Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430333a3a2f34382d3438203d3e20323136343732.roa
File:                     326131323a646434373a336430333a3a2f34382d3438203d3e20323136343732.roa (raw, json)
Hash identifier:          NPkFNZKPDEsPBIzCGG5wcwxdKOihxxjfwYO0HWUyM4s=
Subject key identifier:   15:1F:04:E2:B8:C2:A7:EB:28:F0:29:3C:1E:FC:30:A5:5F:AE:95:C5
Certificate issuer:       /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial:       7659931CFDA5CF49EC493A03D79ADBA6705A543A
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access:    rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access:      rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430333a3a2f34382d3438203d3e20323136343732.roa
Signing time:             Mon 21 Aug 2023 22:40:06 +0000
ROA not before:           Mon 21 Aug 2023 22:35:06 +0000
ROA not after:            Mon 19 Aug 2024 22:40:06 +0000
asID:                     216472
IP address blocks:        2a12:dd47:3d03::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
                          rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.mft
                          rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 May 2024 13:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:59:93:1c:fd:a5:cf:49:ec:49:3a:03:d7:9a:db:a6:70:5a:54:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Validity
            Not Before: Aug 21 22:35:06 2023 GMT
            Not After : Aug 19 22:40:06 2024 GMT
        Subject: CN=151F04E2B8C2A7EB28F0293C1EFC30A55FAE95C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a3:00:56:a3:46:25:e2:73:a3:5b:2c:63:2b:
                    f6:37:42:6d:27:f2:e5:e7:98:93:0d:2e:f0:9b:52:
                    39:8a:c0:0b:00:a8:b8:58:86:51:f8:16:c4:cf:54:
                    6d:c5:dd:15:55:b7:77:48:52:3a:2d:f0:3e:35:59:
                    d6:00:80:f5:c4:21:80:1d:2c:d6:44:56:25:1c:8c:
                    e5:26:a5:4a:ee:99:5d:de:a2:76:42:e9:56:b3:8b:
                    ce:e0:f7:9c:06:4b:1d:95:76:c8:49:85:f4:a3:5f:
                    19:55:50:c1:c8:6f:03:f3:46:b4:e9:0f:51:96:4f:
                    ea:bf:a2:67:19:18:bb:7a:29:7a:e7:b3:ce:3e:eb:
                    f2:e9:3a:f4:58:57:76:74:b0:09:41:8f:96:c0:37:
                    ff:38:78:06:a8:cf:74:13:b3:f0:60:20:4b:bd:46:
                    f6:f5:8b:64:42:e1:84:f5:9b:5e:15:e9:51:9f:26:
                    f6:f1:e0:7d:40:95:26:77:9e:9b:3d:f2:0c:e4:9f:
                    66:bd:27:1f:b7:d3:e9:73:ec:a2:6a:54:44:e9:30:
                    f2:83:2c:80:b2:0f:38:54:4c:ef:2d:38:13:9d:bd:
                    fa:e5:ef:04:07:d2:c0:8e:0d:b8:ae:6f:01:5e:3a:
                    70:4d:36:87:ba:d4:b8:19:32:aa:82:15:a4:de:68:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1F:04:E2:B8:C2:A7:EB:28:F0:29:3C:1E:FC:30:A5:5F:AE:95:C5
            X509v3 Authority Key Identifier:
                keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430333a3a2f34382d3438203d3e20323136343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3d03::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:66:c1:b3:a5:e9:94:c1:66:e3:6d:34:b5:c1:c0:3f:2a:e9:
         6f:d9:cf:a8:76:0e:3a:5b:9b:37:60:27:3f:71:43:18:08:07:
         4e:cd:44:ae:f4:c2:ed:fb:0c:c5:64:70:be:82:22:f3:63:4d:
         af:b1:45:84:9a:56:51:4c:12:0d:90:9e:8a:c5:57:0f:21:cb:
         89:74:e1:fb:17:9c:2f:07:3d:4f:5c:f3:e2:35:c9:e9:e9:4b:
         f2:36:81:6f:e5:79:77:95:b3:ec:af:5a:57:47:07:cc:7b:92:
         06:33:82:5c:2f:08:0d:2e:79:cd:50:ea:95:8e:57:4b:bd:ba:
         c3:d2:fc:61:df:62:f0:2c:9d:9e:3a:e8:78:32:f9:17:f4:2d:
         22:7a:9a:33:18:06:07:00:51:6f:cc:9d:7c:b7:b9:23:a8:ca:
         91:72:29:64:a7:fe:cb:b9:fe:53:75:82:91:47:64:e3:e8:13:
         39:44:3f:be:38:6e:70:7d:79:44:b3:65:af:8f:27:16:9d:cc:
         2f:96:3a:33:d9:f4:59:5a:c2:81:12:7c:0d:45:1d:cf:24:c1:
         1c:39:fb:d1:53:34:7a:3d:ed:98:fe:ea:43:75:8f:1c:cb:9b:
         6c:9b:8d:77:ef:6e:c1:db:6d:03:93:f3:37:e3:2f:c1:ad:c7:
         c7:36:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 01:37:18 2024 by rpki-client on console-fra.rpki-client.org