Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS203843/0/326131323a646434373a383065343a3a2f34382d3438203d3e203331383938.roa
File:                     326131323a646434373a383065343a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          FKSdCbF8/xfag/Yj4mGDd3ZcLqfrMkInbVn7rj7NVJs=
Subject key identifier:   A1:2E:13:37:F2:83:F4:7B:5A:8A:68:52:EC:93:F6:63:09:1A:79:70
Certificate issuer:       /CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
Certificate serial:       128729831B7C77AC186BAF7F20A543D2A1E1102B
Authority key identifier: CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
Authority info access:    rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
Subject info access:      rsync://rpki.co/repo/AS203843/0/326131323a646434373a383065343a3a2f34382d3438203d3e203331383938.roa
Signing time:             Wed 20 Mar 2024 13:14:29 +0000
ROA not before:           Wed 20 Mar 2024 13:09:29 +0000
ROA not after:            Wed 19 Mar 2025 13:14:29 +0000
asID:                     31898
IP address blocks:        2a12:dd47:80e4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.crl
                          rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
                          rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 05:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:87:29:83:1b:7c:77:ac:18:6b:af:7f:20:a5:43:d2:a1:e1:10:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
        Validity
            Not Before: Mar 20 13:09:29 2024 GMT
            Not After : Mar 19 13:14:29 2025 GMT
        Subject: CN=A12E1337F283F47B5A8A6852EC93F663091A7970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:2d:55:f6:98:61:17:e4:84:9d:27:25:56:
                    95:57:13:fe:a0:68:3e:44:fc:63:cb:54:09:c8:e2:
                    cd:c1:45:52:8a:bf:e8:d2:c8:00:53:65:18:45:4b:
                    d8:9c:31:86:6e:bb:af:7a:1b:6d:ae:70:7c:05:87:
                    6f:37:99:a3:36:66:75:c8:39:37:b8:79:ae:4e:0a:
                    f1:cb:82:f1:8a:54:92:3b:2b:bb:7b:c7:ce:a5:f3:
                    74:87:56:ff:db:06:43:fd:3b:a4:d6:99:3f:24:90:
                    34:36:02:eb:9c:b9:c4:69:e6:f2:eb:20:95:b2:70:
                    49:61:9a:9a:99:0c:c1:ba:b9:0c:62:4f:42:37:70:
                    b1:81:6c:ce:c1:6d:fb:3b:e9:eb:a3:a3:38:2e:53:
                    05:d3:a8:67:63:09:d7:52:25:6f:af:7e:de:f5:92:
                    64:77:d2:90:31:5e:bc:f7:99:de:5e:55:76:78:f5:
                    1f:a2:d3:12:d0:8a:fd:bd:f6:57:bd:4b:e4:3a:cb:
                    78:3a:a6:59:58:f3:31:26:f9:3d:dc:61:15:2a:fb:
                    a8:84:a2:aa:44:af:10:77:83:c8:6f:d6:f2:4f:b1:
                    5f:a2:8e:d4:37:32:9e:8e:d8:82:47:0e:a3:75:ac:
                    e6:60:33:5b:92:e7:ca:69:8e:01:f1:52:22:d4:ea:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2E:13:37:F2:83:F4:7B:5A:8A:68:52:EC:93:F6:63:09:1A:79:70
            X509v3 Authority Key Identifier:
                keyid:CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS203843/0/326131323a646434373a383065343a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:fe:43:e8:19:a3:50:b2:b8:4f:db:f0:ae:4f:f3:0c:50:
         fb:79:29:16:6f:36:8d:e9:1e:64:63:e3:30:8c:68:cd:e4:0b:
         41:f1:82:09:2f:c7:5e:a0:73:ba:d6:44:05:21:4d:f3:a5:e9:
         af:33:84:ac:a5:2e:78:67:a3:6a:80:06:45:ef:b7:42:9a:20:
         bb:7c:08:95:01:a1:0e:c5:90:6a:50:9a:b4:fc:21:d4:38:f3:
         17:7a:b6:44:55:81:23:9f:c3:1c:76:f7:56:a6:48:c9:c3:6c:
         f3:66:d6:5a:7a:45:ba:24:26:c8:82:24:52:00:8d:65:61:d7:
         0b:51:ad:de:b1:da:5f:a4:a9:73:3e:74:6a:ca:3a:6b:b1:6a:
         e8:b2:65:19:c8:d4:a4:a6:6a:77:f8:67:ad:69:16:7d:7f:88:
         e5:e6:68:d8:5a:01:b8:d0:9f:dc:b9:43:18:60:01:86:00:72:
         be:b7:ae:76:02:ef:4b:8b:59:fe:6e:da:ac:36:cc:59:05:ba:
         b9:d6:64:21:cd:af:22:c4:01:3c:b9:76:d6:fe:77:e5:ad:f9:
         88:d6:5a:ce:31:0f:db:aa:2d:c1:97:66:66:ee:f6:52:b8:59:
         e5:34:c6:db:ec:8c:d4:f3:da:27:ab:38:3e:db:8d:92:0f:b0:
         d5:02:6d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:32:00 2024 by rpki-client on console-fra.rpki-client.org