Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a643230303a3a2f34302d3438203d3e20323131393436.roa
File: 326131323a646434373a643230303a3a2f34302d3438203d3e20323131393436.roa (raw, json)
Hash identifier: BS3y5duzYSlH60oDUp5emQZFoDLL9rtDyGsjGtFf1ZU=
Subject key identifier: B5:08:40:26:AD:06:9B:0F:7D:8B:92:30:43:6C:54:B2:9E:28:4A:5B
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 0332B8E3BF2EDF38AA42E8C576987099E15B8BE5
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a643230303a3a2f34302d3438203d3e20323131393436.roa
Signing time: Tue 17 Oct 2023 16:13:32 +0000
ROA not before: Tue 17 Oct 2023 16:08:32 +0000
ROA not after: Tue 15 Oct 2024 16:13:32 +0000
asID: 211946
IP address blocks: 2a12:dd47:d200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:32:b8:e3:bf:2e:df:38:aa:42:e8:c5:76:98:70:99:e1:5b:8b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:32 2023 GMT
Not After : Oct 15 16:13:32 2024 GMT
Subject: CN=B5084026AD069B0F7D8B9230436C54B29E284A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:e6:5d:bd:5e:e1:e1:51:a2:f1:81:b2:c5:
2e:55:7e:c1:33:c7:38:9b:62:af:4d:26:f9:03:27:
fc:61:63:bd:ad:e5:4c:4a:e2:1b:c8:08:4f:5e:5d:
5c:03:0f:7e:d7:39:31:c4:39:59:6b:3e:22:99:b6:
b1:a7:1d:59:b0:5c:d0:bc:85:ab:8d:19:e1:09:65:
e8:1e:69:5f:95:c3:7a:d2:23:e5:f4:95:18:7f:e6:
02:a0:fa:84:14:d2:bf:57:45:fe:c8:20:49:f5:9e:
54:fa:24:a9:2d:b0:8a:ce:fc:62:8c:e7:59:1a:cc:
9a:f9:9e:6b:a4:f1:c1:96:c0:06:07:2b:7d:4d:4e:
ea:fc:eb:e9:30:8a:fe:79:8f:86:7e:7f:af:e8:b6:
0b:b1:d8:2b:4f:74:bf:5a:99:c9:44:64:1e:d4:d7:
94:8a:ee:e5:02:aa:3f:a1:ef:30:90:45:e2:4d:55:
ab:04:28:03:f9:8b:36:c7:11:40:3c:63:6a:0f:89:
75:df:c4:4e:f1:29:64:bb:40:5e:86:86:5c:38:0d:
fd:6e:26:67:f1:5c:6f:b3:d7:22:10:97:39:59:97:
d2:aa:af:0b:27:55:cc:2d:ce:ae:30:d6:13:bb:19:
7e:3c:3a:d7:8f:68:e2:36:08:f7:a9:3b:f6:6f:65:
2d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:08:40:26:AD:06:9B:0F:7D:8B:92:30:43:6C:54:B2:9E:28:4A:5B
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a643230303a3a2f34302d3438203d3e20323131393436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:d200::/40
Signature Algorithm: sha256WithRSAEncryption
48:f3:b9:f2:92:5a:41:0e:d4:76:c2:d4:3e:bc:54:b4:d2:d5:
a6:6d:a3:c3:9d:ba:30:bf:94:39:1e:71:9a:ac:90:b8:f6:72:
4e:56:2d:d4:0a:cc:33:5c:34:10:90:70:67:c6:2e:53:60:a1:
f3:d7:08:32:58:6d:16:49:94:63:ca:cd:2c:3e:cd:df:ad:58:
15:64:57:75:08:52:1a:f0:b9:9f:b6:57:aa:07:6d:27:8b:95:
1f:f0:60:39:99:85:af:ed:2f:2a:8c:d7:1a:39:fc:33:75:e8:
34:ba:10:1e:45:51:2e:bf:a6:66:25:c2:ab:4c:0a:fb:2c:6b:
c8:6f:e8:4c:05:13:7f:4f:b0:52:2b:46:32:49:23:63:c7:3e:
4f:37:9a:7a:f5:b5:cb:a0:b2:3b:17:f1:35:21:4d:30:63:96:
83:42:de:20:b7:af:1b:a0:8b:f0:f1:90:f6:99:23:f2:b3:80:
b7:c2:75:62:01:32:f3:3f:c4:d0:fb:e2:06:fb:5b:99:2b:13:
67:72:d0:10:bf:d4:54:34:c6:2b:92:b7:46:4a:33:ab:83:37:
11:11:91:22:70:7c:8f:4b:9b:45:bb:82:98:7f:d4:fa:75:51:
6e:cf:b9:d3:eb:6b:5a:d1:28:ac:c5:9a:ec:7e:13:d7:70:5e:
18:38:0b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org