Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS50069.roa
File:                     AS50069.roa (raw, json)
Hash identifier:          BZm/o9hX/bK4eXx4lNT58UOjIGJFp5TKMq3IGjELjX8=
Subject key identifier:   A8:C6:50:D2:26:4C:92:41:01:9D:92:CC:BB:2F:9A:8C:E1:7D:6F:31
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       1EF53A2D1443C238F3D7E5AAA72D6045E1F017B2
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS50069.roa
Signing time:             Mon 03 Aug 2026 07:47:47 +0000
ROA not before:           Mon 03 Aug 2026 07:42:47 +0000
ROA not after:            Mon 02 Aug 2027 07:47:47 +0000
asID:                     50069
IP address blocks:        45.142.245.0/24 maxlen: 24
                          188.244.98.0/23 maxlen: 24
                          2a0d:2900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f5:3a:2d:14:43:c2:38:f3:d7:e5:aa:a7:2d:60:45:e1:f0:17:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Aug  3 07:42:47 2026 GMT
            Not After : Aug  2 07:47:47 2027 GMT
        Subject: CN=A8C650D2264C9241019D92CCBB2F9A8CE17D6F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:d5:32:28:7a:e6:00:aa:7f:1e:12:1f:f3:
                    35:89:84:db:a3:5a:36:ef:2f:a1:ff:ff:09:03:20:
                    f9:17:26:8f:d2:52:4c:ee:bd:86:39:7e:71:4c:98:
                    62:fe:e5:1f:b6:af:14:e0:a6:15:3b:33:50:0e:c4:
                    8b:57:40:d3:79:42:ed:46:a5:16:47:e5:41:17:e0:
                    94:ff:61:96:77:80:66:86:a8:a9:7e:38:9f:43:d5:
                    53:5d:c4:c7:fa:d9:e2:db:8b:9c:53:05:c9:06:ae:
                    c9:37:f2:8d:67:12:3f:89:b4:b6:36:17:93:e3:3e:
                    21:c5:16:3d:f8:4a:08:68:9f:5e:4c:88:01:7a:a3:
                    ab:20:f1:db:88:a4:82:3c:37:19:54:60:51:4f:17:
                    3d:50:ef:6b:86:6b:7b:0e:33:87:cc:40:40:2c:12:
                    7b:16:99:ac:e0:c8:d9:05:85:af:c8:25:46:28:29:
                    b6:70:32:f9:2a:af:69:86:0a:90:38:5e:a1:8c:9e:
                    fe:b9:e4:a5:a1:18:87:e1:87:4b:bd:d5:4c:33:1f:
                    e6:75:66:aa:a6:f1:8d:11:f4:4e:0d:a9:c1:1f:79:
                    fb:0f:a4:66:4d:1f:f5:7a:e1:21:35:ad:a7:bc:24:
                    4e:fb:ba:e6:82:7d:f6:fb:10:5e:19:2d:98:a2:b0:
                    80:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C6:50:D2:26:4C:92:41:01:9D:92:CC:BB:2F:9A:8C:E1:7D:6F:31
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS50069.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.245.0/24
                  188.244.98.0/23
                IPv6:
                  2a0d:2900::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:c6:62:fd:1c:1e:f7:e1:20:13:7f:25:86:7a:f3:ba:0d:58:
         49:21:6c:de:42:a9:d1:0b:51:61:56:e6:50:c6:92:86:dd:a8:
         e7:25:c2:3f:cf:91:11:5e:3a:7a:38:12:a9:28:35:a3:a9:43:
         b7:20:49:1c:1e:c1:9b:bf:93:34:57:db:12:91:9f:0f:24:6d:
         c2:c1:59:2d:f6:a2:05:5d:92:06:93:7c:b6:91:54:15:b9:ae:
         11:b2:7a:d9:37:98:aa:9d:2e:cb:4f:3b:d0:01:79:36:09:61:
         74:e7:be:99:75:b8:39:e8:2b:39:32:2a:6e:df:34:64:c5:78:
         bf:91:73:46:1a:c8:cb:d3:3d:9d:8b:01:42:7e:9e:de:55:99:
         fd:e9:c9:1c:36:10:a7:8b:49:b3:0b:5b:2a:c8:e0:01:49:28:
         78:98:95:e3:41:c1:f5:19:d6:33:38:9b:cb:7e:78:e1:31:de:
         03:d5:80:bb:80:6e:23:9f:af:3b:c2:40:d8:85:2c:35:df:63:
         d7:67:d2:dd:d9:2d:25:12:a5:34:0d:7f:23:0b:0e:fd:82:4c:
         b2:2b:54:8c:7f:16:5f:ba:26:ff:20:0d:ca:4c:6b:9e:41:86:
         3e:03:d9:92:39:ce:2d:ec:0f:38:c2:d0:d6:94:0d:28:0f:3b:
         86:85:fb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:50:35 2026 by rpki-client