Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS205603.roa
File: AS205603.roa (raw, json)
Hash identifier: b6GXK5Muj0MSt7qVOZh6ALsNQB6/ikt/TPBOan7b3ts=
Subject key identifier: A3:51:FD:63:10:23:30:BF:E4:B6:AA:80:84:29:F5:E6:1E:E3:0A:E7
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 22AA3C8B0FDF28A73C6703E404B3949896274DCA
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS205603.roa
Signing time: Wed 20 Dec 2023 21:30:09 +0000
ROA not before: Wed 20 Dec 2023 21:25:09 +0000
ROA not after: Wed 18 Dec 2024 21:30:09 +0000
asID: 205603
IP address blocks: 2a0b:4340:6::/48 maxlen: 48
2a0b:4340:60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:aa:3c:8b:0f:df:28:a7:3c:67:03:e4:04:b3:94:98:96:27:4d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 20 21:25:09 2023 GMT
Not After : Dec 18 21:30:09 2024 GMT
Subject: CN=A351FD63102330BFE4B6AA808429F5E61EE30AE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:28:5f:e2:f7:94:1d:f1:3d:4f:d5:38:00:
91:ab:84:68:c0:bc:d1:8f:18:ba:09:6f:5b:d9:0c:
ea:87:8d:ed:d7:49:78:ed:e4:c9:6c:45:aa:da:9a:
bd:33:cf:da:e4:33:73:bf:f4:36:80:78:4c:f3:1f:
19:a0:60:8b:7f:fe:31:3e:9b:a2:24:5f:c4:20:49:
ab:95:d6:0a:fc:3b:b4:00:49:54:1c:c5:f9:ad:32:
c1:f1:c8:e2:65:f2:05:9b:0d:54:17:30:11:e5:ae:
c1:c8:43:0c:a8:a5:d0:bf:b6:76:af:a8:ab:51:2a:
8e:43:2a:97:f0:da:b7:c7:27:16:ca:f0:cf:cd:41:
99:71:d6:6c:5b:26:79:73:01:06:65:a4:c4:70:af:
fa:e3:29:1a:31:f7:39:19:17:ba:12:0e:d4:2d:7d:
40:0e:cb:a1:6e:50:68:c4:58:c7:39:10:34:a3:f8:
73:ec:79:e4:ba:2b:e6:bc:cc:35:15:70:48:99:d7:
f1:a2:3b:6e:d1:6f:c3:e2:b5:b7:10:3a:2e:d8:69:
a0:5e:f7:3e:48:9a:7e:b8:0e:46:02:39:f3:da:f4:
86:ba:08:75:2d:6d:8a:97:7e:66:93:c3:4a:2a:2c:
33:95:a7:e5:5b:59:0c:08:cc:6c:e4:9c:ad:fc:59:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:51:FD:63:10:23:30:BF:E4:B6:AA:80:84:29:F5:E6:1E:E3:0A:E7
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205603.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:6::/48
2a0b:4340:60::/44
Signature Algorithm: sha256WithRSAEncryption
c1:69:9d:72:f3:df:82:f1:d5:20:2a:30:5c:3d:d4:c4:a1:45:
5b:83:8d:96:df:d8:63:dd:fc:54:52:52:0c:3a:56:d3:5d:91:
54:8d:eb:b8:a9:f1:74:8b:5e:da:f4:21:72:84:08:8a:09:eb:
60:d2:f4:e1:fb:99:f4:5e:f7:5e:ac:8d:ce:a9:8f:b6:27:58:
d1:be:25:b2:67:1d:4f:f8:d6:30:91:1b:c8:bd:36:61:fb:36:
a6:01:4e:68:d0:13:78:69:c9:e9:42:9e:90:0b:57:2c:80:b1:
db:2f:a0:e7:5b:35:af:ad:33:cd:64:88:97:51:26:c6:6b:a8:
9c:47:fa:0f:ee:40:88:3f:bb:99:96:d6:55:a5:9d:ab:e1:84:
c5:1b:29:15:ba:18:8e:d0:f4:b9:8c:e5:fd:44:7e:12:4c:21:
c0:33:9f:a5:a0:3d:c3:61:d3:55:cb:f4:b9:19:8d:39:50:a1:
20:73:37:f4:0e:80:74:2f:85:35:d9:7a:74:0a:38:2e:7c:9c:
b1:ef:ac:b7:9f:ac:6a:82:07:39:1e:03:aa:45:c8:47:2d:8f:
98:d5:70:91:44:51:33:e7:b1:d2:45:89:55:68:13:63:7f:50:
92:f7:97:a3:33:32:b2:44:e0:95:88:d2:9a:6e:e5:77:95:09:
61:f2:0b:84
-----BEGIN CERTIFICATE-----
MIIEqDCCA5CgAwIBAgIUIqo8iw/fKKc8ZwPkBLOUmJYnTcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMjAyMTI1MDlaFw0yNDEyMTgyMTMwMDlaMDMxMTAvBgNV
BAMTKEEzNTFGRDYzMTAyMzMwQkZFNEI2QUE4MDg0MjlGNUU2MUVFMzBBRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDChf4veUHfE9T9U4AJGrhGjA
vNGPGLoJb1vZDOqHje3XSXjt5MlsRaramr0zz9rkM3O/9DaAeEzzHxmgYIt//jE+
m6IkX8QgSauV1gr8O7QASVQcxfmtMsHxyOJl8gWbDVQXMBHlrsHIQwyopdC/tnav
qKtRKo5DKpfw2rfHJxbK8M/NQZlx1mxbJnlzAQZlpMRwr/rjKRox9zkZF7oSDtQt
fUAOy6FuUGjEWMc5EDSj+HPseeS6K+a8zDUVcEiZ1/GiO27Rb8PitbcQOi7YaaBe
9z5Imn64DkYCOfPa9Ia6CHUtbYqXfmaTw0oqLDOVp+VbWQwIzGzknK38WSN5AgMB
AAGjggGyMIIBrjAdBgNVHQ4EFgQUo1H9YxAjML/ktqqAhCn15h7jCucwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvQVMyMDU2MDMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAqC0NAAAYD
BwQqC0NAAGAwDQYJKoZIhvcNAQELBQADggEBAMFpnXLz34Lx1SAqMFw91MShRVuD
jZbf2GPd/FRSUgw6VtNdkVSN67ip8XSLXtr0IXKECIoJ62DS9OH7mfRe916sjc6p
j7YnWNG+JbJnHU/41jCRG8i9NmH7NqYBTmjQE3hpyelCnpALVyyAsdsvoOdbNa+t
M81kiJdRJsZrqJxH+g/uQIg/u5mW1lWlnavhhMUbKRW6GI7Q9LmM5f1EfhJMIcAz
n6WgPcNh01XL9LkZjTlQoSBzN/QOgHQvhTXZenQKOC58nLHvrLefrGqCBzkeA6pF
yEctj5jVcJFEUTPnsdJFiVVoE2N/UJL3l6MzMrJE4JWI0ppu5XeVCWHyC4Q=
-----END CERTIFICATE-----
Generated at Sun May 19 11:41:58 2024 by rpki-client on console-ams.rpki-client.org