Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS205058.roa
File: AS205058.roa (raw, json)
Hash identifier: 62lPh9ZGqyClWdZEKtW/PtH/2p2zjWuftKo5ioW9SdE=
Subject key identifier: C0:8B:EC:3A:AE:C9:9C:B3:64:CC:3F:2F:D5:2F:29:DD:D2:0F:08:EE
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 71D6E47431B88AAA1E5FCFBB1FFA0FB4309724CE
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS205058.roa
Signing time: Wed 22 Oct 2025 21:31:20 +0000
ROA not before: Wed 22 Oct 2025 21:26:20 +0000
ROA not after: Wed 21 Oct 2026 21:31:20 +0000
asID: 205058
IP address blocks: 2a0b:4340:b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d6:e4:74:31:b8:8a:aa:1e:5f:cf:bb:1f:fa:0f:b4:30:97:24:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Oct 22 21:26:20 2025 GMT
Not After : Oct 21 21:31:20 2026 GMT
Subject: CN=C08BEC3AAEC99CB364CC3F2FD52F29DDD20F08EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:12:2b:f3:69:cd:cd:c5:37:76:5e:11:6c:
f1:02:b5:99:db:65:3f:c0:8d:f3:ff:30:54:b5:21:
81:93:ab:33:a4:fd:3c:50:e2:cd:5b:58:3c:42:f8:
f5:33:18:25:ec:9f:db:19:b9:68:60:7d:04:4e:15:
ce:6e:f6:ef:77:c1:7a:6e:71:db:2a:f0:f6:62:a2:
bb:7e:ba:5c:4d:76:ce:29:09:f5:29:21:42:cc:24:
63:eb:6f:1a:fa:32:a6:7f:e9:77:d5:f3:be:e4:cb:
d3:79:6f:93:39:e4:c0:72:50:04:c2:21:dc:ed:3c:
15:2a:d8:e1:d1:d0:2c:ad:cf:54:5a:44:6e:74:45:
f8:12:c3:f0:93:2a:6c:bb:fa:05:47:a0:29:40:28:
d2:73:d8:88:fa:97:f2:22:2e:89:e8:4e:a9:9e:05:
db:a1:29:2c:f1:be:7e:6b:88:a1:bf:8c:47:55:08:
39:c8:3b:c5:fc:ba:83:e9:79:0f:bf:3c:ce:be:19:
f9:14:9f:88:03:4b:61:7d:18:f1:ad:28:94:10:48:
98:89:4d:3e:98:46:2c:53:d1:b2:2f:06:2a:4e:8b:
a1:57:f9:26:06:2d:3b:2b:03:f2:f7:f0:2c:b7:e9:
88:35:c6:f4:04:43:92:b3:ed:c7:02:26:73:81:0b:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8B:EC:3A:AE:C9:9C:B3:64:CC:3F:2F:D5:2F:29:DD:D2:0F:08:EE
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:b0::/44
Signature Algorithm: sha256WithRSAEncryption
8a:84:c9:13:60:1d:90:07:2d:18:0a:d9:d7:62:86:de:7e:9c:
bd:b1:dc:0d:01:39:a8:7f:45:f2:c8:52:73:e1:e5:81:1f:77:
b1:4f:0a:f5:e6:17:a6:19:22:b2:c9:cd:99:34:4a:f7:43:00:
34:fd:c1:02:1d:fc:da:e5:d2:53:8e:31:39:65:43:6d:ae:ae:
dc:1b:18:5c:b3:9d:27:50:03:e9:e7:c5:7b:87:64:17:07:65:
3b:71:17:d0:be:b0:12:4b:14:6e:9e:ae:d7:92:05:a6:3b:58:
b0:e3:7b:f6:2f:90:24:ce:c5:a3:1c:e0:82:0c:7a:02:41:14:
bd:8a:85:4e:ec:51:c7:24:9f:3b:d3:92:5f:cb:b6:75:55:97:
70:72:2d:b8:53:69:d0:9e:bc:10:0d:44:65:cd:b5:a1:61:df:
02:a7:a9:14:82:f3:79:22:51:22:ea:32:6a:68:f3:8b:af:fb:
3a:f8:4f:50:d9:61:53:de:e3:39:b5:ba:28:2b:d9:77:7b:3f:
e5:2f:eb:43:c1:ca:8e:b6:05:cd:a2:15:27:f5:70:f4:8c:55:
42:ec:4c:99:29:97:2c:15:27:db:14:ee:a0:f1:b7:c3:96:0e:
f9:2e:e1:f1:5c:87:0f:7f:3b:9b:9a:d6:b0:39:19:20:cd:ea:
a1:2e:b8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:35:59 2025 by rpki-client