Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa
File:                     326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier:          brJD6QuTIwrRBdyuQRPMAipwj1VPwBSvIuF/CPyYvc0=
Subject key identifier:   7D:31:89:45:21:BF:97:D1:1F:4C:EB:DE:A3:10:02:44:06:B3:CF:19
Certificate issuer:       /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial:       539A73F993DF563BAE8D9ECA29E50DF92D88CD03
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access:    rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access:      rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa
Signing time:             Mon 18 Mar 2024 22:14:26 +0000
ROA not before:           Mon 18 Mar 2024 22:09:26 +0000
ROA not after:            Mon 17 Mar 2025 22:14:26 +0000
asID:                     211604
IP address blocks:        2a12:dd47:3d01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
                          rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.mft
                          rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Apr 2024 14:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9a:73:f9:93:df:56:3b:ae:8d:9e:ca:29:e5:0d:f9:2d:88:cd:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Validity
            Not Before: Mar 18 22:09:26 2024 GMT
            Not After : Mar 17 22:14:26 2025 GMT
        Subject: CN=7D31894521BF97D11F4CEBDEA310024406B3CF19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:2c:c1:4b:a1:a3:d9:ae:a4:56:b2:b6:c5:
                    ec:3b:db:53:c2:55:b2:8d:88:1d:5b:bd:19:e2:e2:
                    2c:09:3f:50:29:9d:8c:22:0d:34:8d:36:14:fb:3b:
                    6f:6f:30:e9:86:66:49:59:20:9b:82:d6:c7:ff:9d:
                    e2:c7:bc:c6:8f:54:ca:c7:86:f8:4e:58:e3:dd:2b:
                    81:e3:8f:53:87:25:2e:1e:a0:5c:e6:81:d5:89:f4:
                    dd:5e:d1:11:40:ee:3e:b1:f0:49:e1:91:d2:65:5a:
                    5d:e5:28:37:9c:fe:2f:83:78:a9:6c:58:af:18:70:
                    03:e3:2c:a6:b2:ff:d6:2c:80:9d:e4:c7:c0:9c:06:
                    14:e8:68:20:f2:0f:40:04:11:66:eb:06:23:c9:ac:
                    cc:fd:77:20:83:79:c8:52:4f:18:e5:3e:e8:ac:de:
                    ea:39:30:93:02:ec:f5:f7:a0:b5:4c:fe:a8:73:08:
                    83:01:b8:1a:93:99:58:34:45:e6:e3:23:0a:74:55:
                    8e:cd:b8:d9:ca:3a:7f:96:af:cf:a2:bb:35:13:5c:
                    35:59:96:ce:f6:ea:8b:52:6e:7d:bf:0d:68:d3:41:
                    ab:67:b9:e1:87:e5:76:cf:d2:b8:84:34:4d:d3:28:
                    96:d7:e2:7f:32:87:24:9b:6a:c4:05:11:f4:e0:0b:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:31:89:45:21:BF:97:D1:1F:4C:EB:DE:A3:10:02:44:06:B3:CF:19
            X509v3 Authority Key Identifier:
                keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3d01::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:b8:ac:83:dd:a0:4b:8a:7f:1f:50:3d:89:bd:af:26:e0:ef:
         8a:39:9b:b5:8f:ef:af:ea:8f:8c:40:e1:25:11:c2:0a:f8:a7:
         83:2c:17:78:a6:5c:c3:03:80:f0:4f:6f:16:00:59:7d:eb:ac:
         7a:f6:47:d5:76:c8:1f:11:21:8a:51:2a:80:64:1c:25:0b:b9:
         e4:a6:3e:1e:1d:52:ba:9c:bb:1a:61:1f:0d:64:f8:9a:a5:d5:
         29:38:b3:1d:36:da:2d:95:15:cf:4d:e0:42:7e:ba:4d:91:f8:
         49:8d:58:d0:b1:dd:ac:6e:d1:a9:7c:28:8e:e8:5c:9f:6b:d9:
         11:83:83:78:fe:8c:bd:a0:c9:8a:7e:f1:db:46:97:a7:55:96:
         a8:ae:44:02:39:f6:e7:25:05:a2:4d:b0:1f:12:99:7f:dc:17:
         74:1d:a8:1f:4b:ba:16:70:31:0d:41:f2:be:64:83:1e:a0:53:
         32:e4:da:ee:45:b4:6e:05:47:62:af:5a:be:70:03:4b:42:78:
         52:80:16:32:86:05:bb:e1:88:2d:77:99:c6:4d:f5:f0:ba:a7:
         e9:16:8e:d6:65:f6:3e:12:ff:af:cf:1f:79:5f:76:19:a5:50:
         89:97:cb:ce:f8:a8:92:b0:3d:5b:d1:0a:98:0f:69:1c:8c:21:
         6f:c4:dc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:46:31 2024 by rpki-client on console-fra.rpki-client.org