Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS205610.roa
File: AS205610.roa (raw, json)
Hash identifier: Stf885lLDnWkYoNrv4NjNpe9wzT4G59OsPHzfbFnUFo=
Subject key identifier: 74:F0:1C:D3:8C:8D:E9:C7:90:78:4F:D4:82:36:01:88:EC:08:15:58
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 50F5F74F2CAD87BCFDD71D037853AD16033F3736
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS205610.roa
Signing time: Wed 20 Dec 2023 21:30:10 +0000
ROA not before: Wed 20 Dec 2023 21:25:10 +0000
ROA not after: Wed 18 Dec 2024 21:30:10 +0000
asID: 205610
IP address blocks: 2a0b:4340:90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f5:f7:4f:2c:ad:87:bc:fd:d7:1d:03:78:53:ad:16:03:3f:37:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 20 21:25:10 2023 GMT
Not After : Dec 18 21:30:10 2024 GMT
Subject: CN=74F01CD38C8DE9C790784FD482360188EC081558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:3c:1c:7c:97:86:14:f7:54:38:19:f5:f2:
15:12:5f:68:1f:fb:45:0f:cd:6f:40:71:bd:b5:a2:
11:5e:3c:e7:10:0a:96:a2:25:da:d2:50:a0:6f:31:
a0:06:77:07:0c:7b:fa:21:e9:e7:83:04:c5:5b:15:
0e:6d:41:fe:20:f0:2e:5b:f5:32:9d:3a:6b:e3:47:
29:70:08:e1:ed:61:11:fa:eb:05:cc:d8:91:6f:98:
48:9a:87:18:0f:c3:a1:b3:82:03:ea:29:1f:10:e0:
c4:95:06:d7:14:34:b0:fa:ea:a9:28:63:40:a7:9d:
0f:57:b3:c4:97:76:79:c9:ee:dd:93:f6:f0:6a:84:
3d:d5:37:66:3b:f9:07:c5:18:40:80:1b:0b:73:96:
6b:ed:b9:45:54:71:bc:fb:15:30:df:f1:12:9c:0d:
23:e1:37:fa:25:8d:c0:84:b5:2f:33:e8:49:26:10:
39:f8:24:b5:c1:68:15:89:35:a0:27:aa:b8:6d:2d:
a1:5f:80:83:e2:4e:00:74:55:a9:24:8a:b6:de:23:
e0:dc:c1:89:2c:fe:63:07:1e:fd:31:40:7f:d1:ca:
5f:61:5a:3f:b7:95:e9:28:21:1b:7c:94:ed:c6:54:
0d:42:0a:27:06:c1:81:86:79:33:5c:3e:28:cc:ce:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F0:1C:D3:8C:8D:E9:C7:90:78:4F:D4:82:36:01:88:EC:08:15:58
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:90::/44
Signature Algorithm: sha256WithRSAEncryption
54:81:45:9d:b2:c0:57:ba:e0:81:fa:ac:39:c7:5f:7c:39:a7:
4b:8b:07:e4:45:90:50:59:36:f3:69:a0:e0:60:ab:9b:d6:21:
bf:b0:59:b4:5e:72:8f:9e:3a:c7:55:9a:7a:3c:d9:ec:58:34:
93:e2:e2:d3:b5:a6:0c:55:78:ee:81:4d:31:14:c6:0a:b7:d7:
ff:c6:57:ed:60:f7:c4:90:bc:e3:83:cd:5b:e4:99:46:33:a5:
ee:5e:0f:2d:7d:73:96:51:ee:21:4d:1a:c2:8c:71:81:63:af:
70:cc:17:5b:7b:b0:5a:a6:92:db:29:29:eb:0e:7c:26:35:69:
9c:27:6f:9d:5d:c2:59:94:f4:60:19:c7:cb:c9:68:a4:c8:24:
67:b3:64:6d:d0:41:78:f1:74:15:d8:55:df:98:f4:c1:55:f5:
b8:ce:e6:35:7a:4f:55:8f:0f:5a:51:08:b5:84:9f:3f:b3:66:
c6:52:6f:8d:f1:29:03:8f:1e:61:d3:c5:36:d4:98:be:20:fc:
b3:1b:d6:f9:59:f2:de:7b:98:8b:cc:69:7d:b7:75:99:e8:f3:
34:9d:8e:7c:c6:06:6a:96:02:20:ab:1a:3c:e3:a3:b3:f2:8e:
93:de:69:46:be:74:5a:eb:bf:05:73:18:f4:60:1f:8c:a9:40:
82:0c:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 18:06:53 2024 by rpki-client on console-ams.rpki-client.org