Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS49466.roa
File: AS49466.roa (raw, json)
Hash identifier: R8n0y9sEIhzz8ao6JGEYdWdAPKHmIzCe391uZv9BgRA=
Subject key identifier: B8:33:A4:29:AB:7E:60:68:56:0D:C6:9E:7C:26:B6:4E:9B:F8:B8:06
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 08FB6A17731C7FF7A1BD1DED5961B0575271FF6E
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS49466.roa
Signing time: Wed 22 Oct 2025 22:31:27 +0000
ROA not before: Wed 22 Oct 2025 22:26:27 +0000
ROA not after: Wed 21 Oct 2026 22:31:27 +0000
asID: 49466
IP address blocks: 93.93.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 02:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fb:6a:17:73:1c:7f:f7:a1:bd:1d:ed:59:61:b0:57:52:71:ff:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Oct 22 22:26:27 2025 GMT
Not After : Oct 21 22:31:27 2026 GMT
Subject: CN=B833A429AB7E6068560DC69E7C26B64E9BF8B806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:bf:01:80:1d:8d:19:32:4d:67:7c:f4:38:
90:e3:06:00:09:e5:68:fa:76:13:db:30:1b:bc:63:
5d:3c:11:86:bd:5d:96:c0:f4:ac:97:56:13:cb:b4:
16:a8:ab:35:35:67:af:a8:e5:0a:c2:50:95:eb:62:
63:b5:a0:77:a6:28:f9:71:f9:0f:84:9b:21:c1:c3:
af:3c:29:40:8a:85:41:a1:e6:2e:19:c1:02:35:e6:
f6:11:bd:9e:10:84:ba:d2:62:c1:68:c6:25:70:c2:
6a:4d:64:bc:91:ef:b4:ef:64:7c:57:81:2c:19:35:
4d:b0:d3:45:02:4e:13:92:62:3a:c8:42:33:04:aa:
fd:13:ad:d5:76:8b:b5:2a:5a:aa:13:53:6e:aa:18:
97:62:c0:af:2e:f7:7f:7a:d3:da:00:89:ff:28:1f:
53:2d:3f:9b:4d:66:66:2e:76:e6:0a:b4:ca:52:af:
f7:31:0e:4a:1c:de:4c:cb:01:df:89:d2:32:c3:62:
68:64:2e:46:57:13:85:fe:ee:90:eb:fe:8e:59:35:
bc:44:2b:79:17:98:c0:2e:e1:56:13:77:dd:9c:a2:
90:f7:35:23:8a:c4:b1:4f:f3:09:30:1e:85:49:51:
2e:bf:31:2e:61:b3:dd:c6:1e:ab:d8:71:79:1a:8a:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:33:A4:29:AB:7E:60:68:56:0D:C6:9E:7C:26:B6:4E:9B:F8:B8:06
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS49466.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.244.0/22
Signature Algorithm: sha256WithRSAEncryption
45:b0:b0:73:43:e8:83:ec:63:5f:19:d5:4d:f4:1c:36:6e:d3:
b2:50:99:f1:53:6d:3a:aa:4e:4d:a1:70:1c:38:06:4a:5a:1c:
bc:2b:76:8c:83:02:92:0c:e0:4e:3a:8f:7f:6c:c7:8f:b3:fe:
b8:1e:72:75:88:9c:37:cb:8a:e7:97:73:9f:2d:3e:a8:86:90:
ad:a5:c3:bb:40:85:aa:ab:24:bf:21:07:b0:90:2f:19:eb:c8:
0b:b6:22:f1:c2:3f:49:3f:86:d9:c0:d2:b0:ae:c2:be:1a:3d:
49:07:ca:ce:34:39:92:ba:00:cd:5d:ec:eb:7f:59:32:d4:59:
f6:21:a4:53:0b:2b:99:ae:44:ab:29:de:d3:78:a7:26:77:46:
bd:7e:73:06:1c:a9:61:35:17:05:01:ae:4f:d3:fc:a0:d0:9a:
9e:d5:8d:5a:2e:98:fa:12:e1:a3:c3:e7:bc:36:ac:36:43:f9:
19:d0:7a:8c:d5:eb:29:69:30:2d:ca:9a:e0:ac:89:f7:35:70:
a3:7a:3f:01:26:84:a5:bb:a3:87:28:f9:ba:8c:4d:5e:43:32:
c9:22:cd:a2:01:89:1b:64:ac:9c:78:41:36:74:99:19:45:64:
b3:b4:ce:ee:2b:8c:3a:4a:f4:86:e0:67:a1:6d:06:31:ae:29:
88:fe:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 12:55:42 2025 by rpki-client