Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a386530303a3a2f34342d3438203d3e20323031333938.roa
File: 326131323a646434373a386530303a3a2f34342d3438203d3e20323031333938.roa (raw, json)
Hash identifier: /rx4d/YhJDimsrJDoSRnYhgSjoiBq+2i5rGljHu9IfU=
Subject key identifier: 3E:9E:E9:F2:44:18:E1:B4:81:44:2A:08:6A:6D:1F:76:C4:12:C0:E2
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 18F655C2781509C03E4B390A9E0C3B8C31FA9A9D
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a386530303a3a2f34342d3438203d3e20323031333938.roa
Signing time: Tue 17 Oct 2023 16:13:25 +0000
ROA not before: Tue 17 Oct 2023 16:08:25 +0000
ROA not after: Tue 15 Oct 2024 16:13:25 +0000
asID: 201398
IP address blocks: 2a12:dd47:8e00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f6:55:c2:78:15:09:c0:3e:4b:39:0a:9e:0c:3b:8c:31:fa:9a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:25 2023 GMT
Not After : Oct 15 16:13:25 2024 GMT
Subject: CN=3E9EE9F24418E1B481442A086A6D1F76C412C0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:60:4c:b2:e8:33:2b:73:78:d2:21:88:10:
ce:0e:f2:e6:4a:cf:bd:f1:cc:05:ac:56:7d:ad:f8:
56:69:86:db:72:b7:aa:3f:40:bb:cb:49:1f:79:ec:
f0:55:9b:92:ed:b7:9e:36:cb:26:58:38:66:5c:15:
12:d1:0e:96:fc:f7:72:e1:c5:ef:65:45:d8:36:e7:
a7:18:9a:01:3b:cf:01:2e:4a:e5:8e:ff:e6:97:19:
a3:5a:f8:47:04:cf:5d:74:5d:84:b0:6b:87:3d:ed:
bd:66:50:76:ca:7a:29:fb:d6:ca:90:b5:c7:1d:0f:
5c:0e:43:d2:23:b3:64:72:49:46:67:0b:a3:e4:dd:
00:e3:83:f8:e8:3b:a5:fc:8f:5a:4b:3d:b9:17:53:
14:fa:76:64:6c:41:91:51:58:87:3c:55:f6:1e:77:
0a:61:a8:8f:5f:2f:05:76:6c:bb:96:83:61:19:5e:
89:f4:9c:b7:e9:eb:9d:0a:88:fb:c1:ab:71:2e:7f:
db:af:28:33:62:69:76:03:4b:12:d9:c4:90:b0:64:
07:e4:44:c9:ec:b7:1b:66:7e:64:b0:75:96:22:66:
f1:89:5f:a3:9f:ef:a2:ea:54:66:f4:39:fd:68:f6:
01:9c:22:0e:47:34:77:94:68:39:15:58:02:3f:a9:
19:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9E:E9:F2:44:18:E1:B4:81:44:2A:08:6A:6D:1F:76:C4:12:C0:E2
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a386530303a3a2f34342d3438203d3e20323031333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8e00::/44
Signature Algorithm: sha256WithRSAEncryption
14:80:32:fc:cd:aa:53:67:51:81:09:1b:d7:c1:bc:19:65:2e:
fa:48:10:d1:32:24:84:0c:2f:f2:e2:5c:a5:b1:6d:65:1c:d6:
a1:2e:bf:9c:e1:b2:49:19:06:c6:6f:35:f2:47:b5:3f:4a:4c:
c3:0a:c8:19:47:ed:66:84:0a:42:87:4f:1f:b9:02:4c:7f:59:
44:80:b3:2a:58:33:ed:09:63:2f:4f:c3:96:7b:65:b2:db:7a:
8f:af:67:5e:39:b8:86:b6:fd:49:2f:df:84:b0:b7:89:a4:1f:
5c:71:20:a4:f2:ae:21:57:f1:61:c1:e2:f4:6c:e6:e3:d1:4e:
aa:f2:99:11:09:37:11:38:c4:58:d4:44:ac:62:56:9a:52:a9:
66:42:2f:36:24:83:76:85:1a:85:2b:cb:57:f1:4c:32:ba:c1:
d0:96:55:60:f9:42:71:b7:24:42:bb:96:2b:09:7e:41:bf:e0:
47:a2:d2:f2:e4:af:6c:7c:23:b2:e0:6c:4b:ca:39:bb:fb:aa:
9a:ae:0d:34:e4:59:b8:e9:d7:ff:83:88:d1:f5:89:39:05:bd:
13:80:e5:db:e4:e8:d7:36:39:ea:a1:d7:0a:22:50:77:fa:43:
da:3f:fd:75:01:70:fa:07:96:f5:87:bb:bf:f5:8e:16:11:f4:
74:43:fb:a6
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUGPZVwngVCcA+SzkKngw7jDH6mp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzEwMTcxNjA4MjVaFw0yNDEwMTUxNjEzMjVaMDMxMTAvBgNV
BAMTKDNFOUVFOUYyNDQxOEUxQjQ4MTQ0MkEwODZBNkQxRjc2QzQxMkMwRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtGBMsugzK3N40iGIEM4O8uZK
z73xzAWsVn2t+FZphttyt6o/QLvLSR957PBVm5Ltt542yyZYOGZcFRLRDpb893Lh
xe9lRdg256cYmgE7zwEuSuWO/+aXGaNa+EcEz110XYSwa4c97b1mUHbKein71sqQ
tccdD1wOQ9Ijs2RySUZnC6Pk3QDjg/joO6X8j1pLPbkXUxT6dmRsQZFRWIc8VfYe
dwphqI9fLwV2bLuWg2EZXon0nLfp650KiPvBq3Euf9uvKDNiaXYDSxLZxJCwZAfk
RMnstxtmfmSwdZYiZvGJX6Of76LqVGb0Of1o9gGcIg5HNHeUaDkVWAI/qRl1AgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUPp7p8kQY4bSBRCoIam0fdsQSwOIwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC81
LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzNDMDVCRkQ5OUYzRTYuY2VyMH0G
CCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMS8zMjYxMzEzMjNhNjQ2NDM0MzczYTM4NjUzMDMwM2EzYTJmMzQzNDJk
MzQzODIwM2QzZTIwMzIzMDMxMzMzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhLdR44AMA0GCSqG
SIb3DQEBCwUAA4IBAQAUgDL8zapTZ1GBCRvXwbwZZS76SBDRMiSEDC/y4lylsW1l
HNahLr+c4bJJGQbGbzXyR7U/SkzDCsgZR+1mhApCh08fuQJMf1lEgLMqWDPtCWMv
T8OWe2Wy23qPr2deObiGtv1JL9+EsLeJpB9ccSCk8q4hV/FhweL0bObj0U6q8pkR
CTcROMRY1ESsYlaaUqlmQi82JIN2hRqFK8tX8UwyusHQllVg+UJxtyRCu5YrCX5B
v+BHotLy5K9sfCOy4GxLyjm7+6qarg005Fm46df/g4jR9Yk5Bb0TgOXb5OjXNjnq
odcKIlB3+kPaP/11AXD6B5b1h7u/9Y4WEfR0Q/um
-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org