Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa
File: 326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa (raw, json)
Hash identifier: BYlv/9s0pVUmtALLP2qJRW5lLRZY1vaLm+ts6sbR+t4=
Subject key identifier: A6:AB:B1:03:56:50:F7:0E:92:0B:E6:93:D9:79:70:38:F7:51:13:95
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 4BA48292EC126F6FE1510D9BA7DA57C2C3F5720D
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa
Signing time: Tue 17 Oct 2023 16:13:35 +0000
ROA not before: Tue 17 Oct 2023 16:08:35 +0000
ROA not after: Tue 15 Oct 2024 16:13:35 +0000
asID: 211233
IP address blocks: 2a12:dd47:8050::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a4:82:92:ec:12:6f:6f:e1:51:0d:9b:a7:da:57:c2:c3:f5:72:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:35 2023 GMT
Not After : Oct 15 16:13:35 2024 GMT
Subject: CN=A6ABB1035650F70E920BE693D9797038F7511395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:ab:1b:b8:de:e1:52:7c:85:0d:e0:c9:c2:
f9:71:3e:4f:f5:b6:78:3b:45:81:c3:ae:77:bf:32:
52:ad:33:4c:2b:eb:a4:e7:91:92:66:05:59:b7:ea:
96:fc:3c:55:3c:7e:cd:c4:ca:c3:42:67:6c:f5:f6:
f7:78:36:a4:60:86:01:3b:95:3b:bb:f9:8d:6b:8a:
01:97:5b:14:6f:c3:c7:0c:e8:7c:0e:cf:32:9e:3e:
6f:a2:76:95:23:eb:24:21:24:5f:fa:8b:0b:e1:13:
6f:30:69:ce:02:f6:79:5d:ea:62:82:e6:12:4d:37:
36:51:0b:a5:b7:e6:ef:69:f4:f7:c3:a0:0f:b4:ef:
84:bc:12:ea:c2:31:c6:9f:f2:6c:5d:af:1c:30:db:
99:0c:e2:84:fc:56:db:e0:9e:07:21:cf:bd:1e:3b:
49:e6:d2:ea:15:68:81:e6:d3:51:c9:08:4e:8e:4d:
77:33:0b:56:76:67:f8:21:08:76:54:40:b4:16:d0:
20:0e:37:bf:73:89:f8:39:8c:b9:e2:0b:8d:19:79:
93:89:88:aa:d5:9f:02:d0:d4:8c:e5:59:9d:ca:61:
de:83:04:c0:b9:13:b4:26:e1:69:75:2e:1f:93:24:
92:ed:0b:5e:06:17:54:ee:bd:a6:c6:ef:70:8c:34:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AB:B1:03:56:50:F7:0E:92:0B:E6:93:D9:79:70:38:F7:51:13:95
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8050::/44
Signature Algorithm: sha256WithRSAEncryption
b2:b6:4b:7f:ba:a3:2f:53:66:ae:fd:29:32:d7:f3:db:bb:eb:
78:9d:f0:da:0b:97:f5:94:97:72:27:c6:27:b4:fb:aa:e0:e7:
0e:2c:04:f3:4e:94:34:10:e2:78:e5:54:90:37:26:3d:d9:c8:
78:64:4c:e9:e9:23:33:f1:0c:ab:4c:94:27:1f:2f:b0:96:63:
a4:df:fb:bd:1c:52:e9:a1:6a:bf:cb:d7:da:f2:1a:46:9a:fb:
bc:06:aa:85:70:39:2a:a4:da:cc:a2:b6:3d:a6:c6:dc:42:29:
28:3a:e7:7c:31:e7:53:68:29:16:35:41:bf:31:8b:eb:51:65:
be:fb:7c:a8:b0:f4:3e:e1:2f:73:b8:18:db:93:ba:c2:65:d9:
36:95:89:53:ed:6a:15:23:07:3e:0d:81:d0:20:f6:b8:5a:fa:
2f:f3:3a:09:b2:64:c3:3e:97:20:fe:61:ed:63:f6:b7:89:8a:
b0:2f:e1:4f:26:0c:ab:e5:b8:fd:11:c7:1c:92:f4:8c:27:e0:
1c:7c:94:1f:cc:a9:76:56:f4:d0:dd:41:95:03:1a:a0:eb:af:
6b:dd:09:e0:08:ae:96:1f:97:29:08:65:c5:0e:32:37:75:a2:
28:3e:4f:52:7e:e4:0b:84:50:9a:9c:d0:90:61:02:66:dd:a5:
b1:da:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org