Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS205610.roa
File:                     AS205610.roa (raw, json)
Hash identifier:          CNG1fndytnkreDW7bDVnp+uYhSIuQB7KU86+7DYQqow=
Subject key identifier:   58:01:9F:8D:25:62:EA:CE:CD:04:C2:D8:BE:3F:E4:38:06:1B:3F:4D
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       568346B5BE9065F1AC7C6A85B92BA899869D9F2D
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS205610.roa
Signing time:             Wed 20 Nov 2024 21:30:29 +0000
ROA not before:           Wed 20 Nov 2024 21:25:29 +0000
ROA not after:            Wed 19 Nov 2025 21:30:29 +0000
asID:                     205610
IP address blocks:        2a0b:4340:90::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:83:46:b5:be:90:65:f1:ac:7c:6a:85:b9:2b:a8:99:86:9d:9f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Nov 20 21:25:29 2024 GMT
            Not After : Nov 19 21:30:29 2025 GMT
        Subject: CN=58019F8D2562EACECD04C2D8BE3FE438061B3F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:77:c2:42:58:87:d5:72:59:1b:1b:14:6d:
                    4c:b2:b3:4f:1c:00:c4:1b:76:f2:2d:d7:57:c7:15:
                    78:b4:00:68:f5:b4:34:a2:69:c2:a2:51:d8:96:c5:
                    e3:fe:14:2e:ad:5a:13:da:43:ed:56:c2:1c:a1:cb:
                    2d:be:9b:26:2c:7d:c6:f0:a3:ef:5c:3a:ab:56:40:
                    85:96:a1:85:e5:cb:3b:68:ce:98:6a:57:89:9e:35:
                    10:5c:07:87:0a:7d:c0:2c:48:f4:dc:68:bb:c6:54:
                    e2:a0:12:42:74:cf:23:50:13:8b:36:3e:61:db:29:
                    65:3e:92:85:3e:ea:9a:2d:63:20:da:4b:a7:8b:87:
                    d5:a5:1b:f7:41:be:30:9c:41:7b:9b:65:a0:61:21:
                    ed:b4:89:42:64:b5:43:28:6d:03:ba:be:bf:e8:90:
                    ff:f2:41:b1:ee:1c:bd:a9:fd:ad:9c:65:c7:2a:fb:
                    40:50:91:52:e8:b6:61:45:e4:10:60:78:41:8a:ad:
                    0b:ec:dc:4a:31:47:ad:20:b6:8e:7f:b5:c1:89:09:
                    74:6b:40:26:a7:dc:a0:73:a6:f2:5e:48:cd:da:b7:
                    2f:85:ad:ed:21:63:ed:8e:31:24:5a:4f:e4:d6:85:
                    18:40:d2:1b:bc:55:b6:45:31:60:96:be:fe:97:43:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:01:9F:8D:25:62:EA:CE:CD:04:C2:D8:BE:3F:E4:38:06:1B:3F:4D
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205610.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:90::/44

    Signature Algorithm: sha256WithRSAEncryption
         b6:9e:a9:00:28:1e:93:8c:50:19:c4:44:58:17:75:0e:4f:aa:
         5b:6c:8b:54:5b:a0:7d:a0:d8:ab:c4:70:ea:21:9e:11:3b:d4:
         d0:4a:6e:15:34:98:de:03:f7:6c:3a:55:93:db:60:2a:7d:69:
         45:99:99:2c:93:dc:ae:a3:5e:fe:5a:54:7f:df:b3:f2:02:16:
         d6:2a:46:0c:93:87:4a:39:1c:6e:1a:a8:e1:3e:85:90:d6:c5:
         c2:8d:f8:da:1a:a5:c4:12:3a:41:d7:c2:99:4d:54:82:0e:75:
         34:c7:34:96:47:fb:46:87:43:3b:ec:bf:e0:7e:df:66:71:98:
         b5:db:6b:ba:86:5b:bf:4f:2d:0e:a3:12:ba:6c:2f:10:56:ba:
         e1:2b:57:a0:d8:b2:6c:d1:a2:08:0e:29:8c:fc:a5:68:42:c2:
         cb:7f:0a:60:ca:34:69:5d:92:d1:5f:39:8b:db:7b:a7:d6:9d:
         b1:91:45:09:13:4c:25:cb:1a:5c:a6:6d:bb:2b:57:c0:f3:88:
         8b:92:5b:36:58:fd:12:24:58:6d:18:6b:55:a6:e0:19:ad:5b:
         fd:e9:b1:86:69:1c:90:1b:18:0f:b6:91:23:ef:a2:4c:5f:c5:
         9b:c1:07:92:1a:3c:45:b7:18:73:4d:57:94:bc:52:d8:e5:e2:
         65:f0:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:05 2024 by rpki-client on console-fra.rpki-client.org