Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a383037623a3a2f34382d3438203d3e20323032323138.roa
File: 326131323a646434373a383037623a3a2f34382d3438203d3e20323032323138.roa (raw, json)
Hash identifier: OnQz1REXNt6NJDvYXR857Zbj9+XxOw4iDQlQlEL+AtA=
Subject key identifier: 81:3B:70:62:75:A2:A7:B7:CF:B5:3F:C0:23:17:94:C0:AB:EC:33:92
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 0221566CF96BC0584BC85F785F5A3BD157A0A37D
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a383037623a3a2f34382d3438203d3e20323032323138.roa
Signing time: Tue 17 Oct 2023 16:13:34 +0000
ROA not before: Tue 17 Oct 2023 16:08:34 +0000
ROA not after: Tue 15 Oct 2024 16:13:34 +0000
asID: 202218
IP address blocks: 2a12:dd47:807b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:21:56:6c:f9:6b:c0:58:4b:c8:5f:78:5f:5a:3b:d1:57:a0:a3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:34 2023 GMT
Not After : Oct 15 16:13:34 2024 GMT
Subject: CN=813B706275A2A7B7CFB53FC0231794C0ABEC3392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:d9:d7:98:d1:78:eb:15:7b:12:3c:82:d5:
18:4a:e2:cd:55:44:74:2f:f2:9c:1e:52:fb:71:17:
1e:a4:86:ee:0b:3f:80:6b:e6:9e:cc:a2:a1:48:39:
51:2d:38:28:b6:4d:a6:c4:7c:27:d7:00:af:69:c3:
79:e4:b3:d7:6a:27:f8:51:ab:92:6e:ef:00:e2:d2:
1a:b0:b3:f0:19:9b:32:c5:c4:63:08:72:39:27:35:
3b:4a:46:af:e6:b7:8b:07:23:68:3f:3a:7e:cd:09:
1e:31:f0:c3:14:23:b5:03:fd:2e:7b:60:b4:7e:8b:
ff:26:cb:7c:6c:11:a4:db:4f:32:63:4f:2d:50:a1:
6b:79:c1:06:d6:09:7b:3d:47:3d:e5:a6:8c:9d:d4:
0f:7e:2d:b2:d1:2f:0a:14:e6:6c:5c:87:57:6d:21:
61:3a:03:04:14:ea:48:30:c0:19:1c:14:a4:0e:6e:
5c:c3:d0:cc:fa:e8:5a:4b:ba:7d:32:c1:ca:86:6d:
fc:f9:79:1d:12:ae:29:7d:63:75:6a:01:ee:2d:4f:
01:98:28:ac:83:ee:b8:c6:46:fb:ed:d1:18:ca:0e:
3e:4e:9d:21:b9:49:6c:30:1c:3b:a6:82:8c:7c:37:
ff:da:6c:16:0b:33:a8:5a:8a:e3:44:9d:45:4d:f2:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3B:70:62:75:A2:A7:B7:CF:B5:3F:C0:23:17:94:C0:AB:EC:33:92
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a383037623a3a2f34382d3438203d3e20323032323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:807b::/48
Signature Algorithm: sha256WithRSAEncryption
d1:ef:8a:27:48:b9:51:bc:a0:84:6f:0e:2b:55:30:3d:2f:18:
fe:af:1a:72:4f:02:5f:e0:f9:0b:0f:28:2e:02:2b:a7:09:9f:
af:d9:b9:1d:9a:c1:67:45:4b:ed:99:e0:3e:e0:e1:14:c9:25:
10:c8:26:6e:e2:c3:65:94:20:49:c7:74:b9:39:65:14:20:a5:
5a:97:40:6f:81:49:fe:33:64:4d:e5:67:3b:be:66:54:6b:b0:
84:c6:d6:fc:91:08:19:dc:26:1e:22:99:64:7c:60:01:55:df:
fb:bb:4d:31:82:f1:55:3e:aa:6d:86:d2:7a:3c:9c:0b:57:63:
3e:71:d5:0c:5c:e3:4f:3c:00:0e:03:25:09:21:2b:83:ce:e6:
c9:2a:82:6d:79:37:21:97:a9:72:37:f4:fa:36:e9:59:5d:d0:
6d:14:0c:a3:83:ce:f4:ee:67:40:26:39:8d:f1:75:42:0f:7f:
f1:ad:10:1d:f1:16:ad:9c:ae:41:ce:95:d5:f7:2e:09:25:ab:
2c:c2:80:83:36:f1:5b:22:f0:b0:ca:e7:ac:aa:52:1a:22:d5:
eb:23:c1:cd:13:b9:03:35:b5:9c:47:db:a8:61:dc:40:c8:98:
ce:fd:4f:1f:59:05:6c:0e:18:5c:bf:ef:20:32:65:81:ba:a7:
47:08:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org