Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a383034643a3a2f34382d3438203d3e20323130343435.roa
File: 326131323a646434373a383034643a3a2f34382d3438203d3e20323130343435.roa (raw, json)
Hash identifier: Ci2SRxBDtUKAv2QoaN3yuHTlRDF/JBeuJ/S5YRZ/B+c=
Subject key identifier: 79:DF:AC:45:34:CB:E1:4D:66:05:65:4A:35:91:F5:FE:51:27:FF:8F
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 18986146C92E63F4D2947D657284C65C0E32AAAA
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a383034643a3a2f34382d3438203d3e20323130343435.roa
Signing time: Tue 17 Oct 2023 16:13:25 +0000
ROA not before: Tue 17 Oct 2023 16:08:25 +0000
ROA not after: Tue 15 Oct 2024 16:13:25 +0000
asID: 210445
IP address blocks: 2a12:dd47:804d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:98:61:46:c9:2e:63:f4:d2:94:7d:65:72:84:c6:5c:0e:32:aa:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:25 2023 GMT
Not After : Oct 15 16:13:25 2024 GMT
Subject: CN=79DFAC4534CBE14D6605654A3591F5FE5127FF8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:4b:41:26:ec:62:dd:75:01:f3:56:b7:33:
f2:1f:16:27:7d:b2:08:03:16:48:c1:2c:a5:b7:5e:
85:c1:0e:3b:8e:d6:6b:30:a4:44:ac:d6:be:3d:4b:
78:1e:12:f8:94:a2:46:59:56:60:c8:c6:4b:07:f9:
c3:3e:e4:ee:e4:96:a8:79:4a:34:59:c6:34:2f:50:
63:fd:3d:48:ee:7a:ad:43:77:a9:d0:40:29:76:19:
a6:bb:de:52:17:bf:28:eb:e5:0f:a0:ce:b1:f7:8c:
15:23:41:36:4f:4d:41:5c:27:67:6d:08:e9:39:e4:
7a:7c:a6:61:b6:f0:f8:ac:b1:bd:02:8b:23:6d:b3:
dc:76:0f:9d:87:7d:0a:c4:d7:1c:b4:1d:b5:ae:69:
a4:6e:93:3c:cf:62:68:91:77:90:af:72:3b:9b:8e:
f7:4e:bb:a2:e6:cb:22:a4:7f:bc:ed:71:57:1e:92:
3f:b9:0e:04:e7:83:51:da:5c:49:e5:17:de:51:a7:
ec:dd:0b:2b:86:0e:e5:99:2a:fa:7e:b8:f6:08:de:
62:5e:24:ba:a4:09:f1:30:6d:67:78:8f:57:d0:fb:
36:64:01:f0:76:e8:5d:4e:90:51:01:36:53:75:bd:
e0:a8:c0:f9:ef:d8:5f:e9:37:98:ca:fc:e3:e2:8f:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DF:AC:45:34:CB:E1:4D:66:05:65:4A:35:91:F5:FE:51:27:FF:8F
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a383034643a3a2f34382d3438203d3e20323130343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:804d::/48
Signature Algorithm: sha256WithRSAEncryption
be:77:e1:cf:3e:bc:7e:12:31:6b:c2:38:42:eb:12:b0:db:da:
54:e5:5a:75:fb:07:72:78:88:31:15:8c:bc:f4:c1:23:ed:7a:
cd:0c:0d:23:07:a3:78:02:52:e7:bc:ef:d1:4a:a4:02:ff:bd:
dd:09:74:e9:50:ab:e0:c6:ec:92:ea:ed:4d:5b:24:ca:69:e0:
dc:7f:c2:7e:9c:36:0a:34:bf:65:cb:da:4a:9c:64:95:1e:9a:
29:3b:c8:a3:7a:45:90:8a:c8:a9:e9:6d:8c:0d:75:0f:c7:1e:
f1:10:75:f9:a8:75:dd:48:7e:93:bd:53:a0:05:89:f7:78:25:
30:e1:75:38:8c:b3:b6:a5:8f:5a:fe:c8:f7:58:6d:fa:73:7b:
8d:fb:4b:66:78:ae:ee:84:1b:c4:d4:8f:5c:3d:07:63:d0:4c:
50:f3:76:81:60:a5:31:fe:b2:d5:b2:cc:a8:54:03:53:1b:48:
7d:07:cb:f7:41:4f:82:86:48:4b:11:43:0c:24:f1:fb:18:6a:
60:7e:03:3e:d8:40:4e:84:9f:95:2e:44:ee:76:9a:36:ea:a4:
4e:ea:c1:34:4a:45:00:f2:88:c4:2a:71:88:d4:f5:43:a8:5c:
8b:cb:1a:6a:67:1e:de:80:3a:36:40:42:ab:9e:11:36:40:3f:
8c:4f:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:40:11 2024 by rpki-client on console-fra.rpki-client.org