Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS57578.roa
File:                     AS57578.roa (raw, json)
Hash identifier:          U0G8nWTMbTsmQNi5DjdjeDqkevvd02cNtLMJOEfv1O0=
Subject key identifier:   1C:DF:1B:2C:9C:84:22:16:B2:18:E3:A1:38:17:5F:16:E8:C7:A3:A6
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       27E0A6C2F21B2E3BD2B42851E44D8242D14D0178
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS57578.roa
Signing time:             Wed 20 Dec 2023 21:30:07 +0000
ROA not before:           Wed 20 Dec 2023 21:25:07 +0000
ROA not after:            Wed 18 Dec 2024 21:30:07 +0000
asID:                     57578
IP address blocks:        45.131.68.0/22 maxlen: 24
                          45.142.246.0/24 maxlen: 24
                          185.209.84.0/23 maxlen: 24
                          2a0b:4342:1a20::/44 maxlen: 48
                          2a0b:4342:2000::/36 maxlen: 48
                          2a0b:4342:4000::/36 maxlen: 48
                          2a0e:5c40::/29 maxlen: 40
                          2a0e:5c43::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e0:a6:c2:f2:1b:2e:3b:d2:b4:28:51:e4:4d:82:42:d1:4d:01:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec 20 21:25:07 2023 GMT
            Not After : Dec 18 21:30:07 2024 GMT
        Subject: CN=1CDF1B2C9C842216B218E3A138175F16E8C7A3A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:a0:36:e9:c6:53:85:76:05:36:29:5b:b3:
                    10:82:49:f2:c7:7e:ad:01:7e:e8:5f:9a:92:a6:ed:
                    bc:d1:b1:84:6b:38:fa:9e:ee:55:59:57:45:44:cc:
                    0d:57:16:f2:09:00:bc:d2:7d:31:77:ff:33:bc:1e:
                    9c:3a:6d:6c:e5:ca:9c:7a:15:41:01:ac:87:1f:15:
                    21:4e:6a:eb:41:6a:02:6b:1a:de:d8:2f:27:26:af:
                    1f:70:b6:c6:ed:da:64:8f:1d:17:02:77:84:a8:91:
                    af:4d:fb:91:94:90:8f:26:87:bb:69:53:6a:71:02:
                    77:70:93:19:f7:03:2c:79:6e:15:0e:d1:ae:a8:3c:
                    1b:c8:13:ec:43:6e:e1:0b:9f:9c:44:d5:16:ca:a4:
                    a1:04:01:b3:b1:5c:9c:4f:a7:eb:c3:e8:cd:c9:b5:
                    0b:0b:cf:80:b6:14:70:fb:cc:eb:ca:56:03:15:29:
                    a8:17:61:99:78:f4:2b:ce:fd:4f:2c:c3:26:0d:49:
                    bf:d8:9a:fc:b7:3d:54:8b:a3:df:a2:c1:56:8e:30:
                    43:0a:f1:a0:c5:99:3e:8c:b2:be:aa:a0:79:75:f8:
                    6a:bf:57:f9:4e:94:3f:4f:7c:99:e7:80:87:f8:a9:
                    76:00:f3:3d:9d:94:97:35:41:31:6d:4f:93:b2:6e:
                    63:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DF:1B:2C:9C:84:22:16:B2:18:E3:A1:38:17:5F:16:E8:C7:A3:A6
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS57578.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.68.0/22
                  45.142.246.0/24
                  185.209.84.0/23
                IPv6:
                  2a0b:4342:1a20::/44
                  2a0b:4342:2000::/36
                  2a0b:4342:4000::/36
                  2a0e:5c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         b7:38:32:ea:dc:d0:72:30:a6:70:0b:12:5e:4f:41:80:22:36:
         79:84:35:51:71:24:f2:b5:91:e4:83:23:ce:df:90:9c:0c:b8:
         2a:42:05:5b:2d:82:95:fd:a7:85:53:60:83:f7:14:dc:cb:82:
         7b:f4:29:96:3a:91:94:84:90:26:95:4b:aa:3c:11:a0:01:8c:
         a2:60:29:cf:85:fc:2e:1a:6c:47:9f:5c:46:6e:d1:76:2c:50:
         9f:ed:55:5c:91:68:52:25:9d:6b:e0:46:ea:67:64:49:00:ca:
         9f:d2:a4:dc:98:cf:02:42:9f:c1:9f:8b:18:e4:c2:12:3d:fa:
         39:7c:6f:69:ff:35:bc:3d:ff:4b:24:31:8d:0d:f2:e0:c4:d9:
         bb:24:79:c7:47:d7:3c:aa:ad:2d:c6:4e:63:1b:fd:e7:2f:77:
         93:f9:64:26:d8:2f:61:ca:60:e8:e0:51:42:2a:b8:0b:90:ec:
         a2:8e:91:fc:ba:ce:75:11:ec:05:a5:a8:b5:0f:d9:81:37:0d:
         4b:0c:39:1e:1a:79:6b:38:b8:f8:ef:76:7c:55:a6:b0:57:3b:
         7d:9a:9f:8b:89:7d:2f:87:50:1d:e2:4c:02:35:5f:8e:dc:5e:
         de:cd:9a:be:bc:3e:71:11:f3:14:ef:30:21:57:e3:e2:fe:1f:
         32:a6:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 10:59:18 2024 by rpki-client on console-fra.rpki-client.org