Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS61414.roa
File: AS61414.roa (raw, json)
Hash identifier: whjbiojxSPqzPQz5WqVYjQaQ5jZTnXI5PyVzxaB4bRE=
Subject key identifier: 5A:D3:F3:96:8B:C6:70:20:41:DE:37:F6:D6:3E:93:EC:21:1F:4F:0D
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 3DD1A5CA27D9B0177A6D432DF6DD8E7684EA0025
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS61414.roa
Signing time: Fri 08 Mar 2024 08:14:47 +0000
ROA not before: Fri 08 Mar 2024 08:09:47 +0000
ROA not after: Fri 07 Mar 2025 08:14:47 +0000
asID: 61414
IP address blocks: 93.93.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d1:a5:ca:27:d9:b0:17:7a:6d:43:2d:f6:dd:8e:76:84:ea:00:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Mar 8 08:09:47 2024 GMT
Not After : Mar 7 08:14:47 2025 GMT
Subject: CN=5AD3F3968BC6702041DE37F6D63E93EC211F4F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:5b:c6:03:2a:a3:0c:4e:f4:a1:11:d4:a3:
18:9d:87:01:c7:dc:b7:45:64:ac:1a:88:91:10:90:
b4:f7:db:23:b9:4b:62:e1:63:9a:29:47:e9:db:d0:
57:15:fb:95:a9:4b:63:4c:6c:9c:3b:60:b8:97:b4:
b3:c1:45:d3:3d:bf:ad:13:70:ee:29:6e:63:2f:e2:
4b:42:c6:b6:ce:06:a8:7e:67:4b:e0:b2:aa:a4:d9:
08:77:8d:39:c0:d7:a5:5c:70:66:e9:6d:79:a1:c7:
aa:ff:d5:33:97:19:b2:e1:92:11:5f:32:d7:fa:ec:
d5:28:c8:7a:6c:ac:0b:1f:76:28:6c:ca:12:2a:be:
d7:47:ac:e9:eb:e0:7d:b1:52:d6:4e:cb:6d:08:1c:
60:da:04:2f:f8:1f:c4:6e:fd:fb:2c:63:37:e1:66:
e2:be:a1:ca:23:ed:f8:97:ea:75:13:5e:f0:b7:ef:
cd:69:07:f1:3e:a5:a0:5a:2c:59:7a:b0:4b:7b:c0:
78:f7:06:a1:72:7c:1a:9f:81:b3:10:68:42:e7:84:
ca:84:ff:7b:09:e5:11:54:e2:75:76:d7:18:bf:38:
cf:81:89:4c:c6:d7:a6:ea:4f:68:89:59:74:73:a2:
96:52:35:92:a4:99:56:e9:d6:6d:0e:5d:81:7c:68:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D3:F3:96:8B:C6:70:20:41:DE:37:F6:D6:3E:93:EC:21:1F:4F:0D
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS61414.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.246.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:8c:04:0a:24:90:1a:eb:ff:d1:e7:c3:55:5d:06:4d:6e:3f:
6f:b3:a9:09:0f:6e:9e:cd:02:78:bf:cc:1c:95:d6:af:ca:9e:
82:14:22:77:fc:dd:de:3d:27:e1:a3:cd:ab:62:08:f1:00:d6:
34:f6:ee:63:97:35:a6:60:c1:45:87:2a:95:b3:79:ce:4b:8f:
7f:eb:46:df:95:d4:d2:6c:2c:01:f8:11:68:ff:e3:36:5a:55:
c7:e0:d3:63:61:79:57:2a:0a:66:23:db:d4:4e:70:8c:1a:28:
b7:0b:82:a0:96:c3:da:10:9d:31:4e:9c:64:24:aa:3b:2d:87:
d0:07:ed:03:1b:53:e1:2b:c8:04:d0:26:7b:1f:f7:32:50:42:
ba:59:df:09:1c:f5:32:3b:e5:db:fd:50:a3:a1:5d:3c:46:01:
f1:99:3e:d5:21:2d:96:04:4c:04:a8:c6:52:33:9d:5a:1a:76:
09:c9:eb:b7:4e:7e:3d:7d:7c:4d:fb:55:2e:97:75:cb:3d:58:
5a:f3:e8:bb:dc:fe:8e:c7:33:f4:31:cf:d8:07:b4:10:fc:88:
17:46:86:b0:c4:14:12:36:18:58:28:23:69:b3:33:23:97:2c:
fc:48:c3:84:e6:73:d0:cc:17:4f:1c:e8:9f:ea:48:a4:33:90:
a2:48:d4:60
-----BEGIN CERTIFICATE-----
MIIEmzCCA4OgAwIBAgIUPdGlyifZsBd6bUMt9t2OdoTqACUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yNDAzMDgwODA5NDdaFw0yNTAzMDcwODE0NDdaMDMxMTAvBgNV
BAMTKDVBRDNGMzk2OEJDNjcwMjA0MURFMzdGNkQ2M0U5M0VDMjExRjRGMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuiFvGAyqjDE70oRHUoxidhwHH
3LdFZKwaiJEQkLT32yO5S2LhY5opR+nb0FcV+5WpS2NMbJw7YLiXtLPBRdM9v60T
cO4pbmMv4ktCxrbOBqh+Z0vgsqqk2Qh3jTnA16VccGbpbXmhx6r/1TOXGbLhkhFf
Mtf67NUoyHpsrAsfdihsyhIqvtdHrOnr4H2xUtZOy20IHGDaBC/4H8Ru/fssYzfh
ZuK+ocoj7fiX6nUTXvC3781pB/E+paBaLFl6sEt7wHj3BqFyfBqfgbMQaELnhMqE
/3sJ5RFU4nV21xi/OM+BiUzG16bqT2iJWXRzopZSNZKkmVbp1m0OXYF8aBIvAgMB
AAGjggGlMIIBoTAdBgNVHQ4EFgQUWtPzlovGcCBB3jf21j6T7CEfTw0wHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMEsGCCsGAQUFBwELBD8wPTA7BggrBgEFBQcwC4YvcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvQVM2MTQxNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF1d9jANBgkq
hkiG9w0BAQsFAAOCAQEAs4wECiSQGuv/0efDVV0GTW4/b7OpCQ9uns0CeL/MHJXW
r8qeghQid/zd3j0n4aPNq2II8QDWNPbuY5c1pmDBRYcqlbN5zkuPf+tG35XU0mws
AfgRaP/jNlpVx+DTY2F5VyoKZiPb1E5wjBootwuCoJbD2hCdMU6cZCSqOy2H0Aft
AxtT4SvIBNAmex/3MlBCulnfCRz1Mjvl2/1Qo6FdPEYB8Zk+1SEtlgRMBKjGUjOd
Whp2Ccnrt05+PX18TftVLpd1yz1YWvPou9z+jscz9DHP2Ae0EPyIF0aGsMQUEjYY
WCgjabMzI5cs/EjDhOZz0MwXTxzon+pIpDOQokjUYA==
-----END CERTIFICATE-----
Generated at Sun May 19 11:41:58 2024 by rpki-client on console-ams.rpki-client.org