Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS49466.roa
File: AS49466.roa (raw, json)
Hash identifier: I4inVOL3iRGw0FgJ/ztX4ZQDjH3lGEgkpLUe2znGwV8=
Subject key identifier: A6:06:F1:1D:91:9F:F5:78:93:20:70:75:B2:BA:6E:90:B9:EF:B1:AB
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 3C11383F221878E6E6C27B2BF76A9E0BC4831C84
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS49466.roa
Signing time: Wed 20 Nov 2024 22:30:39 +0000
ROA not before: Wed 20 Nov 2024 22:25:39 +0000
ROA not after: Wed 19 Nov 2025 22:30:39 +0000
asID: 49466
IP address blocks: 93.93.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:11:38:3f:22:18:78:e6:e6:c2:7b:2b:f7:6a:9e:0b:c4:83:1c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Nov 20 22:25:39 2024 GMT
Not After : Nov 19 22:30:39 2025 GMT
Subject: CN=A606F11D919FF57893207075B2BA6E90B9EFB1AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:28:be:83:66:fc:be:46:2f:f1:12:80:34:
5e:32:1f:3b:78:95:07:60:ca:55:c5:10:0b:7d:c2:
a3:58:4a:b4:bf:c0:1a:ef:6c:9d:86:31:eb:b2:ca:
79:72:fd:81:d1:c6:4a:2c:77:e8:1e:4e:28:db:7c:
7a:44:e0:4a:c4:c4:15:4b:da:c9:76:ca:06:c9:01:
46:b4:80:38:a9:a2:20:50:94:96:41:38:0e:d9:9d:
8e:77:6a:57:2c:7c:c5:dc:e2:e6:4b:b9:99:bb:ee:
55:8c:a9:e3:13:87:8e:bd:c7:2c:6c:ba:cc:97:80:
47:6a:7d:dc:29:12:c2:5b:13:b3:c3:b4:ef:6c:37:
63:4c:21:90:7c:5a:2c:8f:7f:81:37:ed:94:db:fd:
ea:01:d9:e8:00:64:ce:0d:03:e7:cc:9f:39:0b:f8:
1b:5e:09:43:1e:6c:12:1d:a2:f0:72:05:1f:65:2f:
30:b5:4d:3b:4c:91:bd:64:f0:32:62:64:29:54:77:
47:27:13:e1:47:c7:2f:22:dd:8b:a2:03:72:4b:31:
58:70:ae:f4:30:ce:1f:97:b2:d0:02:be:69:64:fa:
92:62:47:fa:b1:4c:95:e4:d7:58:e5:2c:3d:dc:25:
7e:bc:13:c3:a5:d6:dc:90:ab:75:f1:c7:b5:95:1a:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:06:F1:1D:91:9F:F5:78:93:20:70:75:B2:BA:6E:90:B9:EF:B1:AB
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS49466.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.244.0/22
Signature Algorithm: sha256WithRSAEncryption
04:9e:9f:cf:d7:b6:b7:76:28:01:14:aa:a7:a7:16:c6:ca:11:
23:87:e1:6d:3c:a2:79:af:68:ea:e1:b6:c6:40:5d:af:0d:ef:
6b:e9:33:8c:57:fb:20:8b:a1:d2:37:46:b9:76:26:07:de:e1:
bf:d5:78:60:57:d3:fa:84:d2:90:70:60:15:3f:76:45:44:ff:
f7:fc:f2:99:e4:2f:ec:cc:81:79:3b:1b:59:92:a9:87:3a:fe:
7d:03:a0:02:67:e8:8a:c0:c8:69:5b:8c:ed:5b:5e:35:01:6b:
e7:8a:d8:9d:24:c5:5f:15:e7:28:ab:3a:53:0b:60:f2:af:60:
ad:90:05:45:13:c3:52:9c:56:af:a9:d9:78:99:d6:98:24:9d:
7c:39:f7:82:35:4c:11:ca:4b:1e:e5:df:6a:7c:27:3a:b0:42:
8b:90:f7:4c:49:f1:7f:52:08:14:75:87:3b:6c:84:e4:6b:5f:
70:5f:c1:6a:72:8a:8a:4c:17:f9:99:05:ca:aa:ba:e1:50:14:
cd:32:f0:4f:cd:1b:59:db:59:3f:11:88:4d:60:c8:54:16:a1:
b8:b6:2b:09:09:51:6e:a4:5d:3a:29:ca:dd:c4:9c:a7:5d:06:
5c:53:92:d3:ab:3c:76:64:74:a9:59:76:9b:c9:84:16:08:3f:
b2:f7:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:46 2024 by rpki-client on console-ams.rpki-client.org