Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS41979.roa
File: AS41979.roa (raw, json)
Hash identifier: uEYZSfWiVp99QGAc47NFztgycru4J/xGkLrIVQ/hHfk=
Subject key identifier: C7:A7:8C:96:3D:E2:F1:29:26:C2:7E:CE:EC:49:9A:F3:E6:81:DC:39
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 12D1F90EED7F8DE7F7CAD92358061969BED2B5D6
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS41979.roa
Signing time: Wed 20 Nov 2024 21:30:36 +0000
ROA not before: Wed 20 Nov 2024 21:25:36 +0000
ROA not after: Wed 19 Nov 2025 21:30:36 +0000
asID: 41979
IP address blocks: 2a0b:4340:30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d1:f9:0e:ed:7f:8d:e7:f7:ca:d9:23:58:06:19:69:be:d2:b5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Nov 20 21:25:36 2024 GMT
Not After : Nov 19 21:30:36 2025 GMT
Subject: CN=C7A78C963DE2F12926C27ECEEC499AF3E681DC39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:01:04:ce:f9:d5:8f:a5:41:a1:d7:ae:a6:
49:7c:2b:9d:23:64:4e:fe:fe:09:93:b6:a8:55:ff:
5d:39:6e:82:37:14:b9:08:85:f9:92:16:96:a6:7c:
54:4f:b0:d1:6c:c4:6e:bd:d3:f6:6c:70:0e:05:e7:
75:33:81:39:8e:44:3e:b5:71:f2:fa:8b:cf:aa:93:
74:0a:9b:b5:82:a4:98:8d:ca:61:59:24:ec:7e:b3:
29:cf:0a:b5:cf:ee:c4:fe:4c:7a:10:c8:6e:20:6d:
e2:48:0f:4d:7d:01:7b:f7:9d:a3:af:c9:fe:64:8c:
ed:42:00:34:cb:93:9c:e7:42:25:ba:ea:89:af:38:
4a:5c:61:a5:fe:11:7b:7a:44:cf:13:8a:8f:af:5d:
e9:32:31:83:1c:8c:64:24:4f:54:a6:13:e2:cd:ce:
ad:e8:47:32:10:42:e9:e7:33:41:a4:82:6c:ce:1b:
48:52:c4:b7:cf:ae:e1:e3:49:b2:38:71:7f:df:b9:
c4:64:22:d0:61:63:54:3a:1d:6b:3f:56:be:82:30:
9b:87:c7:1b:ee:44:2d:34:5e:ee:c2:8a:0e:97:d5:
3e:a8:52:e0:d1:f3:43:32:bb:e8:3e:1d:da:9c:e9:
f8:27:92:e2:c1:ea:f4:10:ef:af:18:ae:c2:5c:e1:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A7:8C:96:3D:E2:F1:29:26:C2:7E:CE:EC:49:9A:F3:E6:81:DC:39
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS41979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:30::/44
Signature Algorithm: sha256WithRSAEncryption
6e:5e:e4:8f:89:10:88:91:7a:26:9f:10:d5:34:f8:6d:45:7b:
24:35:7a:e5:b9:85:ca:c6:73:b3:30:ba:66:b5:1b:f8:56:e4:
15:98:1c:f2:ea:c2:25:bd:b6:75:19:d5:a5:c7:1d:24:fa:71:
62:de:86:9e:7c:bd:1c:59:96:67:b5:a6:bd:22:6e:fe:d9:1d:
41:95:54:92:b9:11:bd:5e:11:bd:c9:a3:0a:30:e5:6d:cc:1a:
9f:94:09:b4:75:1e:44:f1:33:fa:9e:6f:4b:f6:b1:14:9d:a6:
29:46:bf:d4:ac:df:eb:09:43:04:82:39:0d:30:97:75:5e:ff:
0a:7c:02:af:3c:2e:5d:49:8d:6c:a9:ac:ed:a5:69:86:71:c4:
28:c1:7c:c5:78:fe:04:65:5a:3a:6b:8a:aa:43:46:f9:ab:54:
45:39:26:af:c2:89:11:87:44:8d:09:c6:f6:0b:c3:3c:e2:cc:
86:c5:9e:df:b7:b3:41:cc:d8:21:69:ea:92:bc:0a:40:04:e2:
ba:da:14:28:06:4f:eb:22:74:90:ee:d2:09:ca:1e:c9:c9:e5:
e0:cc:76:7f:a2:1c:9d:38:8c:61:84:dd:42:43:e3:f2:46:ee:
c3:f8:fb:fa:15:73:33:ef:58:7b:57:3b:e7:92:57:4d:53:b2:
cd:9b:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:49 2024 by rpki-client on console-ams.rpki-client.org