Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a383065313a3a2f34382d3438203d3e20323031323432.roa
File: 326131323a646434373a383065313a3a2f34382d3438203d3e20323031323432.roa (raw, json)
Hash identifier: jygoxJ+8GSeZpQLzB7Z3fY5Jumg3yHKJVFjwXMqLtmw=
Subject key identifier: F1:E0:CF:56:40:0E:E8:A4:AD:7F:5E:3A:99:BC:88:8A:0A:5E:02:22
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 2AC1BFA71208D67191B66CA1EFA8C2BCFC470DC5
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a383065313a3a2f34382d3438203d3e20323031323432.roa
Signing time: Tue 17 Oct 2023 16:13:36 +0000
ROA not before: Tue 17 Oct 2023 16:08:36 +0000
ROA not after: Tue 15 Oct 2024 16:13:36 +0000
asID: 201242
IP address blocks: 2a12:dd47:80e1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c1:bf:a7:12:08:d6:71:91:b6:6c:a1:ef:a8:c2:bc:fc:47:0d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:36 2023 GMT
Not After : Oct 15 16:13:36 2024 GMT
Subject: CN=F1E0CF56400EE8A4AD7F5E3A99BC888A0A5E0222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:00:8e:f2:61:17:d3:c5:0a:91:76:5c:dd:28:
3a:14:b8:e3:94:12:a5:b1:a9:d7:ec:e6:59:94:ca:
59:b6:22:78:73:9a:43:82:90:5e:98:95:e4:37:10:
72:bb:46:0b:32:1e:e9:3d:dd:9c:73:1e:62:47:48:
89:a4:bf:6b:c2:ad:ef:6c:97:ef:96:4c:47:5e:b0:
f4:39:d0:a3:90:ab:8e:68:87:27:3d:52:f7:5c:5b:
b3:97:e8:57:43:37:32:99:c8:5f:4b:3a:6c:f2:d7:
79:28:5e:05:ca:0d:b7:41:14:30:cb:98:ba:88:9a:
c3:07:e6:89:7f:d6:c0:60:cf:1d:ea:11:1e:f6:2a:
d0:46:05:2b:fd:f0:0b:81:22:67:4b:64:f6:79:5c:
90:b8:d4:42:e2:4b:f5:93:87:80:b1:05:c2:36:bf:
72:72:3d:16:30:a0:ae:91:6a:19:88:dd:c9:7e:5e:
73:e5:38:b7:ec:ff:87:b1:76:de:48:b9:5a:37:db:
96:a2:11:a6:2c:2d:53:79:26:38:66:37:e7:4a:40:
10:4f:61:f1:55:c7:e1:83:5f:eb:f1:7b:e6:ae:c8:
26:b2:87:b4:52:4a:23:53:cf:e1:4d:70:74:fc:94:
c5:f9:81:84:84:ee:1b:ce:0e:d8:6f:e2:35:aa:45:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E0:CF:56:40:0E:E8:A4:AD:7F:5E:3A:99:BC:88:8A:0A:5E:02:22
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a383065313a3a2f34382d3438203d3e20323031323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:80e1::/48
Signature Algorithm: sha256WithRSAEncryption
06:34:d8:3d:ce:7e:f2:f2:34:34:b6:55:ed:45:85:e5:50:e3:
60:62:75:d3:ee:fb:b2:b4:12:ab:ab:88:41:83:3d:1e:f5:18:
68:4e:43:1b:b2:9d:1f:67:ba:a8:d1:c8:46:ae:12:21:a5:23:
f4:35:de:04:f2:de:33:25:c5:45:47:14:9b:a3:e3:f4:e9:65:
81:23:25:a8:19:a4:e9:aa:8e:06:36:f2:f0:9a:61:40:9c:c3:
74:5d:ac:65:f0:ba:f1:77:7f:3d:dc:1d:75:5f:6f:b5:15:7a:
11:60:a3:98:87:fd:b5:e8:5e:96:eb:ac:85:a2:59:83:0b:37:
b4:8a:91:af:5c:89:c1:ec:1c:04:b6:fd:db:c9:38:7d:34:4e:
7c:8a:bb:df:6b:95:ec:68:2d:58:46:68:43:ab:b6:65:b2:83:
1d:a1:d1:f3:61:86:40:ca:49:20:49:83:5f:c5:e3:99:06:7b:
ab:78:42:c1:49:4c:da:2c:02:bd:50:0a:9b:fc:a6:a0:45:33:
5d:23:f7:05:99:82:1e:a8:c3:04:06:72:28:af:b0:de:b8:de:
2f:40:40:ab:e0:d4:31:3a:54:9d:ea:5b:9d:a5:cc:20:31:de:
97:1b:05:5e:5c:09:c4:3d:ca:a6:5e:aa:73:6a:05:0d:66:23:
67:39:c2:15
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUKsG/pxII1nGRtmyh76jCvPxHDcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzEwMTcxNjA4MzZaFw0yNDEwMTUxNjEzMzZaMDMxMTAvBgNV
BAMTKEYxRTBDRjU2NDAwRUU4QTRBRDdGNUUzQTk5QkM4ODhBMEE1RTAyMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAI7yYRfTxQqRdlzdKDoUuOOU
EqWxqdfs5lmUylm2InhzmkOCkF6YleQ3EHK7RgsyHuk93ZxzHmJHSImkv2vCre9s
l++WTEdesPQ50KOQq45ohyc9UvdcW7OX6FdDNzKZyF9LOmzy13koXgXKDbdBFDDL
mLqImsMH5ol/1sBgzx3qER72KtBGBSv98AuBImdLZPZ5XJC41ELiS/WTh4CxBcI2
v3JyPRYwoK6RahmI3cl+XnPlOLfs/4exdt5IuVo325aiEaYsLVN5JjhmN+dKQBBP
YfFVx+GDX+vxe+auyCayh7RSSiNTz+FNcHT8lMX5gYSE7hvODthv4jWqRSHlAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQU8eDPVkAO6KStf146mbyIigpeAiIwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC81
LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzNDMDVCRkQ5OUYzRTYuY2VyMH0G
CCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMS8zMjYxMzEzMjNhNjQ2NDM0MzczYTM4MzA2NTMxM2EzYTJmMzQzODJk
MzQzODIwM2QzZTIwMzIzMDMxMzIzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhLdR4DhMA0GCSqG
SIb3DQEBCwUAA4IBAQAGNNg9zn7y8jQ0tlXtRYXlUONgYnXT7vuytBKrq4hBgz0e
9RhoTkMbsp0fZ7qo0chGrhIhpSP0Nd4E8t4zJcVFRxSbo+P06WWBIyWoGaTpqo4G
NvLwmmFAnMN0Xaxl8Lrxd3893B11X2+1FXoRYKOYh/216F6W66yFolmDCze0ipGv
XInB7BwEtv3byTh9NE58irvfa5XsaC1YRmhDq7ZlsoMdodHzYYZAykkgSYNfxeOZ
BnureELBSUzaLAK9UAqb/KagRTNdI/cFmYIeqMMEBnIor7DeuN4vQECr4NQxOlSd
6ludpcwgMd6XGwVeXAnEPcqmXqpzagUNZiNnOcIV
-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org