Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a3430303a3a2f33392d3438203d3e20313939363739.roa
File: 326131323a646434373a3430303a3a2f33392d3438203d3e20313939363739.roa (raw, json)
Hash identifier: iQo/Vee5GcBuAwdHDJkZci2Z2ETDAKFAwxU0KKZ5GQc=
Subject key identifier: DD:96:0D:BC:93:6D:D0:44:82:2C:77:65:07:67:63:29:66:81:CF:2E
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 692EF662E0CCB7109C51785475CBCDCA55E53B05
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a3430303a3a2f33392d3438203d3e20313939363739.roa
Signing time: Tue 17 Oct 2023 16:13:37 +0000
ROA not before: Tue 17 Oct 2023 16:08:37 +0000
ROA not after: Tue 15 Oct 2024 16:13:37 +0000
asID: 199679
IP address blocks: 2a12:dd47:400::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:2e:f6:62:e0:cc:b7:10:9c:51:78:54:75:cb:cd:ca:55:e5:3b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:37 2023 GMT
Not After : Oct 15 16:13:37 2024 GMT
Subject: CN=DD960DBC936DD044822C7765076763296681CF2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:cd:c9:95:a1:86:f8:bd:7f:2b:b9:4c:cd:
ef:c0:01:c8:cb:55:51:28:35:bc:1e:40:e4:2f:db:
36:b6:e1:5d:e4:c8:d6:f0:91:13:54:d4:45:e4:c5:
a5:31:ea:ab:68:cc:9c:9c:46:5c:42:fb:24:53:f3:
c6:6e:ba:b1:a9:a9:4f:6a:ae:6b:3b:b0:75:cf:1a:
68:2b:60:07:bb:54:8e:09:3b:5b:49:48:44:ba:bb:
d3:a2:07:74:be:13:3a:4d:65:18:da:d9:38:fb:f7:
ff:2d:2e:17:47:02:c6:aa:af:c1:b6:19:af:ad:99:
33:d8:1a:26:7a:2d:4c:42:7a:f2:c9:48:8f:01:9b:
ed:c6:ce:d6:8d:27:c0:d5:4d:af:89:e2:ab:2d:b8:
74:bc:a2:3a:d1:09:66:c8:f7:91:82:f1:a1:5a:b2:
a2:c7:36:c8:42:b3:fa:4d:57:d9:95:6c:31:5a:eb:
43:70:54:63:bf:1b:10:8c:08:c0:a7:a4:77:c0:f2:
a5:53:c8:1f:14:55:5e:b9:62:fc:ad:2a:a7:8b:a4:
bf:a2:73:52:b9:d2:02:bc:8b:88:1b:ba:67:f5:72:
df:11:9e:5b:83:c3:e3:44:13:87:96:e2:96:77:c5:
1d:77:d0:56:bd:c3:17:61:54:02:eb:1e:05:03:51:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:96:0D:BC:93:6D:D0:44:82:2C:77:65:07:67:63:29:66:81:CF:2E
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a3430303a3a2f33392d3438203d3e20313939363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:400::/39
Signature Algorithm: sha256WithRSAEncryption
1c:f9:1c:77:62:ac:bf:ef:74:53:c0:f5:30:f2:33:1c:94:a7:
31:b9:dd:90:dc:36:66:8d:7a:5d:89:b5:be:98:dc:4f:98:76:
9d:ff:71:6a:23:f5:f3:6c:8f:fa:2d:6c:d2:f0:28:8c:f5:36:
66:da:51:f8:3e:7c:1e:12:05:6d:79:7b:19:3e:7e:e1:31:ef:
13:82:9b:33:f4:c5:f1:4c:ea:36:b0:50:ad:ee:4d:72:11:07:
cb:a0:75:ff:ad:9a:f1:9c:91:d8:42:36:bb:b8:b3:1d:86:4f:
ae:36:6d:5c:94:9e:e3:10:d5:ea:16:47:5d:c3:f8:22:7f:0f:
4a:51:8a:50:8b:ac:50:a8:d2:aa:4c:5b:5f:d3:e9:f8:98:c1:
59:95:c3:41:5c:8f:ae:9c:7c:bc:a7:cc:d7:4f:07:e3:d9:6f:
0b:a7:90:19:54:75:f3:fc:53:b8:7d:a9:f6:00:e7:69:84:d9:
ff:78:ee:35:83:b8:a4:22:a5:6c:91:72:10:68:8a:a3:6e:e5:
70:55:af:92:fc:97:ef:4d:0b:6f:a4:52:cf:00:af:2a:ec:22:
b2:ed:db:1e:f1:f8:cd:f4:0d:3d:45:64:d6:57:8b:0f:90:95:
ae:60:be:0a:60:06:15:0d:fc:77:9c:c2:14:5a:72:e2:af:fe:
a4:f6:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org