4:5a:b2:db:
         bb:95:29:16:bd:db:eb:f8:7c:c2:9b:cd:59:70:85:ad:75:a0:
         77:3e:ae:64:14:99:cc:02:e5:87:53:47:d1:9f:5a:0d:f5:2f:
         d6:14:57:bc:4d:23:ef:6b:7d:ce:e9:15:6a:56:44:a6:f1:f3:
         e4:2e:3b:63:98:16:72:07:4b:05:69:62:d6:78:dc:50:46:17:
         60:f8:e9:7d:e6:5f:71:30:05:ef:9b:bd:5c:9b:4f:3e:39:c9:
         4a:b1:ec:7a:de:65:64:5a:d7:4c:4f:26:e0:5f:e8:ec:93:0f:
         04:2f:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:01:28 2024 by rpki-client on console-ams.rpki-client.org