Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa
File: 326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa (raw, json)
Hash identifier: b542A6PqytgoBn/Kb8rzL31x8deU80nPCHFZX4yZa2I=
Subject key identifier: C3:CE:FE:86:E3:19:11:0F:55:11:37:DB:E5:34:25:30:1F:57:D9:08
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 17C9BE5AD5291AF6FED1EA10807AE05F66B42F4C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa
Signing time: Tue 17 Oct 2023 16:13:31 +0000
ROA not before: Tue 17 Oct 2023 16:08:31 +0000
ROA not after: Tue 15 Oct 2024 16:13:31 +0000
asID: 204518
IP address blocks: 2a12:dd47:8080::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c9:be:5a:d5:29:1a:f6:fe:d1:ea:10:80:7a:e0:5f:66:b4:2f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:31 2023 GMT
Not After : Oct 15 16:13:31 2024 GMT
Subject: CN=C3CEFE86E319110F551137DBE53425301F57D908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:ed:4a:2c:21:89:9a:9b:17:d1:f2:99:f8:
d0:8e:4f:83:42:20:90:89:5a:00:c0:9c:be:cd:82:
10:68:f6:74:b9:67:63:25:d5:4a:ee:ad:e9:4f:09:
8b:22:27:c0:df:2f:19:0a:ec:08:30:ac:6d:f4:c7:
6e:79:d5:5c:80:7a:1d:5a:d9:fa:77:d8:68:3e:cf:
67:56:4d:d0:8a:4a:79:cc:d4:b7:75:e7:1c:8e:80:
6a:2c:0e:85:79:f2:c5:ec:8c:c7:8b:af:d9:09:3c:
ec:f6:54:e5:b7:8f:73:5c:81:6d:84:89:1d:87:d6:
94:14:6b:e1:d2:2c:63:f0:3c:ad:30:15:1c:d1:ea:
58:6b:2d:3a:0c:f6:ad:8f:30:a7:ed:35:97:19:be:
71:41:e1:fe:54:74:0c:7e:09:41:56:e0:b4:af:53:
72:94:eb:28:cf:34:98:80:5e:d1:c7:3b:b6:d7:4c:
27:65:28:77:17:64:07:fb:99:4c:b7:8a:be:45:eb:
f9:34:1f:30:11:fb:fb:a8:62:de:89:48:8e:d3:41:
17:05:07:d2:b9:34:38:5a:94:97:df:70:c7:12:2c:
3b:5f:62:88:d9:45:0a:08:c5:ea:48:23:9e:f7:14:
93:75:06:51:4d:9a:c2:52:0e:f7:db:0b:20:8a:96:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CE:FE:86:E3:19:11:0F:55:11:37:DB:E5:34:25:30:1F:57:D9:08
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8080::/44
Signature Algorithm: sha256WithRSAEncryption
bb:9f:e7:6f:8e:c7:67:62:d9:68:72:91:00:d3:16:7a:97:5e:
a8:c4:bc:bd:2f:2e:bc:b4:af:69:bc:28:8b:03:c2:23:1c:2f:
e7:8f:79:20:eb:97:1a:fc:a2:07:ba:0b:61:b9:8b:8c:8d:df:
eb:d5:3e:1f:30:19:ac:ba:82:04:c2:81:07:04:80:3f:b2:0a:
a3:16:3e:64:17:b0:9f:00:9c:f1:9f:77:c6:8d:08:2c:3a:67:
cb:b4:eb:0b:5e:30:67:3c:25:b0:36:4d:29:81:c7:9e:c4:1a:
ec:01:03:c4:6a:10:84:78:7e:17:7e:2f:28:5d:1c:77:f2:05:
9d:94:c0:9f:6d:5f:13:d2:8d:8e:f5:38:cb:92:dc:56:cd:90:
ae:cb:1f:84:dc:f2:ed:13:8e:a6:ef:e3:ad:6d:3c:c3:aa:af:
3e:f3:1b:18:0c:a4:44:1b:81:0e:c1:ee:58:7c:2a:e0:3d:53:
7c:45:af:ac:1c:d4:bf:d8:43:3d:bb:14:0d:e3:52:0c:24:d9:
f6:ca:90:4d:a1:f7:74:1c:fa:25:31:ff:85:2c:04:57:07:be:
d1:94:50:38:e3:a8:56:e3:9c:e8:2f:6f:47:24:3c:00:76:ba:
44:6b:6f:9a:17:f5:a2:5d:03:82:ea:5b:86:d8:b1:dd:82:bc:
20:fe:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org