Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS48539.roa
File: AS48539.roa (raw, json)
Hash identifier: 5dd2dJzQ9wQbJcLPgXUQXFdRPEQ7nbKdnkejMEIJdnY=
Subject key identifier: 83:E1:C5:9E:10:41:8B:C4:FE:8F:31:3B:87:B0:DA:F3:93:5F:C5:79
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 547026AA5067A9258C57E8101B0F67C8313FA1CC
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS48539.roa
Signing time: Sat 06 Jun 2026 10:31:37 +0000
ROA not before: Sat 06 Jun 2026 10:26:37 +0000
ROA not after: Sat 05 Jun 2027 10:31:37 +0000
asID: 48539
IP address blocks: 185.209.86.0/23 maxlen: 24
188.244.96.0/23 maxlen: 24
188.244.96.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:70:26:aa:50:67:a9:25:8c:57:e8:10:1b:0f:67:c8:31:3f:a1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Jun 6 10:26:37 2026 GMT
Not After : Jun 5 10:31:37 2027 GMT
Subject: CN=83E1C59E10418BC4FE8F313B87B0DAF3935FC579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:87:6c:f2:7f:54:7b:33:58:bf:f7:4b:c1:
91:8c:47:80:7b:e5:b0:1e:27:79:df:47:c4:c0:bc:
01:99:c9:37:33:5f:64:cc:b9:be:1e:d7:13:e2:95:
04:9a:0a:eb:3a:f2:de:05:92:6e:53:23:69:6a:06:
28:54:4c:c0:8a:da:50:70:59:45:71:9e:11:ab:8c:
b9:bf:6e:a1:93:51:9d:cf:fb:02:56:42:d6:06:59:
76:74:70:68:fb:a3:80:5d:e9:c7:c3:1f:30:6c:ad:
54:0e:fc:6e:fe:e0:b9:98:f7:8d:e8:39:5a:aa:74:
84:60:f5:6a:32:07:9e:e7:e2:30:91:17:a8:28:e8:
9e:e7:b1:3d:1a:6d:4d:a4:ac:06:fa:cb:50:98:3a:
76:9c:03:b3:78:5d:b6:8e:2e:6e:c1:35:f4:e6:bf:
ff:d0:d3:0d:ef:d1:bf:76:0f:55:21:c6:ff:22:cd:
1c:6f:25:ce:b4:59:0c:29:ba:84:1d:eb:4c:5e:8b:
89:dc:80:47:b1:83:bc:92:a8:28:26:f2:13:9a:4b:
46:ae:26:ff:91:f9:5f:ed:9f:34:79:f9:a3:9d:45:
47:da:8f:fb:b7:b3:3c:61:4d:10:8d:e1:66:e6:42:
09:65:0e:ea:0b:4a:87:40:08:f2:dc:10:67:61:b5:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E1:C5:9E:10:41:8B:C4:FE:8F:31:3B:87:B0:DA:F3:93:5F:C5:79
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS48539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.86.0/23
188.244.96.0/23
Signature Algorithm: sha256WithRSAEncryption
21:73:c9:6a:77:d1:82:6a:d5:fe:8c:ac:04:11:27:5a:ff:83:
d6:2c:a5:e2:91:95:c5:5f:95:27:76:a8:5e:54:c3:75:25:61:
39:15:df:95:6f:83:66:bb:a7:f3:54:c9:a5:ea:59:01:ee:a6:
56:85:ff:70:01:3e:46:9a:fa:f0:67:c0:3c:48:2b:ed:ab:c2:
3b:cc:c9:95:13:06:c1:e0:66:82:0a:71:7d:de:70:cc:0c:72:
8a:27:50:95:f9:d1:42:49:90:69:d5:93:07:8a:49:ac:13:d0:
c0:56:3e:3e:e2:84:16:05:7c:50:91:30:fe:ae:3a:d7:54:f2:
02:7e:9d:5a:81:5c:cc:2b:31:00:4f:23:19:79:26:a9:2c:bf:
71:2a:58:da:05:d4:1a:6f:80:1c:9c:26:f1:95:8d:10:3e:4a:
84:69:9f:c1:8c:83:b5:2b:4e:da:e3:90:46:3b:dd:aa:1f:5c:
df:4c:74:4c:13:b3:5e:a0:51:cc:7c:5a:b5:b8:d1:d0:f9:ad:
20:48:c0:42:77:de:9d:1b:63:88:90:90:cb:6b:6f:44:c2:64:
04:8c:6f:3a:96:38:a6:11:51:11:4b:86:d8:6f:7a:17:4a:5b:
b7:3f:a6:f3:26:56:b6:20:5d:01:ea:0a:fb:de:63:0a:62:25:
ee:17:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:15:24 2026 by rpki-client