Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a356330303a3a2f34302d3438203d3e20323030303231.roa
File: 326131323a646434373a356330303a3a2f34302d3438203d3e20323030303231.roa (raw, json)
Hash identifier: pP1CqJy4P6e6VFkdz8K9sfwE/f5dxgCDK2ruTS95Uek=
Subject key identifier: 08:E5:EF:E7:62:DD:66:DC:2C:4A:70:9B:18:5B:9B:10:A3:E6:F4:A7
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 4B522EB328D06732E77A091F05150B3AD2900CEE
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a356330303a3a2f34302d3438203d3e20323030303231.roa
Signing time: Tue 17 Oct 2023 16:13:28 +0000
ROA not before: Tue 17 Oct 2023 16:08:28 +0000
ROA not after: Tue 15 Oct 2024 16:13:28 +0000
asID: 200021
IP address blocks: 2a12:dd47:5c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:52:2e:b3:28:d0:67:32:e7:7a:09:1f:05:15:0b:3a:d2:90:0c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:28 2023 GMT
Not After : Oct 15 16:13:28 2024 GMT
Subject: CN=08E5EFE762DD66DC2C4A709B185B9B10A3E6F4A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:14:e6:42:86:f0:c6:2d:bd:fb:6e:70:43:
77:55:44:56:3d:f1:54:db:15:be:0f:f7:4c:0b:bc:
85:4b:96:ce:8b:cb:39:9a:e7:45:55:d6:1b:aa:86:
2c:b5:96:ed:78:85:6a:8e:1e:e5:37:1d:c3:3f:b6:
05:05:b5:48:a8:10:b1:0c:94:c8:06:8b:1d:7a:fd:
d8:b1:81:f2:85:b9:ef:4c:8a:bd:4d:fe:fd:44:4e:
f9:7d:82:d9:2b:87:aa:04:30:7e:15:37:4e:b5:89:
05:86:a7:ff:a8:fd:8a:4f:95:b6:08:e8:46:fa:4a:
f1:3e:99:58:72:1e:65:8c:28:58:20:28:f5:e3:b3:
13:bf:22:e9:b1:2a:2d:e0:c9:97:7a:63:de:e9:a9:
da:d4:98:c6:3e:d6:7d:59:4a:5e:71:b4:7f:13:dc:
c6:1f:e6:10:a3:0c:d9:09:04:c0:9f:ee:ab:ba:c0:
b4:dd:30:93:b0:d3:c0:7a:21:de:0e:1d:98:83:6a:
79:69:1b:35:b1:98:6f:bc:f7:84:40:1b:27:1e:8b:
00:c2:8b:9e:e8:44:a8:62:b0:34:a1:c3:44:7a:f4:
f8:61:69:cc:6e:ca:44:6d:9e:ff:76:4a:3b:ee:13:
42:6c:7b:84:2c:14:87:e7:5c:e5:f3:6d:d5:af:94:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E5:EF:E7:62:DD:66:DC:2C:4A:70:9B:18:5B:9B:10:A3:E6:F4:A7
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a356330303a3a2f34302d3438203d3e20323030303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:5c00::/40
Signature Algorithm: sha256WithRSAEncryption
95:80:68:90:55:1c:b3:79:54:f7:b5:7f:e9:49:00:bc:40:d5:
39:0b:2e:a4:1b:59:ac:df:8c:27:66:af:8e:d1:1f:2f:85:81:
23:94:b1:5c:17:d7:8f:57:e0:a9:4e:6c:d5:19:e5:c1:c9:85:
33:a6:10:cf:9a:ce:5f:a0:6a:61:6f:a0:8a:a3:f5:ec:3c:c9:
dd:bb:d3:d5:00:25:2e:41:5d:97:0c:89:c5:a3:e7:34:07:97:
fa:0d:fd:0c:6e:03:1c:5e:cb:79:28:a6:8c:44:d4:6d:7e:eb:
15:3b:9d:d8:4e:bb:2d:5d:5b:d2:5d:9d:2a:40:bd:a3:c7:d5:
79:74:bc:78:64:30:fc:34:2a:28:0e:d5:84:1d:39:c9:67:c8:
54:e3:71:66:d2:bd:3b:b4:de:cf:93:9b:80:35:d6:a5:b9:8d:
ad:6c:b3:59:87:3b:79:de:88:3f:30:13:0f:c0:b5:82:6a:32:
d4:f2:b9:68:a2:be:01:ee:d2:27:00:ba:76:03:83:78:ff:bf:
02:25:c4:ce:32:51:68:6b:74:f6:3d:02:83:58:08:18:4d:f9:
b0:95:b3:e7:56:e2:d4:24:2e:7a:26:ea:98:f8:72:42:25:18:
9e:c3:35:22:72:ec:3f:f8:50:e5:f7:b6:3d:c8:f4:e2:28:e6:
3a:40:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org