Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/323030313a3637633a6139633a3a2f34382d3438203d3e20393435.roa
File: 323030313a3637633a6139633a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier: Cd5lo0DoL3dBmkFl/Yp2NOCfSVwImb6RGxlPVJjLPC4=
Subject key identifier: 4A:12:E8:35:C9:47:D7:7D:24:75:9F:36:DE:28:83:6A:21:31:B7:1E
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 0D50E35261581C8C68FF07ABC799B5C61434DDA3
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/323030313a3637633a6139633a3a2f34382d3438203d3e20393435.roa
Signing time: Tue 17 Oct 2023 16:13:30 +0000
ROA not before: Tue 17 Oct 2023 16:08:30 +0000
ROA not after: Tue 15 Oct 2024 16:13:30 +0000
asID: 945
IP address blocks: 2001:67c:a9c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:50:e3:52:61:58:1c:8c:68:ff:07:ab:c7:99:b5:c6:14:34:dd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:30 2023 GMT
Not After : Oct 15 16:13:30 2024 GMT
Subject: CN=4A12E835C947D77D24759F36DE28836A2131B71E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:74:c6:80:b6:d6:2d:87:cd:3e:0b:64:5d:
d6:c5:5b:6a:e3:18:38:13:8e:22:03:6e:48:07:f5:
1e:43:7c:84:9d:11:c1:9c:fa:7f:3b:a8:35:1f:58:
f4:5c:57:2f:86:45:2d:ba:da:ac:ec:28:18:d0:1e:
b8:f9:56:ab:57:ae:3e:8b:e2:7a:e8:ca:74:0d:83:
17:62:90:15:68:a9:89:f8:29:22:f8:db:dc:a8:96:
3b:20:c1:00:ab:02:81:09:d0:48:28:e0:d2:cf:75:
9a:10:d3:7b:e5:4b:fa:26:bd:d8:4d:4e:ec:98:85:
58:b1:98:4e:4f:b2:8d:aa:7a:a5:db:ee:46:65:6d:
03:6d:f7:a1:1a:7c:f5:c4:44:1f:ec:99:36:1a:5f:
a9:30:a2:94:f5:81:9e:e2:ec:0e:29:e6:60:92:17:
8d:8a:16:69:15:4d:fe:27:df:60:95:26:a6:52:90:
7a:67:c6:db:1d:53:35:59:40:4e:8e:fd:f4:17:fc:
44:6a:0d:6a:78:47:65:35:3b:19:2c:80:d1:c7:a5:
f3:78:f3:68:f2:2d:4c:32:80:29:ab:96:44:13:3e:
5c:b5:b7:88:e3:ad:89:1b:ce:77:89:12:c8:23:5c:
01:e7:ed:8f:56:0e:94:e2:2d:69:1a:43:cb:2f:25:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:12:E8:35:C9:47:D7:7D:24:75:9F:36:DE:28:83:6A:21:31:B7:1E
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/323030313a3637633a6139633a3a2f34382d3438203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a9c::/48
Signature Algorithm: sha256WithRSAEncryption
d6:06:ae:90:c7:a7:77:4c:28:8e:11:32:b0:35:f3:24:76:bf:
22:b8:d6:53:1d:f2:ee:0a:1c:82:2b:0f:a7:72:50:ac:97:e2:
6e:63:9f:83:97:3c:d8:9b:c1:52:c8:90:36:8b:7f:66:55:fa:
80:c3:65:de:cd:6f:da:06:f1:68:30:c5:ff:08:57:ef:c2:56:
76:1c:5d:78:6f:4a:7b:b6:9a:01:49:84:78:95:d5:1f:64:74:
56:91:e8:f1:6a:5e:20:83:71:95:a5:0e:af:9b:b3:37:53:e4:
ec:db:e0:5b:a5:05:8a:a0:7f:20:5c:95:a9:59:c1:da:60:c3:
5d:45:50:a2:ae:7b:70:9a:95:76:6d:73:58:d2:32:48:b3:00:
ce:80:6d:25:a5:43:47:ca:98:17:9c:db:88:7a:20:9a:a4:28:
36:84:89:fc:51:e1:c0:7f:59:dc:dd:72:c2:b0:21:1a:f6:26:
59:db:8e:04:ce:0e:5c:19:04:4a:05:c2:fa:f6:3e:80:9d:7c:
1d:c3:67:b3:e8:1c:fd:93:ef:33:55:32:f2:45:a7:28:be:ce:
34:9c:49:ad:25:cb:dd:02:1c:65:74:40:e7:1e:81:86:d7:73:
d0:b7:53:99:9a:fd:c9:98:1f:c8:44:04:1c:05:db:36:70:3b:
28:73:26:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:29:47 2024 by rpki-client on console-ams.rpki-client.org