Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a3830303a3a2f33382d3438203d3e20323131373539.roa
File: 326131323a646434373a3830303a3a2f33382d3438203d3e20323131373539.roa (raw, json)
Hash identifier: rOZah21xQVX5hukOEdC4kKOAEDlN/5aBRIl47iZ5geY=
Subject key identifier: FE:92:51:46:F1:28:A8:8B:98:B6:97:6A:AB:89:DA:0D:3A:0A:37:8E
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 6FBD32D011B9B8540506780142BF5EFD347A3302
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a3830303a3a2f33382d3438203d3e20323131373539.roa
Signing time: Tue 17 Oct 2023 16:13:35 +0000
ROA not before: Tue 17 Oct 2023 16:08:35 +0000
ROA not after: Tue 15 Oct 2024 16:13:35 +0000
asID: 211759
IP address blocks: 2a12:dd47:800::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:bd:32:d0:11:b9:b8:54:05:06:78:01:42:bf:5e:fd:34:7a:33:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:35 2023 GMT
Not After : Oct 15 16:13:35 2024 GMT
Subject: CN=FE925146F128A88B98B6976AAB89DA0D3A0A378E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:e0:bd:5d:4c:f4:66:9e:74:be:86:db:db:
e6:08:a8:c9:58:60:ca:d6:e9:b6:da:47:c7:fc:2f:
4d:ea:44:5b:67:9f:a9:98:d0:c0:f6:7d:da:5f:15:
13:8d:2c:f1:40:d5:20:cf:3e:66:c8:73:f9:df:04:
5d:21:af:e4:80:bc:4f:c4:53:f6:1c:ab:90:95:97:
30:1c:11:3b:65:ed:fe:d6:81:2d:0a:f0:6a:0a:3a:
de:73:d0:a9:75:b6:f2:bd:32:4c:5b:01:25:56:3d:
b0:70:74:52:e6:d9:b5:25:12:8e:d9:43:f7:87:81:
e3:80:f1:9c:d1:f9:89:d5:b6:9e:f5:85:e9:2b:26:
44:18:cc:a2:d3:b2:97:59:af:92:a8:02:51:51:bc:
03:15:2a:fe:e9:06:6d:7d:cf:6d:3c:27:28:f2:95:
ad:49:62:08:20:55:fb:4d:d6:35:8f:6b:8a:c2:b0:
18:0a:c7:e8:0d:d7:f3:fb:df:01:7c:20:e4:0f:a8:
9a:01:fd:89:b8:8c:74:11:25:20:70:87:a6:ed:87:
97:c7:c9:8c:7a:11:9e:96:19:6c:51:9c:fa:74:2a:
7d:0b:f4:22:5c:12:29:73:26:4a:55:4f:b9:e3:64:
d2:85:29:45:90:a4:12:52:6b:55:4f:61:0f:b8:21:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:92:51:46:F1:28:A8:8B:98:B6:97:6A:AB:89:DA:0D:3A:0A:37:8E
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a3830303a3a2f33382d3438203d3e20323131373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:800::/38
Signature Algorithm: sha256WithRSAEncryption
48:81:4e:d6:cb:c2:a1:a4:7c:61:d4:92:98:b5:e9:95:e6:61:
6d:25:18:00:25:15:c3:e4:15:3f:c2:41:33:ec:db:8d:66:c8:
85:35:4c:ff:28:3c:c4:e4:fd:05:e5:4f:7a:46:4a:b9:c2:14:
ef:e3:05:a5:07:21:f3:d4:0b:57:6c:3d:e9:8c:91:d3:74:3b:
5c:28:69:28:f4:51:40:a0:21:a6:09:5b:92:95:49:04:3a:0c:
a2:7f:60:12:8c:37:71:dc:e8:08:9b:89:0e:12:35:dc:31:dd:
e4:3c:4b:b1:33:54:29:b2:2d:81:61:43:b3:7f:0c:ba:52:8e:
89:ca:21:cc:ae:a1:bc:06:87:ce:de:af:99:31:a0:45:18:5d:
45:2d:f7:d7:69:cf:e8:d5:30:e6:99:dc:8d:d5:73:1b:b1:fb:
02:fb:ba:e4:2e:cb:62:0f:a6:ce:d9:b6:e1:76:1f:dd:19:10:
80:4c:ff:13:c5:d4:71:39:f0:07:ae:86:ae:6b:dd:20:51:5f:
27:6e:24:6c:be:b0:ee:20:78:d0:4f:0f:c7:b1:18:d8:ea:5a:
02:8c:39:e7:5c:16:49:2f:f7:d4:96:6b:55:08:10:9a:27:d5:
7c:6d:1e:13:05:94:dc:25:89:2b:f0:ca:ad:64:22:83:2e:e1:
3e:b6:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org