Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa
File: 326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa (raw, json)
Hash identifier: rmWbanPYQ32lLIoye2KcReUygKpY6tQJT9/d01t95bQ=
Subject key identifier: B8:45:5A:7E:8E:63:9F:C7:81:14:4E:29:33:0E:A3:9B:D6:B4:E8:3B
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 623FFE75B075EBB6E9A24CD6434FF33AFE4F32A6
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa
Signing time: Tue 17 Oct 2023 16:13:28 +0000
ROA not before: Tue 17 Oct 2023 16:08:28 +0000
ROA not after: Tue 15 Oct 2024 16:13:28 +0000
asID: 212503
IP address blocks: 2a12:dd47:8ee0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3f:fe:75:b0:75:eb:b6:e9:a2:4c:d6:43:4f:f3:3a:fe:4f:32:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:28 2023 GMT
Not After : Oct 15 16:13:28 2024 GMT
Subject: CN=B8455A7E8E639FC781144E29330EA39BD6B4E83B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:b4:1d:7b:33:7c:ca:0f:34:09:1b:cb:76:
c6:03:82:23:01:b3:69:e4:fc:2e:d9:f5:8f:3f:25:
4c:de:9e:ce:e8:e3:29:3b:d9:da:74:a1:79:1c:d3:
44:20:cf:51:cd:26:a9:63:21:5c:67:47:92:45:7e:
e9:e2:63:53:6c:ab:25:54:91:ef:b8:0c:26:5e:34:
3e:cd:3d:50:fc:d6:06:af:b3:44:ff:3f:7f:96:fb:
4c:a0:b5:cd:e4:19:63:b2:d4:6b:e6:0b:44:62:fb:
c4:43:66:1b:7c:c3:b1:36:b4:a3:21:ee:f0:b3:8b:
b9:18:e1:41:22:6a:4a:58:8c:8e:af:f4:ae:63:1a:
6e:7d:e3:c4:fc:a7:6a:ed:ea:e4:53:36:c1:14:1d:
40:95:b3:30:0d:d6:04:7d:0f:c0:31:4a:01:28:18:
46:ae:18:f9:c5:a5:bf:0b:a0:47:3b:6f:d1:11:a2:
54:28:50:24:2f:e7:ce:c8:bf:5d:13:6b:fa:b5:87:
06:46:5a:54:33:e2:5c:62:93:24:a7:bf:8f:61:14:
32:94:34:a2:f2:ea:ef:d1:fa:c1:db:48:94:80:bf:
4f:99:3a:d6:c3:a2:56:99:ff:0c:5c:b6:2c:29:98:
0e:5f:05:5d:c3:d5:74:8c:9d:07:e8:0b:ee:3f:9a:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:45:5A:7E:8E:63:9F:C7:81:14:4E:29:33:0E:A3:9B:D6:B4:E8:3B
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8ee0::/44
Signature Algorithm: sha256WithRSAEncryption
98:61:14:49:45:74:a7:46:da:a1:bf:54:de:d6:7d:9b:94:2d:
7d:ac:f3:f4:af:be:6f:7e:4d:28:52:20:ee:3a:50:0b:3f:f8:
c1:8f:a7:2f:35:19:88:dd:61:60:d2:9a:81:bf:ac:bf:6b:df:
b3:46:65:28:ad:ca:f5:b9:e0:86:14:0b:c5:d9:5e:f1:89:2d:
9f:85:6d:70:60:dd:65:2b:f5:71:34:c2:29:3c:19:aa:f6:2b:
60:28:60:b9:ae:b3:7f:f2:05:00:0c:8f:e3:18:f4:3f:53:ed:
3d:79:0f:cf:c3:87:d3:c0:fa:a6:c0:15:d2:aa:2a:de:f6:f0:
9c:ae:22:f0:24:3b:95:b8:38:76:73:83:09:b5:8e:56:07:ac:
b0:fd:a9:67:5b:fd:88:64:8b:82:15:50:ae:ff:0c:8b:97:6f:
b3:01:ea:a1:7d:92:69:4b:ec:6a:e2:59:14:c0:0a:d0:66:9b:
03:c9:88:99:64:4c:0e:f2:a4:7e:39:82:74:4a:a4:a2:0c:c1:
37:41:76:49:56:45:da:d2:72:6f:67:d5:94:54:e7:6b:13:3b:
c0:42:b4:b9:d4:a2:7c:cf:c9:0f:81:67:e2:4c:7f:45:8e:1b:
ba:38:a8:8e:e5:22:a5:a5:60:50:c5:e6:7d:ff:22:a6:2d:30:
e2:15:8a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:40:11 2024 by rpki-client on console-fra.rpki-client.org