Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
File:                     323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa (raw, json)
Hash identifier:          NyTd2yPiHNsngRYCBOBQadsnbWPsT7sYar5phI/CmEo=
Subject key identifier:   62:DE:4D:EE:9B:47:EF:30:0B:62:B8:7B:12:B3:CF:C9:02:D9:04:89
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       0661618E022CBD0A712DDCC1501D6B7C422664CC
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
Signing time:             Mon 11 Mar 2024 04:13:47 +0000
ROA not before:           Mon 11 Mar 2024 04:08:47 +0000
ROA not after:            Mon 10 Mar 2025 04:13:47 +0000
asID:                     57429
IP address blocks:        2602:fc23:111::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
                          rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.mft
                          rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 00:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:61:61:8e:02:2c:bd:0a:71:2d:dc:c1:50:1d:6b:7c:42:26:64:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Mar 11 04:08:47 2024 GMT
            Not After : Mar 10 04:13:47 2025 GMT
        Subject: CN=62DE4DEE9B47EF300B62B87B12B3CFC902D90489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:0d:94:59:f9:64:d5:ff:fb:d4:48:76:6c:
                    1c:93:ee:37:db:0d:2b:ad:f9:da:d0:9f:c5:34:4b:
                    3e:4b:00:bc:b8:3e:8d:46:9c:91:77:f4:54:cf:61:
                    ff:2d:1b:57:c9:ed:da:c1:a3:ac:d8:c7:b8:3d:eb:
                    a2:84:21:c3:7c:1b:47:03:cb:fa:10:c7:ef:e6:27:
                    35:02:d5:6b:86:4a:48:84:a5:d7:5f:d4:29:42:6c:
                    3a:22:ed:0b:ed:cd:12:eb:d1:28:0a:ba:14:46:f2:
                    27:a9:6b:f8:53:d2:87:8f:55:d6:d9:8e:1d:2e:48:
                    eb:f6:25:2d:dc:48:21:d8:42:49:7d:10:be:22:28:
                    fa:f4:ee:2c:07:43:19:d9:62:ca:87:cf:66:da:e1:
                    a3:70:f6:a5:b5:65:42:6c:0d:b3:03:8f:c0:86:78:
                    bc:b8:3b:c6:e8:c9:f0:95:d0:48:0f:56:b4:ac:b0:
                    ba:35:9e:2d:e2:87:9c:80:d2:73:92:b5:0e:e1:b6:
                    2a:b8:5b:44:1e:24:1f:20:71:d2:bf:59:9f:95:f8:
                    37:ca:85:a1:78:49:0e:f7:e8:ae:5b:f5:a4:88:7f:
                    c9:66:6f:d6:79:b2:8d:49:8c:08:d3:2e:f9:01:1f:
                    ce:07:37:a3:87:f1:1b:34:16:0a:8e:78:f6:66:1f:
                    4a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DE:4D:EE:9B:47:EF:30:0B:62:B8:7B:12:B3:CF:C9:02:D9:04:89
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:f7:cc:ac:fc:b2:8e:3e:cd:29:7c:c5:c6:1d:99:02:84:3e:
         d9:97:b1:f0:0d:a9:c4:d6:53:ba:3a:72:fd:8f:73:64:9b:1c:
         48:b6:c7:8f:ce:2d:fd:04:12:40:7d:48:ea:f0:7b:71:d9:22:
         8e:d4:98:de:39:a9:5b:4a:92:78:ac:24:07:ab:ad:c5:d9:8a:
         c1:65:1d:e6:4c:df:db:9f:5e:f1:f6:ca:93:dd:84:92:82:01:
         eb:a8:64:42:f0:47:7b:80:ea:c3:b4:ae:60:d8:2f:4a:6c:8f:
         54:3d:5b:aa:f4:a2:c9:70:0c:05:37:cc:57:5c:5e:7f:30:e6:
         9a:a0:20:72:38:e6:8e:62:01:fd:3a:6f:fe:51:e0:14:d9:2e:
         b9:a0:f4:ea:38:99:62:ee:3f:22:e0:2d:0a:a2:a0:5b:69:6c:
         24:fc:85:33:ba:c0:49:cf:2e:41:c5:08:8d:11:02:3d:2c:58:
         9f:a5:7e:49:75:26:31:63:21:d3:6e:b7:b7:1f:89:44:6a:53:
         ed:b2:29:f6:c0:76:6d:d9:02:1a:75:69:ce:1b:4f:77:9c:e3:
         56:01:91:2f:fc:59:66:ad:d3:a0:40:36:8a:75:c6:67:e7:f9:
         9e:c2:08:85:db:99:10:c5:16:59:35:d0:31:32:2c:f5:f2:71:
         f5:26:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:53:21 2024 by rpki-client on console-ams.rpki-client.org