Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa
File: 326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa (raw, json)
Hash identifier: zdk5QHMpuSk4RMTMDHybDQEj+qw0LHswactrnFfa+HE=
Subject key identifier: 67:B9:6A:CB:0A:FF:4D:CD:63:EB:34:1C:E5:FD:1F:7A:3F:80:B0:29
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 440341EA0F32B07BD2C97F55A5366ADAC8F0E2AD
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa
Signing time: Tue 17 Oct 2023 16:13:28 +0000
ROA not before: Tue 17 Oct 2023 16:08:28 +0000
ROA not after: Tue 15 Oct 2024 16:13:28 +0000
asID: 212168
IP address blocks: 2a12:dd47:5800::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:03:41:ea:0f:32:b0:7b:d2:c9:7f:55:a5:36:6a:da:c8:f0:e2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:28 2023 GMT
Not After : Oct 15 16:13:28 2024 GMT
Subject: CN=67B96ACB0AFF4DCD63EB341CE5FD1F7A3F80B029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:94:ab:db:04:e0:3b:1b:8c:56:14:a0:27:f9:
9f:03:4c:60:15:04:a1:47:0f:fd:34:3e:a6:04:1d:
e2:7a:39:1f:06:37:e1:6e:1a:3c:32:b6:f4:5f:04:
6a:5d:0d:89:51:6e:4d:e3:73:95:e1:cd:d7:b7:8f:
26:59:f5:ba:65:07:39:27:74:cb:35:59:ae:1a:59:
26:8b:60:bc:03:87:a1:c7:8a:f5:3c:e2:fc:08:d5:
c5:1a:05:8b:6e:75:28:c0:da:d4:1b:2a:ef:ee:8d:
03:07:61:2e:30:c1:a4:19:18:95:f5:54:d7:43:a9:
cb:6a:f4:a5:07:ae:d9:8f:89:da:d6:45:62:55:48:
54:94:09:9d:b4:fb:f1:0a:e5:fe:fe:94:0e:5d:73:
40:fb:00:77:37:15:8f:78:ab:8e:6c:ae:f9:53:72:
e8:5e:fb:7f:8f:f7:89:3b:4f:13:ed:2c:63:33:1e:
ce:39:95:13:a3:3b:38:02:07:cd:5d:64:d3:1e:67:
03:d1:7f:ca:75:b0:1a:03:99:68:d9:bc:90:ed:1e:
5b:62:07:88:41:49:0b:2b:81:c3:b9:19:7f:3b:69:
7b:89:06:73:47:1d:c4:34:45:d4:db:fa:7e:54:14:
56:43:5a:00:15:46:fd:b4:97:8b:f1:e1:ae:5f:f3:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B9:6A:CB:0A:FF:4D:CD:63:EB:34:1C:E5:FD:1F:7A:3F:80:B0:29
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:5800::/38
Signature Algorithm: sha256WithRSAEncryption
17:71:c0:24:06:7d:80:ae:36:e8:82:b1:ce:15:cb:7d:c2:71:
2b:be:11:b0:34:a5:a6:06:a2:ad:b5:ed:bb:82:e6:85:c8:b3:
fa:1e:6e:4b:3b:cc:d7:45:5e:c2:1a:fd:ae:9c:ab:ba:06:54:
72:52:33:e8:9b:8f:29:8c:8d:62:09:9a:14:a0:d6:7c:de:10:
4d:0c:d7:8f:87:18:f1:51:a2:2c:9c:d4:99:f6:66:23:c4:98:
7d:28:45:e5:c9:16:d8:91:85:6b:e1:e6:c4:f3:94:01:8a:15:
e1:c4:ff:f7:fc:e1:46:e2:97:00:4a:f0:5e:43:f6:ac:44:89:
1a:d0:72:ae:d4:90:9b:b5:1c:3d:8c:97:6b:e9:03:9d:99:cf:
d8:75:f5:85:47:31:b0:38:f6:09:63:e8:5f:b9:bc:7c:ba:7a:
9c:4c:1f:91:9b:f0:ae:63:34:4d:47:69:8d:f6:19:43:ee:ab:
b5:86:cf:bc:cb:4a:cf:41:85:92:b9:8d:32:ec:e8:ad:a8:4e:
d3:71:b0:c1:77:d8:80:2a:6f:45:4e:e6:db:70:9a:ca:55:b4:
32:48:bd:6c:42:d8:e8:ae:9d:aa:2f:0e:71:51:80:be:d4:17:
4a:a9:38:68:2a:0d:5f:28:a6:85:07:df:6d:d0:35:f0:da:ae:
9c:8b:cc:fa
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIURANB6g8ysHvSyX9VpTZq2sjw4q0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzEwMTcxNjA4MjhaFw0yNDEwMTUxNjEzMjhaMDMxMTAvBgNV
BAMTKDY3Qjk2QUNCMEFGRjREQ0Q2M0VCMzQxQ0U1RkQxRjdBM0Y4MEIwMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtlKvbBOA7G4xWFKAn+Z8DTGAV
BKFHD/00PqYEHeJ6OR8GN+FuGjwytvRfBGpdDYlRbk3jc5Xhzde3jyZZ9bplBzkn
dMs1Wa4aWSaLYLwDh6HHivU84vwI1cUaBYtudSjA2tQbKu/ujQMHYS4wwaQZGJX1
VNdDqctq9KUHrtmPidrWRWJVSFSUCZ20+/EK5f7+lA5dc0D7AHc3FY94q45srvlT
cuhe+3+P94k7TxPtLGMzHs45lROjOzgCB81dZNMeZwPRf8p1sBoDmWjZvJDtHlti
B4hBSQsrgcO5GX87aXuJBnNHHcQ0RdTb+n5UFFZDWgAVRv20l4vx4a5f8yTdAgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQUZ7lqywr/Tc1j6zQc5f0fej+AsCkwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC81
LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzNDMDVCRkQ5OUYzRTYuY2VyMH0G
CCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMS8zMjYxMzEzMjNhNjQ2NDM0MzczYTM1MzgzMDMwM2EzYTJmMzMzODJk
MzQzODIwM2QzZTIwMzIzMTMyMzEzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKhLdR1gwDQYJKoZI
hvcNAQELBQADggEBABdxwCQGfYCuNuiCsc4Vy33CcSu+EbA0paYGoq217buC5oXI
s/oebks7zNdFXsIa/a6cq7oGVHJSM+ibjymMjWIJmhSg1nzeEE0M14+HGPFRoiyc
1Jn2ZiPEmH0oReXJFtiRhWvh5sTzlAGKFeHE//f84UbilwBK8F5D9qxEiRrQcq7U
kJu1HD2Ml2vpA52Zz9h19YVHMbA49glj6F+5vHy6epxMH5Gb8K5jNE1HaY32GUPu
q7WGz7zLSs9BhZK5jTLs6K2oTtNxsMF32IAqb0VO5ttwmspVtDJIvWxC2Oiunaov
DnFRgL7UF0qpOGgqDV8opoUH323QNfDarpyLzPo=
-----END CERTIFICATE-----
Generated at Sat May 4 20:40:11 2024 by rpki-client on console-fra.rpki-client.org