Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a663730303a3a2f34302d3438203d3e20313939363536.roa
File: 326131323a646434373a663730303a3a2f34302d3438203d3e20313939363536.roa (raw, json)
Hash identifier: OdosTFoqFa6MohLgSWI4mOIwFCnnOrLYfX9zZ5X5zmE=
Subject key identifier: BB:49:52:36:8C:6D:A0:8B:B3:D8:63:EA:1B:13:BD:A0:A8:BA:BD:EB
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 1901B76CE58C31C74AAC55234205702ADF416BB0
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a663730303a3a2f34302d3438203d3e20313939363536.roa
Signing time: Tue 17 Oct 2023 16:13:31 +0000
ROA not before: Tue 17 Oct 2023 16:08:31 +0000
ROA not after: Tue 15 Oct 2024 16:13:31 +0000
asID: 199656
IP address blocks: 2a12:dd47:f700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:01:b7:6c:e5:8c:31:c7:4a:ac:55:23:42:05:70:2a:df:41:6b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:31 2023 GMT
Not After : Oct 15 16:13:31 2024 GMT
Subject: CN=BB4952368C6DA08BB3D863EA1B13BDA0A8BABDEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:52:1f:2c:22:fb:7e:a6:40:e8:b2:ba:63:dc:
d5:16:6c:8d:29:f7:18:31:32:98:9c:da:a6:4b:a3:
e9:ce:8b:f9:88:aa:ca:50:96:61:1c:02:84:07:ea:
c2:56:7f:2d:33:57:34:97:69:b1:c3:eb:31:63:a9:
9b:9c:8c:33:4e:d6:32:f9:ea:6f:fa:67:28:08:74:
7c:80:65:e9:f8:f8:f9:2f:41:d7:02:41:01:2c:5b:
8c:21:11:36:7c:06:54:79:b3:a8:03:fd:1e:de:a3:
eb:9b:87:29:73:90:5c:51:e4:ad:3e:19:d3:4f:b5:
cd:e2:18:b8:29:63:ab:19:c3:33:ad:16:8e:18:25:
79:7a:8a:09:5e:29:ab:31:22:68:14:b5:0a:21:cf:
0c:e1:93:5a:23:0c:64:28:01:4c:1b:23:18:78:8e:
16:1f:e8:19:89:5c:61:e6:3d:5b:8c:9c:cc:7f:3b:
f7:61:ee:c0:71:31:1f:c1:d9:22:47:66:b8:c7:d0:
e4:da:c7:5b:96:85:e2:47:8a:84:f2:bd:28:bb:41:
e5:30:70:9c:d8:12:fe:ec:0c:8d:7a:74:84:70:b1:
5a:93:ca:61:16:19:c7:a4:5a:ff:14:51:72:4c:ec:
58:31:99:58:8b:36:d6:1a:03:ea:66:1f:06:56:54:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:49:52:36:8C:6D:A0:8B:B3:D8:63:EA:1B:13:BD:A0:A8:BA:BD:EB
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a663730303a3a2f34302d3438203d3e20313939363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:f700::/40
Signature Algorithm: sha256WithRSAEncryption
59:ba:ff:76:62:cb:cc:1d:0c:3a:74:85:a7:a2:36:91:ad:79:
44:4c:74:a0:90:53:90:79:88:47:bd:f4:2a:6e:0b:e7:0b:d4:
3b:a4:35:e9:a0:f9:74:52:5d:40:82:94:ee:a7:a8:2d:a5:ba:
79:65:60:1f:26:68:d2:93:92:e8:22:aa:6d:bf:3f:5a:bb:58:
15:77:a4:1f:f7:1d:46:e4:1a:26:70:85:06:25:34:ca:c6:f5:
55:6a:26:04:4e:3e:cb:67:1e:ee:4b:aa:c3:bc:a4:19:43:ff:
a2:b9:ab:11:33:7f:6c:c5:3c:d1:9e:73:ea:17:25:71:5b:f8:
46:69:80:a6:72:ae:0a:64:c9:60:d0:f3:0b:6f:88:7c:fa:71:
9c:02:0b:dc:49:d1:8b:ff:d6:42:84:c4:81:42:dc:18:28:b3:
c8:2e:ed:92:ba:32:e1:40:b3:e9:ef:e5:1e:9c:c6:91:ad:8b:
79:e9:b1:5f:37:15:85:42:8c:9f:0d:47:13:66:4e:c3:9e:e0:
9e:16:4b:bc:a0:0a:c0:71:14:44:af:c6:ce:a9:a3:e5:66:f6:
fa:2f:3c:66:d9:a9:cd:30:65:9a:2c:0e:7d:23:78:2f:35:d3:
b8:3b:cd:f4:02:60:65:65:17:cc:01:41:9e:e9:42:6b:f3:e6:
c7:fd:5b:a9
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIUGQG3bOWMMcdKrFUjQgVwKt9Ba7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzEwMTcxNjA4MzFaFw0yNDEwMTUxNjEzMzFaMDMxMTAvBgNV
BAMTKEJCNDk1MjM2OEM2REEwOEJCM0Q4NjNFQTFCMTNCREEwQThCQUJERUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUh8sIvt+pkDosrpj3NUWbI0p
9xgxMpic2qZLo+nOi/mIqspQlmEcAoQH6sJWfy0zVzSXabHD6zFjqZucjDNO1jL5
6m/6ZygIdHyAZen4+PkvQdcCQQEsW4whETZ8BlR5s6gD/R7eo+ubhylzkFxR5K0+
GdNPtc3iGLgpY6sZwzOtFo4YJXl6igleKasxImgUtQohzwzhk1ojDGQoAUwbIxh4
jhYf6BmJXGHmPVuMnMx/O/dh7sBxMR/B2SJHZrjH0OTax1uWheJHioTyvSi7QeUw
cJzYEv7sDI16dIRwsVqTymEWGcekWv8UUXJM7FgxmViLNtYaA+pmHwZWVBo9AgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQUu0lSNoxtoIuz2GPqGxO9oKi6veswHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC81
LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzNDMDVCRkQ5OUYzRTYuY2VyMH0G
CCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMS8zMjYxMzEzMjNhNjQ2NDM0MzczYTY2MzczMDMwM2EzYTJmMzQzMDJk
MzQzODIwM2QzZTIwMzEzOTM5MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhLdR/cwDQYJKoZI
hvcNAQELBQADggEBAFm6/3Ziy8wdDDp0haeiNpGteURMdKCQU5B5iEe99CpuC+cL
1DukNemg+XRSXUCClO6nqC2lunllYB8maNKTkugiqm2/P1q7WBV3pB/3HUbkGiZw
hQYlNMrG9VVqJgROPstnHu5LqsO8pBlD/6K5qxEzf2zFPNGec+oXJXFb+EZpgKZy
rgpkyWDQ8wtviHz6cZwCC9xJ0Yv/1kKExIFC3Bgos8gu7ZK6MuFAs+nv5R6cxpGt
i3npsV83FYVCjJ8NRxNmTsOe4J4WS7ygCsBxFESvxs6po+Vm9vovPGbZqc0wZZos
Dn0jeC8107g7zfQCYGVlF8wBQZ7pQmvz5sf9W6k=
-----END CERTIFICATE-----
Generated at Sat May 4 20:40:11 2024 by rpki-client on console-fra.rpki-client.org