Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa
File: 326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa (raw, json)
Hash identifier: FmzjLw0uMJo7TiErM8ivvZ4hj6EtMbE4X5jRYejyO1k=
Subject key identifier: 59:5F:46:DE:96:2B:F1:CC:DC:40:2D:CA:C6:58:EA:9C:CB:E6:0F:F3
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 30F26022155F4481E61F51FCB27A65466BF00306
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa
Signing time: Tue 17 Oct 2023 16:13:31 +0000
ROA not before: Tue 17 Oct 2023 16:08:31 +0000
ROA not after: Tue 15 Oct 2024 16:13:31 +0000
asID: 202911
IP address blocks: 2a12:dd47:8210::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f2:60:22:15:5f:44:81:e6:1f:51:fc:b2:7a:65:46:6b:f0:03:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:31 2023 GMT
Not After : Oct 15 16:13:31 2024 GMT
Subject: CN=595F46DE962BF1CCDC402DCAC658EA9CCBE60FF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:0e:9c:5b:28:b9:9b:22:2c:30:ec:e8:a1:
29:36:b9:5d:1a:30:54:c3:8b:af:80:67:a8:ba:25:
f0:77:92:0e:ca:b9:c9:41:d6:b2:02:58:13:16:e9:
3f:8e:dc:4c:90:10:c1:bc:06:f6:67:ea:93:70:cc:
e2:26:5f:c4:c5:7a:22:94:99:cc:27:c7:ee:13:d4:
fa:b7:90:9c:8b:a5:5c:e6:83:49:05:be:91:36:4d:
31:5f:49:2c:e3:8c:73:3f:b8:88:35:89:a4:68:8e:
87:b4:d6:13:42:24:9e:5b:01:84:cf:fb:8a:b9:75:
d5:39:53:ad:04:27:6d:58:e6:ad:b2:19:37:4d:c7:
77:6b:fd:ae:76:03:b1:98:84:87:1b:78:04:51:b9:
58:9d:db:15:38:3a:f3:ca:92:58:ba:74:d1:c5:e0:
8c:4b:d0:88:02:6c:02:ce:7a:de:e2:b2:d3:74:b2:
d8:5e:8f:82:f9:9d:d7:f0:c6:d5:ae:62:19:47:3d:
49:9f:d5:bb:c5:2b:a2:54:a6:b0:c0:a4:dd:b0:d3:
eb:67:7f:08:fe:45:5d:5c:3a:f6:25:cd:e8:ef:7f:
4b:51:73:0f:b1:d4:73:2c:20:49:2e:5d:61:b9:c3:
ea:cf:e2:e2:ec:79:22:2c:5b:45:d0:7c:de:18:a7:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5F:46:DE:96:2B:F1:CC:DC:40:2D:CA:C6:58:EA:9C:CB:E6:0F:F3
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8210::/44
Signature Algorithm: sha256WithRSAEncryption
5d:6b:5a:44:66:b5:47:7c:39:91:c0:78:d9:31:99:9b:f0:e5:
a7:de:a8:d2:58:9d:6e:82:8c:bb:75:e6:66:12:9b:2d:ef:68:
dc:e1:cd:72:92:c6:3e:65:3d:07:f3:c6:df:6a:3e:bd:21:43:
de:3f:14:a1:68:e4:14:8d:22:8b:cd:85:d6:03:15:61:45:5f:
d1:c4:8c:71:eb:38:4b:b9:ec:97:ec:2b:aa:78:4c:e4:68:53:
57:1c:f1:53:94:52:a1:4e:c2:1d:7e:51:d2:47:b3:a7:05:2a:
9e:ea:cc:e9:13:87:6a:18:c6:ae:ec:15:12:9a:8c:e5:d0:b5:
07:7d:fc:e0:a3:0d:eb:9a:b1:ab:49:b3:87:62:36:d9:b9:97:
97:70:18:da:85:31:79:a7:0f:5d:40:ff:c7:b1:ed:55:43:f7:
f5:a5:ca:8c:9b:74:ae:24:d2:c4:68:27:f2:84:86:00:ff:70:
63:49:8c:cd:0a:c1:84:79:5d:ba:7b:b0:b0:cd:e8:61:6e:67:
7e:be:3b:cc:a3:e8:82:cd:5d:e8:12:67:1c:c3:d8:e3:32:23:
e3:88:76:1a:f3:db:a3:5f:d1:06:b5:88:0b:6a:89:57:b5:a9:
61:1e:75:ea:12:cf:f2:59:be:2f:1b:91:40:81:35:b9:b1:86:
44:b4:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org