Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/323030313a3637633a6139383a3a2f34382d3438203d3e20393435.roa
File: 323030313a3637633a6139383a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier: eSQkleAC8d8mdnmJ8816yKvCcXiqDHD75QX9lIBGxGw=
Subject key identifier: 6D:11:85:AB:58:14:F9:C3:5E:48:A4:62:E5:07:73:50:3D:C5:91:89
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 771D940B1006A04E4762CD22F57AD90BEC4B47F8
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/323030313a3637633a6139383a3a2f34382d3438203d3e20393435.roa
Signing time: Tue 17 Oct 2023 16:13:24 +0000
ROA not before: Tue 17 Oct 2023 16:08:24 +0000
ROA not after: Tue 15 Oct 2024 16:13:24 +0000
asID: 945
IP address blocks: 2001:67c:a98::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1d:94:0b:10:06:a0:4e:47:62:cd:22:f5:7a:d9:0b:ec:4b:47:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:24 2023 GMT
Not After : Oct 15 16:13:24 2024 GMT
Subject: CN=6D1185AB5814F9C35E48A462E50773503DC59189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:04:c0:2d:64:15:2e:a9:70:fc:37:eb:c8:
2a:98:01:d7:c0:64:e6:e2:38:ca:6d:95:27:5b:77:
b6:91:d0:a0:d8:19:1a:2d:78:df:99:0f:5f:64:93:
c5:ed:e3:3b:74:4f:82:cc:40:83:31:08:b7:43:19:
f5:a5:06:5e:38:e8:24:5d:9f:59:a1:74:cf:01:b1:
bb:1d:78:8c:26:41:71:60:85:65:84:a4:d6:70:35:
c4:e0:b6:9f:da:27:94:25:51:df:15:26:63:d3:28:
f0:d4:4c:17:ba:14:14:89:a9:6b:91:90:49:98:20:
9a:1b:96:f5:59:13:5f:77:7a:d1:ff:de:1f:ae:41:
7c:62:9e:69:c1:df:46:0a:7e:65:93:71:7e:43:95:
08:47:16:2c:52:93:45:c0:d6:38:97:d2:cc:25:0a:
32:74:74:0c:86:9a:fd:31:d9:4c:11:01:2f:f2:2a:
8d:a4:42:1e:7a:9a:54:54:45:11:2e:ab:7f:24:41:
d3:2a:99:87:81:62:9c:7f:66:32:21:fc:22:28:39:
e5:e1:6b:6d:b2:26:d7:e3:b4:b4:d5:d9:10:21:3e:
39:bc:07:ec:b3:49:6d:fc:eb:3d:66:d2:9f:9b:f2:
fa:58:27:db:bc:3d:27:7f:d7:40:b8:59:21:c9:ad:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:85:AB:58:14:F9:C3:5E:48:A4:62:E5:07:73:50:3D:C5:91:89
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/323030313a3637633a6139383a3a2f34382d3438203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a98::/48
Signature Algorithm: sha256WithRSAEncryption
a2:c3:6f:fb:64:27:04:b9:b0:cf:f0:2b:4f:23:96:c3:38:72:
b4:fe:29:58:5f:b2:f8:fa:81:02:6d:89:d5:c6:1d:8a:8b:36:
de:ff:3d:77:a7:38:ef:c1:2e:09:12:e4:24:f3:a5:86:d2:a1:
42:76:15:85:26:d8:c9:d9:7f:f9:9b:6c:1b:90:92:37:9a:7f:
21:af:2b:d8:6a:c3:b4:1f:18:99:36:ad:22:ef:8b:ac:bf:49:
4e:ef:08:c1:01:d4:b4:da:77:38:10:95:b8:4e:46:d1:b0:7d:
a1:1f:d9:68:ca:c6:45:96:2a:9b:a1:b0:ff:bf:3c:72:ef:ea:
58:57:96:5f:84:4e:83:8b:95:3c:dc:9c:9f:c3:53:b5:5f:b5:
00:02:ce:94:1e:0d:0e:29:5b:22:0d:d3:e8:58:bd:87:ee:8e:
0c:00:fb:08:c0:e4:9d:ee:7f:a3:21:5e:6a:7d:07:d7:8d:e9:
19:a2:d4:7d:b1:16:8c:53:75:9e:14:3a:a6:00:b4:cf:d0:e1:
1d:8e:6f:65:16:20:d1:cd:a2:ea:70:34:fb:62:2c:38:3b:ae:
1b:34:b5:35:b7:14:4f:6d:ae:ff:15:f0:a4:fe:1b:ec:70:27:
67:2b:2f:16:78:95:48:67:0d:0f:ca:a2:ae:f8:54:a8:d8:64:
11:8f:7d:a1
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIUdx2UCxAGoE5HYs0i9XrZC+xLR/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzEwMTcxNjA4MjRaFw0yNDEwMTUxNjEzMjRaMDMxMTAvBgNV
BAMTKDZEMTE4NUFCNTgxNEY5QzM1RTQ4QTQ2MkU1MDc3MzUwM0RDNTkxODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJwTALWQVLqlw/DfryCqYAdfA
ZObiOMptlSdbd7aR0KDYGRoteN+ZD19kk8Xt4zt0T4LMQIMxCLdDGfWlBl446CRd
n1mhdM8BsbsdeIwmQXFghWWEpNZwNcTgtp/aJ5QlUd8VJmPTKPDUTBe6FBSJqWuR
kEmYIJoblvVZE193etH/3h+uQXxinmnB30YKfmWTcX5DlQhHFixSk0XA1jiX0swl
CjJ0dAyGmv0x2UwRAS/yKo2kQh56mlRURREuq38kQdMqmYeBYpx/ZjIh/CIoOeXh
a22yJtfjtLTV2RAhPjm8B+yzSW386z1m0p+b8vpYJ9u8PSd/10C4WSHJrTxhAgMB
AAGjggHKMIIBxjAdBgNVHQ4EFgQUbRGFq1gU+cNeSKRi5QdzUD3FkYkwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC81
LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzNDMDVCRkQ5OUYzRTYuY2VyMHMG
CCsGAQUFBwELBGcwZTBjBggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMS8zMjMwMzAzMTNhMzYzNzYzM2E2MTM5MzgzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQZ8CpgwDQYJKoZIhvcNAQELBQAD
ggEBAKLDb/tkJwS5sM/wK08jlsM4crT+KVhfsvj6gQJtidXGHYqLNt7/PXenOO/B
LgkS5CTzpYbSoUJ2FYUm2MnZf/mbbBuQkjeafyGvK9hqw7QfGJk2rSLvi6y/SU7v
CMEB1LTadzgQlbhORtGwfaEf2WjKxkWWKpuhsP+/PHLv6lhXll+EToOLlTzcnJ/D
U7VftQACzpQeDQ4pWyIN0+hYvYfujgwA+wjA5J3uf6MhXmp9B9eN6Rmi1H2xFoxT
dZ4UOqYAtM/Q4R2Ob2UWINHNoupwNPtiLDg7rhs0tTW3FE9trv8V8KT+G+xwJ2cr
LxZ4lUhnDQ/Koq74VKjYZBGPfaE=
-----END CERTIFICATE-----
Generated at Sun May 5 15:39:27 2024 by rpki-client on console-fra.rpki-client.org