Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS396982.roa
File: AS396982.roa (raw, json)
Hash identifier: /J3zzRVdfAgVdoOcMG9Lr+TCeFXcJAkMI6PIdsYDTlU=
Subject key identifier: 76:C9:E8:3B:B3:A2:9F:58:7B:13:9C:09:FE:85:55:3C:5D:B5:C9:E1
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 1D212BDC8E67CD182470AE526AB8563F9F32AE15
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS396982.roa
Signing time: Mon 20 Oct 2025 17:27:00 +0000
ROA not before: Mon 20 Oct 2025 17:22:00 +0000
ROA not after: Mon 19 Oct 2026 17:27:00 +0000
asID: 396982
IP address blocks: 45.142.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 02:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:21:2b:dc:8e:67:cd:18:24:70:ae:52:6a:b8:56:3f:9f:32:ae:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Oct 20 17:22:00 2025 GMT
Not After : Oct 19 17:27:00 2026 GMT
Subject: CN=76C9E83BB3A29F587B139C09FE85553C5DB5C9E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:5c:94:29:0f:e0:92:c5:ae:96:5d:09:ad:
7b:93:2e:9c:29:13:45:ce:fe:58:c6:03:1a:9c:6d:
58:d1:fb:0d:8d:85:a1:01:d1:53:97:3a:ff:7b:7b:
89:f6:6a:ca:d8:c6:19:f7:bc:93:65:38:aa:05:3b:
f8:e8:db:94:dc:07:07:25:af:98:9f:97:16:87:1e:
fc:97:fd:ea:ea:2f:6f:79:3c:84:fa:8c:09:12:a3:
4d:5a:f6:43:48:d4:1d:17:ce:6e:97:39:0f:64:be:
cf:10:a5:d9:8b:c5:8e:fb:b5:d1:ab:eb:a3:cc:37:
2f:d6:a1:fe:5f:4c:65:e9:fe:be:5e:52:e4:b8:1b:
9c:b5:f7:18:b4:d1:48:78:b0:34:64:64:1c:91:3f:
99:18:07:78:15:54:99:41:2d:fb:e7:4d:3c:92:7d:
84:48:92:fa:93:90:e9:b3:17:fc:a9:53:8a:df:aa:
03:82:fc:26:54:c1:f8:36:39:17:e0:a5:88:c6:d0:
ba:61:a3:f3:62:13:86:b8:8f:ae:c3:e9:97:08:89:
f2:28:e4:2d:1c:1b:c6:7d:c5:fa:0d:86:4d:62:32:
0d:3a:87:17:47:2a:53:d5:1e:49:25:45:a3:81:7e:
f9:23:c5:a2:13:84:9b:14:0e:ef:41:93:92:f6:93:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C9:E8:3B:B3:A2:9F:58:7B:13:9C:09:FE:85:55:3C:5D:B5:C9:E1
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS396982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.245.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4d:27:0e:69:23:55:82:56:71:7a:02:13:16:67:77:f3:1f:
a0:81:14:38:87:a4:3e:1d:bd:ce:e8:17:d5:70:69:a6:be:03:
6c:eb:5f:a5:07:e8:22:87:d3:cf:a0:d6:50:b0:5f:a0:ec:c7:
8f:af:78:18:6c:bf:c0:a0:8e:28:c8:21:e1:92:1e:4d:3c:86:
36:d4:e2:a4:12:1e:3e:15:0c:c6:e3:ad:e7:a6:a5:5c:a6:c9:
cb:0a:6b:d0:a5:6c:53:3d:2b:fb:67:4e:88:ca:3f:db:2d:f9:
39:1a:09:d5:87:5a:7c:91:50:d0:7d:48:1f:16:8e:65:f5:ef:
29:15:76:46:ff:18:6e:9e:f6:b8:f1:d1:10:fa:1f:f3:cc:ef:
43:eb:2a:d4:3b:c2:ff:10:a5:e0:99:f7:0e:c4:20:fe:e2:d7:
e8:01:4b:b5:a2:cf:e2:d9:ff:48:88:7e:27:d6:f2:9c:3d:61:
d2:54:7e:c4:25:5c:02:a6:54:bc:dc:c4:48:d4:de:b6:57:b0:
1f:65:40:e5:84:18:be:a2:3a:89:f8:be:0b:45:50:37:5f:e4:
4a:40:15:eb:03:a6:ec:f7:0e:ef:c1:40:37:5a:1d:6c:61:d9:
40:f0:27:23:59:23:4a:76:5c:b0:f0:44:e1:96:e0:27:6e:64:
ee:ec:0d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 12:53:55 2025 by rpki-client