Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/323030313a3637633a6138343a3a2f34382d3438203d3e20393435.roa
File: 323030313a3637633a6138343a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier: KgU7r5/Plc6KxLG2kkLoU4vfy5smaPq1cKvYFF6AnCo=
Subject key identifier: 81:62:0D:AA:85:A0:77:56:6C:B7:A7:98:D6:37:ED:DF:95:FC:32:D4
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 3D59F2C440E2731E5C14BD73C78F1B89F312FF3E
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/323030313a3637633a6138343a3a2f34382d3438203d3e20393435.roa
Signing time: Tue 17 Oct 2023 16:13:36 +0000
ROA not before: Tue 17 Oct 2023 16:08:36 +0000
ROA not after: Tue 15 Oct 2024 16:13:36 +0000
asID: 945
IP address blocks: 2001:67c:a84::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:59:f2:c4:40:e2:73:1e:5c:14:bd:73:c7:8f:1b:89:f3:12:ff:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:36 2023 GMT
Not After : Oct 15 16:13:36 2024 GMT
Subject: CN=81620DAA85A077566CB7A798D637EDDF95FC32D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:dc:f5:c7:f4:cb:48:70:25:a5:93:92:88:
f5:d1:dd:97:87:4e:72:d1:38:1e:8a:f7:ba:4e:b2:
8f:48:fa:13:8d:da:5b:c4:ab:7e:16:ab:21:17:d7:
e6:2d:9c:9f:2e:cd:8c:88:63:b9:b3:e3:e1:c1:38:
be:a7:68:77:da:9c:1e:e3:39:d6:18:65:b3:27:fd:
2d:5d:c3:e0:f1:d9:96:a1:0d:c7:bb:c4:f3:91:1a:
52:d1:67:7a:10:28:c3:cc:31:1c:73:fa:95:08:c4:
10:62:da:e3:09:22:38:74:ae:0b:5a:25:22:e9:7c:
d2:75:3b:b9:b2:53:e8:8a:e4:e2:06:39:4c:9a:b5:
17:45:d6:8c:bb:3a:ad:4c:1e:e2:62:2d:73:40:63:
cb:0d:9b:cc:1e:76:94:65:2c:05:8d:ea:4e:16:78:
54:ef:15:14:cf:64:6a:c9:4d:19:ee:ee:3e:a0:89:
49:06:d0:37:7d:e7:c5:4f:49:79:17:f9:69:8f:cb:
c6:90:0a:0f:11:6e:9b:88:4e:61:63:ae:b5:71:3f:
f0:d5:34:22:dc:55:50:25:a9:9b:bf:3b:13:c7:e9:
06:65:77:65:83:cc:f6:7d:77:77:f9:97:4e:50:c3:
87:86:d1:07:ff:9e:d7:bb:7d:08:33:ae:30:41:8a:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:62:0D:AA:85:A0:77:56:6C:B7:A7:98:D6:37:ED:DF:95:FC:32:D4
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/323030313a3637633a6138343a3a2f34382d3438203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a84::/48
Signature Algorithm: sha256WithRSAEncryption
83:ec:a7:64:ad:92:6f:1b:40:38:17:94:d4:70:f3:e5:e6:48:
5d:1b:fb:74:6c:bb:b9:03:31:f6:02:99:d1:05:f5:7f:11:a3:
fc:9b:7c:3b:3c:55:5a:fd:c8:1d:5b:79:c6:4c:14:6f:5d:c6:
53:d0:56:76:a3:40:70:d5:80:2a:f5:e9:e8:16:50:92:3f:c8:
30:a9:ca:1f:af:11:d7:c1:32:af:79:13:e9:23:6c:5c:1f:52:
d8:80:c7:61:af:2c:14:68:4b:8c:df:8f:b6:09:1d:4b:2c:60:
19:74:6c:51:57:16:e1:be:6d:9e:48:3c:b0:f7:46:43:0f:28:
e5:58:a5:1a:30:d4:2e:92:b0:65:47:30:52:f5:9a:8f:e1:59:
02:09:2d:3f:1d:97:bd:c5:02:1e:1e:5a:26:9f:58:d3:51:c4:
08:eb:9e:a9:47:eb:bc:86:13:84:25:45:33:6c:26:3d:88:e5:
fa:11:23:15:39:ec:63:a1:f8:95:66:4e:1b:82:fd:58:5c:72:
e6:e0:90:ee:6c:d2:52:56:d0:f5:59:59:d2:8f:91:25:88:b1:
d5:41:f1:41:40:4d:25:8e:eb:53:08:32:8e:a5:bf:e6:73:0b:
74:32:52:af:fe:1e:6b:fc:ee:3f:48:2b:c5:2f:c2:58:08:3e:
0d:2f:1e:78
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIUPVnyxEDicx5cFL1zx48bifMS/z4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzEwMTcxNjA4MzZaFw0yNDEwMTUxNjEzMzZaMDMxMTAvBgNV
BAMTKDgxNjIwREFBODVBMDc3NTY2Q0I3QTc5OEQ2MzdFRERGOTVGQzMyRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsw9z1x/TLSHAlpZOSiPXR3ZeH
TnLROB6K97pOso9I+hON2lvEq34WqyEX1+YtnJ8uzYyIY7mz4+HBOL6naHfanB7j
OdYYZbMn/S1dw+Dx2ZahDce7xPORGlLRZ3oQKMPMMRxz+pUIxBBi2uMJIjh0rgta
JSLpfNJ1O7myU+iK5OIGOUyatRdF1oy7Oq1MHuJiLXNAY8sNm8wedpRlLAWN6k4W
eFTvFRTPZGrJTRnu7j6giUkG0Dd958VPSXkX+WmPy8aQCg8RbpuITmFjrrVxP/DV
NCLcVVAlqZu/OxPH6QZld2WDzPZ9d3f5l05Qw4eG0Qf/nte7fQgzrjBBioMBAgMB
AAGjggHKMIIBxjAdBgNVHQ4EFgQUgWINqoWgd1Zst6eY1jft35X8MtQwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC81
LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzNDMDVCRkQ5OUYzRTYuY2VyMHMG
CCsGAQUFBwELBGcwZTBjBggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMS8zMjMwMzAzMTNhMzYzNzYzM2E2MTM4MzQzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQZ8CoQwDQYJKoZIhvcNAQELBQAD
ggEBAIPsp2Stkm8bQDgXlNRw8+XmSF0b+3Rsu7kDMfYCmdEF9X8Ro/ybfDs8VVr9
yB1becZMFG9dxlPQVnajQHDVgCr16egWUJI/yDCpyh+vEdfBMq95E+kjbFwfUtiA
x2GvLBRoS4zfj7YJHUssYBl0bFFXFuG+bZ5IPLD3RkMPKOVYpRow1C6SsGVHMFL1
mo/hWQIJLT8dl73FAh4eWiafWNNRxAjrnqlH67yGE4QlRTNsJj2I5foRIxU57GOh
+JVmThuC/VhccubgkO5s0lJW0PVZWdKPkSWIsdVB8UFATSWO61MIMo6lv+ZzC3Qy
Uq/+Hmv87j9IK8UvwlgIPg0vHng=
-----END CERTIFICATE-----
Generated at Sun May 5 14:29:47 2024 by rpki-client on console-ams.rpki-client.org