Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS57578.roa
File:                     AS57578.roa (raw, json)
Hash identifier:          6OjC8jHIm1G2iRtfvW+AJAoKKYYBlyKaQMyrtSUKPXk=
Subject key identifier:   E2:68:AC:E3:2D:4C:0F:73:45:3C:9E:EB:E8:A6:0A:53:E5:1E:66:39
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       7C192D54D32F1492A9608C17A85DDA41C83C5878
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS57578.roa
Signing time:             Wed 20 Nov 2024 21:30:28 +0000
ROA not before:           Wed 20 Nov 2024 21:25:28 +0000
ROA not after:            Wed 19 Nov 2025 21:30:28 +0000
asID:                     57578
IP address blocks:        45.131.68.0/22 maxlen: 24
                          45.142.246.0/24 maxlen: 24
                          185.209.84.0/23 maxlen: 24
                          2a0b:4342:1a20::/44 maxlen: 48
                          2a0b:4342:2000::/36 maxlen: 48
                          2a0b:4342:4000::/36 maxlen: 48
                          2a0e:5c40::/29 maxlen: 40
                          2a0e:5c43::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:19:2d:54:d3:2f:14:92:a9:60:8c:17:a8:5d:da:41:c8:3c:58:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Nov 20 21:25:28 2024 GMT
            Not After : Nov 19 21:30:28 2025 GMT
        Subject: CN=E268ACE32D4C0F73453C9EEBE8A60A53E51E6639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:47:e4:37:aa:b0:a8:80:03:3d:a2:b6:5d:
                    67:b9:96:a7:88:ae:4b:e9:9f:19:b7:b6:ed:bf:58:
                    96:d1:bf:54:2b:dc:30:4e:f9:b8:3f:fc:1d:a6:d5:
                    2c:60:d9:e2:0b:93:e7:5d:ad:d4:0c:84:e6:97:ab:
                    bb:5e:d9:58:45:d9:4a:29:f0:7c:28:4a:61:27:bc:
                    48:74:45:b2:39:e7:49:71:f2:a4:27:1a:93:ad:95:
                    1f:be:45:44:9e:97:9e:ab:d6:96:85:94:63:39:b7:
                    41:d3:44:c7:65:ab:74:95:64:0a:7e:bc:84:70:64:
                    f5:d9:bc:6f:15:bf:69:15:7b:19:d3:84:d8:b6:54:
                    2e:68:34:32:78:ab:b3:13:2d:c1:05:a8:12:74:ed:
                    70:92:68:e5:7d:f2:e1:e4:fd:7c:53:9e:79:08:a2:
                    ed:e8:f4:66:2b:0b:15:bb:aa:10:a6:3c:22:11:c7:
                    1e:e6:3c:4f:f4:82:46:81:41:06:59:74:77:04:86:
                    16:01:e5:a2:fa:6a:8d:f8:b3:ab:17:66:17:35:b2:
                    6d:ad:41:98:95:92:a5:c1:b7:5d:e2:a9:95:f8:9d:
                    a6:8c:07:cc:07:04:80:75:a9:11:b5:f9:97:5d:63:
                    50:c8:ee:b2:58:d0:34:57:3e:91:de:f7:c3:b7:04:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:68:AC:E3:2D:4C:0F:73:45:3C:9E:EB:E8:A6:0A:53:E5:1E:66:39
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS57578.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.68.0/22
                  45.142.246.0/24
                  185.209.84.0/23
                IPv6:
                  2a0b:4342:1a20::/44
                  2a0b:4342:2000::/36
                  2a0b:4342:4000::/36
                  2a0e:5c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         4d:a2:bb:14:be:2a:0c:62:e3:67:5b:c2:32:e7:6c:be:f1:37:
         4b:b6:4b:c0:13:f9:ce:59:dd:b2:7b:9c:5b:fd:97:13:a9:19:
         60:76:c1:8a:6d:84:2b:0c:8f:82:e3:73:da:fb:11:76:9b:88:
         ce:b9:45:b6:26:73:91:d4:76:94:a5:8d:bb:69:4a:bd:19:b5:
         4b:c2:20:49:14:e7:ca:e6:32:c1:ff:10:d7:52:78:c1:1c:88:
         c8:9c:40:08:c7:2b:c4:38:51:e3:a5:82:45:dc:6a:30:b5:be:
         7e:87:a9:a9:48:b7:07:66:3c:a3:d3:b5:e5:23:8c:ef:11:3c:
         a1:86:d0:74:3b:e5:38:e6:4e:02:04:9a:b0:4c:3e:89:e0:a3:
         d7:64:72:95:08:64:3e:23:6f:89:44:24:e8:57:38:4f:5f:50:
         be:cf:2f:03:02:c5:de:db:0e:26:c2:ed:79:2b:ee:24:4b:a0:
         48:cc:ce:2c:2d:a2:33:aa:77:a6:ef:5b:7a:ad:f4:95:16:c8:
         cc:09:82:ef:8d:3e:09:2c:d5:92:61:e3:11:db:6c:a8:66:22:
         62:6d:99:d9:59:74:e6:73:6e:bc:8f:f0:97:ea:6e:97:9c:70:
         d9:3c:92:9c:b3:0f:19:ed:ef:0e:0c:86:95:d4:11:58:76:36:
         f0:6c:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:49 2024 by rpki-client on console-ams.rpki-client.org