Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS41979.roa
File: AS41979.roa (raw, json)
Hash identifier: mqFoGFevjIAjSJsn0obWKXwvvJ5MqPm6RyinKHT2KwM=
Subject key identifier: 89:90:33:E9:8E:D1:EC:E5:AC:5A:F5:B9:50:EB:92:D2:F1:77:DE:9A
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 5CF2F40B48B8413978049DF221E66D3922B7F2D7
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS41979.roa
Signing time: Wed 20 Dec 2023 21:30:08 +0000
ROA not before: Wed 20 Dec 2023 21:25:08 +0000
ROA not after: Wed 18 Dec 2024 21:30:08 +0000
asID: 41979
IP address blocks: 2a0b:4340:30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f2:f4:0b:48:b8:41:39:78:04:9d:f2:21:e6:6d:39:22:b7:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 20 21:25:08 2023 GMT
Not After : Dec 18 21:30:08 2024 GMT
Subject: CN=899033E98ED1ECE5AC5AF5B950EB92D2F177DE9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:5d:13:ec:03:38:6a:0d:f2:9d:1a:1f:de:
51:20:df:5c:0a:2e:88:9a:83:76:30:1d:7c:dd:fa:
68:be:0b:0d:c2:b8:93:c4:28:dd:9b:fb:44:be:f3:
42:0d:0c:cf:88:49:c9:85:41:bb:6d:f8:f3:f2:74:
25:ea:f8:b1:72:e3:d8:41:47:86:59:b1:69:74:ad:
45:8e:7c:3a:13:4e:67:44:5a:46:ce:ff:0b:7c:95:
74:3c:64:a0:1d:b9:51:8a:3b:de:40:38:f4:9d:8b:
e7:bb:19:1f:72:f5:52:dc:f7:af:bb:4c:8a:f5:db:
a9:9a:63:96:77:93:3e:7c:c2:9b:fc:7b:b5:b1:53:
24:7b:d8:50:22:5e:76:8e:41:00:85:69:33:a4:bf:
58:c4:1f:e5:37:6d:f0:98:5b:d7:57:b8:93:fa:fd:
6c:83:91:cb:b1:b2:7d:62:2d:1e:74:ca:5f:05:d3:
de:23:28:fd:19:da:d6:da:1a:03:b3:bc:b7:2f:65:
5d:3e:3c:b4:a1:c2:8f:6f:4d:91:2d:b9:e4:e9:0e:
48:48:59:7a:f7:69:2f:c4:93:ea:3b:f3:6b:8f:8f:
a4:aa:06:d6:3d:17:57:20:eb:c5:0b:1d:78:46:c0:
98:73:47:e6:8d:d9:bf:a9:54:37:ca:47:53:62:55:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:90:33:E9:8E:D1:EC:E5:AC:5A:F5:B9:50:EB:92:D2:F1:77:DE:9A
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS41979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:30::/44
Signature Algorithm: sha256WithRSAEncryption
af:09:11:0b:77:e2:b2:34:f2:f4:8b:7a:1f:b0:99:41:f8:f4:
ca:2b:b2:54:68:de:f5:40:ce:9a:e8:c6:0d:b7:11:71:86:0f:
d2:c0:6f:a2:b4:e5:ea:ea:2c:04:8e:6a:3b:44:90:bf:1f:0a:
32:2b:21:a3:91:b6:94:2c:88:90:cd:44:df:62:7c:6d:49:5a:
e8:61:37:40:12:b3:dd:c4:e5:4b:d7:e2:72:16:a1:60:1a:2f:
32:19:1d:79:31:b0:75:a6:de:b0:59:c1:1c:6c:a9:cb:47:d8:
52:38:37:38:4c:23:0d:f0:65:14:c4:c0:a1:ed:e5:4e:10:47:
f1:d3:85:26:9c:74:0e:ba:5e:10:9d:df:df:0b:ef:ba:94:02:
4d:99:96:16:5f:19:36:6e:f0:24:e8:9b:54:19:9d:48:8f:ea:
37:44:67:50:ff:9a:e6:b1:3b:25:1e:5b:42:97:6f:08:60:7a:
3c:f3:df:46:ad:be:ca:37:5b:f1:98:72:d1:97:46:7e:99:fb:
2c:1c:91:22:9d:0d:e7:58:23:f4:6e:58:65:16:31:57:29:5e:
e7:d6:fc:5a:43:2d:fd:50:b4:6a:ab:50:1f:c1:95:f0:3e:80:
b3:3f:d0:63:6f:b1:f8:f1:08:66:d3:67:77:e7:ab:dd:b9:56:
e1:ef:73:8b
-----BEGIN CERTIFICATE-----
MIIEnjCCA4agAwIBAgIUXPL0C0i4QTl4BJ3yIeZtOSK38tcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMjAyMTI1MDhaFw0yNDEyMTgyMTMwMDhaMDMxMTAvBgNV
BAMTKDg5OTAzM0U5OEVEMUVDRTVBQzVBRjVCOTUwRUI5MkQyRjE3N0RFOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59F0T7AM4ag3ynRof3lEg31wK
Loiag3YwHXzd+mi+Cw3CuJPEKN2b+0S+80INDM+IScmFQbtt+PPydCXq+LFy49hB
R4ZZsWl0rUWOfDoTTmdEWkbO/wt8lXQ8ZKAduVGKO95AOPSdi+e7GR9y9VLc96+7
TIr126maY5Z3kz58wpv8e7WxUyR72FAiXnaOQQCFaTOkv1jEH+U3bfCYW9dXuJP6
/WyDkcuxsn1iLR50yl8F094jKP0Z2tbaGgOzvLcvZV0+PLShwo9vTZEtueTpDkhI
WXr3aS/Ek+o782uPj6SqBtY9F1cg68ULHXhGwJhzR+aN2b+pVDfKR1NiVWgvAgMB
AAGjggGoMIIBpDAdBgNVHQ4EFgQUiZAz6Y7R7OWsWvW5UOuS0vF33powHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMEsGCCsGAQUFBwELBD8wPTA7BggrBgEFBQcwC4YvcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvQVM0MTk3OS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoLQ0AAMDAN
BgkqhkiG9w0BAQsFAAOCAQEArwkRC3fisjTy9It6H7CZQfj0yiuyVGje9UDOmujG
DbcRcYYP0sBvorTl6uosBI5qO0SQvx8KMisho5G2lCyIkM1E32J8bUla6GE3QBKz
3cTlS9fichahYBovMhkdeTGwdabesFnBHGypy0fYUjg3OEwjDfBlFMTAoe3lThBH
8dOFJpx0DrpeEJ3f3wvvupQCTZmWFl8ZNm7wJOibVBmdSI/qN0RnUP+a5rE7JR5b
QpdvCGB6PPPfRq2+yjdb8Zhy0ZdGfpn7LByRIp0N51gj9G5YZRYxVyle59b8WkMt
/VC0aqtQH8GV8D6Asz/QY2+x+PEIZtNnd+er3blW4e9ziw==
-----END CERTIFICATE-----
Generated at Tue May 28 18:06:53 2024 by rpki-client on console-ams.rpki-client.org