Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa
File: 326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa (raw, json)
Hash identifier: j5NA+PlfqltsjFT63imwms5ZozoyzUp3wxV5SfhhV8o=
Subject key identifier: 50:E7:CD:EF:5C:A1:34:03:60:41:08:B8:33:25:C4:E9:79:50:46:89
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 6D9BA9E86905539A2836590374C537A15D1B4A24
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa
Signing time: Wed 15 May 2024 20:55:24 +0000
ROA not before: Wed 15 May 2024 20:50:24 +0000
ROA not after: Wed 14 May 2025 20:55:24 +0000
asID: 207314
IP address blocks: 2a12:dd47:3a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 06:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9b:a9:e8:69:05:53:9a:28:36:59:03:74:c5:37:a1:5d:1b:4a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: May 15 20:50:24 2024 GMT
Not After : May 14 20:55:24 2025 GMT
Subject: CN=50E7CDEF5CA13403604108B83325C4E979504689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:79:96:3e:4b:19:7d:30:d3:0d:f8:4b:5b:
01:b6:ce:5c:2b:22:95:6a:10:5b:97:10:e3:2f:6a:
30:11:6f:41:41:d3:c7:3c:c2:26:e0:2f:0b:b1:c2:
d2:d8:ce:e9:17:7a:62:01:81:38:06:9b:e1:1d:65:
b7:cc:4e:2a:23:20:67:22:1e:8d:02:4a:7c:24:bd:
c0:05:90:a8:90:b3:f4:81:44:84:a6:34:7c:4c:b5:
c7:ec:17:c7:37:e4:fb:6a:f5:4c:fc:e1:65:65:0c:
99:f9:c5:52:42:07:dd:66:a3:0c:d7:c8:76:b7:68:
67:48:96:f2:95:93:ba:cb:03:92:d3:c9:54:00:6c:
a5:26:4c:1d:3a:c6:95:c6:da:f1:20:c7:d8:14:51:
b2:4d:3b:cf:34:08:58:4e:f4:61:8a:4f:42:07:3a:
88:ef:29:e7:9d:b0:4e:bb:6f:b8:d7:7d:7f:32:f7:
1d:84:e9:0e:7e:d9:33:c5:6c:f2:72:07:82:04:c7:
a1:8b:39:b6:30:a5:02:de:01:8f:bf:a1:93:55:e1:
ae:1a:b2:87:e0:6c:13:e2:14:83:2d:9d:c2:c6:2c:
1a:fe:b1:18:fb:07:ec:6c:57:dc:90:1b:49:19:5b:
19:31:e3:4d:0e:b7:a0:35:20:67:a8:30:7b:cb:ae:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E7:CD:EF:5C:A1:34:03:60:41:08:B8:33:25:C4:E9:79:50:46:89
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3a00::/40
Signature Algorithm: sha256WithRSAEncryption
8b:91:b0:6d:00:c1:53:78:1e:94:2e:a1:ba:ce:77:3e:54:74:
57:c7:98:a7:cd:6d:57:cd:ec:39:57:b2:db:35:a5:72:da:58:
22:21:02:ae:1d:89:36:ae:69:16:9f:5a:a7:03:76:5c:db:58:
ab:48:53:95:48:c0:dd:0a:99:cf:c8:63:a4:f2:2d:32:23:d1:
be:4f:7c:e1:45:63:39:19:aa:8a:bd:80:2d:dc:cf:29:a3:5a:
f6:86:51:fc:34:39:14:aa:64:87:fc:73:90:62:92:c2:ee:a4:
9a:51:0a:35:a9:e3:ad:33:74:60:c8:1a:06:b1:6e:d8:ab:d8:
db:f1:0a:33:67:3f:d4:1a:8e:7e:7f:43:22:5a:15:d1:23:c1:
fe:1d:bc:c3:0a:02:8e:26:81:6b:94:06:8a:6e:1d:50:a9:4a:
1b:fc:81:b6:28:e1:cf:dd:dd:07:79:28:c2:dc:4f:a3:ef:97:
a0:7f:14:70:ba:a8:20:99:00:11:4f:2e:e4:35:2f:52:48:dc:
33:49:4f:30:dd:24:0c:1a:19:d7:66:d6:82:fa:10:8a:6e:6f:
a6:ae:6a:42:48:a8:b1:bf:e7:ab:b1:09:82:87:3b:c3:b4:24:
25:ad:59:39:2e:28:2e:cc:56:61:aa:94:61:30:d3:5a:fa:85:
95:4d:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:37:24 2024 by rpki-client on console-fra.rpki-client.org