Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
File: 3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa (raw, json)
Hash identifier: qljXfzZwzib83TFqbsIddRrLYvwswpBiqIUgH98aPUE=
Subject key identifier: 2F:3B:75:FE:A0:70:F2:FB:5C:06:19:6A:99:C9:49:BE:D9:18:B7:A7
Certificate issuer: /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial: 03F2E2F24AFE74AE8EB46121D32B5B08A51FCC08
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access: rsync://dev.tw/rpki/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access: rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
Signing time: Mon 20 May 2024 23:58:40 +0000
ROA not before: Mon 20 May 2024 23:53:40 +0000
ROA not after: Mon 19 May 2025 23:58:40 +0000
asID: 7719
IP address blocks: 199.189.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f2:e2:f2:4a:fe:74:ae:8e:b4:61:21:d3:2b:5b:08:a5:1f:cc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Validity
Not Before: May 20 23:53:40 2024 GMT
Not After : May 19 23:58:40 2025 GMT
Subject: CN=2F3B75FEA070F2FB5C06196A99C949BED918B7A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:72:cd:4f:8b:c5:fa:ee:16:63:15:7e:68:
64:d6:bb:4e:77:b2:e0:60:c6:53:40:22:e1:4f:e2:
78:0f:8f:0f:4b:c0:bf:53:3e:c5:5f:ac:68:52:8e:
93:19:32:bb:84:85:e4:45:23:df:0d:ba:6d:ce:9a:
08:6b:b2:f8:58:0a:b2:06:b6:92:ce:c5:5a:ed:a3:
26:45:bf:02:b4:27:91:cb:dc:88:3d:e9:e8:da:29:
0b:a1:76:2d:46:6a:8b:31:ad:a3:85:2b:92:71:61:
af:54:93:0b:7e:1d:11:b7:22:b3:66:bf:a9:33:3b:
37:40:36:98:45:91:01:2e:62:3a:f4:81:fd:7b:06:
39:1c:80:51:13:a6:92:c0:67:5f:93:e4:39:dc:98:
07:98:47:c5:2e:32:f3:d5:33:1b:ea:38:1b:07:13:
6a:e0:ce:4b:60:1d:e3:b4:8c:2f:f7:72:f9:47:fe:
c5:02:c9:e0:d1:43:b3:12:94:f8:76:f2:8d:79:5c:
ba:86:99:a4:cb:5d:26:90:2b:ee:93:30:84:96:76:
e0:c6:df:b7:d5:39:b3:a2:b7:87:7d:cc:ad:4b:a9:
28:16:ab:df:22:54:24:ed:50:76:19:7c:2d:13:14:
ea:42:58:27:86:6e:7e:49:a3:c1:00:01:ba:7f:36:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3B:75:FE:A0:70:F2:FB:5C:06:19:6A:99:C9:49:BE:D9:18:B7:A7
X509v3 Authority Key Identifier:
keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.189.156.0/22
Signature Algorithm: sha256WithRSAEncryption
54:be:ea:53:cf:5f:48:19:3c:92:de:51:78:16:47:c7:76:ce:
6d:9c:09:a0:89:f6:63:af:aa:ed:d3:b4:a3:6c:b7:1d:ff:b7:
57:05:25:f7:a6:9f:1d:2b:fa:7e:6c:9e:13:43:82:ee:20:6c:
cf:52:d3:31:01:a9:01:a6:12:7b:95:ae:b6:d1:5b:36:31:88:
4b:21:83:9a:d9:c9:6e:85:5e:cc:9b:5c:d4:95:bb:de:ee:f4:
82:7f:db:25:ec:78:cd:66:32:20:8a:d9:72:ab:56:13:c0:cd:
d8:6f:25:a1:a6:87:7f:39:5a:64:d9:89:c5:6f:94:72:8f:ee:
5c:f9:b8:67:7c:cf:90:d2:d1:a2:74:3c:17:87:41:fc:dd:03:
42:2e:b5:de:88:b0:d2:a2:6e:02:2c:1b:2d:c7:17:e2:57:af:
02:d0:be:db:50:5b:33:ec:e8:e8:37:5f:04:9c:1f:a8:39:9f:
9b:42:29:f6:42:82:e4:c7:79:02:cc:52:bf:0a:41:20:e8:d5:
1f:08:fa:88:87:26:0a:7c:84:cd:47:31:03:e1:e3:66:84:9d:
97:21:7d:9a:7d:d4:40:cd:d2:3f:5b:83:82:fb:84:e7:3c:22:
a4:65:5f:fb:f8:52:d4:00:62:0f:25:74:1c:b4:34:51:8c:57:
b4:c3:8a:cb
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUA/Li8kr+dK6OtGEh0ytbCKUfzAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1
NUVCNEUzQTAeFw0yNDA1MjAyMzUzNDBaFw0yNTA1MTkyMzU4NDBaMDMxMTAvBgNV
BAMTKDJGM0I3NUZFQTA3MEYyRkI1QzA2MTk2QTk5Qzk0OUJFRDkxOEI3QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XnLNT4vF+u4WYxV+aGTWu053
suBgxlNAIuFP4ngPjw9LwL9TPsVfrGhSjpMZMruEheRFI98Num3OmghrsvhYCrIG
tpLOxVrtoyZFvwK0J5HL3Ig96ejaKQuhdi1GaosxraOFK5JxYa9Ukwt+HRG3IrNm
v6kzOzdANphFkQEuYjr0gf17BjkcgFETppLAZ1+T5DncmAeYR8UuMvPVMxvqOBsH
E2rgzktgHeO0jC/3cvlH/sUCyeDRQ7MSlPh28o15XLqGmaTLXSaQK+6TMISWduDG
37fVObOit4d9zK1LqSgWq98iVCTtUHYZfC0TFOpCWCeGbn5Jo8EAAbp/NomNAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQULzt1/qBw8vtcBhlqmclJvtkYt6cwHwYDVR0j
BBgwFoAUmla2AMRGbhfUaz24AwZlilXrTjowDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEwLzlBNTZC
NjAwQzQ0NjZFMTdENDZCM0RCODAzMDY2NThBNTVFQjRFM0EuY3JsMGUGCCsGAQUF
BwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYudHcvcnBraS9BdWd1c3Qv
Ni85QTU2QjYwMEM0NDY2RTE3RDQ2QjNEQjgwMzA2NjU4QTU1RUI0RTNBLmNlcjB0
BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEwLzMxMzkzOTJlMzEzODM5MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjM0
MjAzZDNlMjAzNzM3MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAse9nDANBgkqhkiG9w0BAQsFAAOC
AQEAVL7qU89fSBk8kt5ReBZHx3bObZwJoIn2Y6+q7dO0o2y3Hf+3VwUl96afHSv6
fmyeE0OC7iBsz1LTMQGpAaYSe5WuttFbNjGISyGDmtnJboVezJtc1JW73u70gn/b
Jex4zWYyIIrZcqtWE8DN2G8loaaHfzlaZNmJxW+Uco/uXPm4Z3zPkNLRonQ8F4dB
/N0DQi613oiw0qJuAiwbLccX4levAtC+21BbM+zo6DdfBJwfqDmfm0Ip9kKC5Md5
AsxSvwpBIOjVHwj6iIcmCnyEzUcxA+HjZoSdlyF9mn3UQM3SP1uDgvuE5zwipGVf
+/hS1ABiDyV0HLQ0UYxXtMOKyw==
-----END CERTIFICATE-----
Generated at Thu Jun 20 06:05:19 2024 by rpki-client on console-fra.rpki-client.org