Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa
File:                     323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa (raw, json)
Hash identifier:          esucw7CB4zVx0kqVYhYqCRtq9KdJe0gcECQZXE6+sW8=
Subject key identifier:   B2:1F:80:C4:35:09:03:92:65:C6:E5:DC:73:77:A4:51:42:81:B6:DC
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       613FD56DC9B1FCEF298EF878FFEFA3A02AA5C9EF
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa
Signing time:             Mon 11 Mar 2024 04:13:48 +0000
ROA not before:           Mon 11 Mar 2024 04:08:48 +0000
ROA not after:            Mon 10 Mar 2025 04:13:48 +0000
asID:                     212360
IP address blocks:        2602:fc23:112::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
                          rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.mft
                          rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 18:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3f:d5:6d:c9:b1:fc:ef:29:8e:f8:78:ff:ef:a3:a0:2a:a5:c9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Mar 11 04:08:48 2024 GMT
            Not After : Mar 10 04:13:48 2025 GMT
        Subject: CN=B21F80C43509039265C6E5DC7377A4514281B6DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:78:ae:94:fc:be:9f:22:9a:0f:90:34:00:
                    3f:c6:15:1f:12:d8:59:5f:cc:dc:e4:ae:67:88:71:
                    61:81:22:8f:e6:98:41:82:57:e7:32:7d:8b:3f:76:
                    d9:ea:dc:25:3b:e1:d7:a2:b1:25:af:0e:ec:e0:3e:
                    d2:5a:1b:4e:dc:91:0d:b1:61:ed:8f:a0:0a:af:15:
                    c2:d5:ae:c0:18:bf:14:c2:d1:cf:38:c7:c8:31:c6:
                    fb:41:27:c3:62:c1:fa:a3:98:ac:a4:c6:d3:a7:c7:
                    66:06:33:46:16:fb:93:01:57:e0:9e:7f:a0:e1:11:
                    6d:08:30:9f:a0:8f:97:4b:5a:5a:aa:3b:33:06:b3:
                    15:db:e0:00:db:bf:38:3c:6d:b9:98:5c:d2:39:f0:
                    76:a3:16:7b:17:ca:b9:34:20:e3:00:a7:8a:b1:cf:
                    cf:2f:9a:91:b4:3b:aa:9e:62:30:86:8c:7e:d1:99:
                    32:04:3a:95:2c:e4:49:02:11:88:ef:f1:9c:8d:c1:
                    e5:2f:87:5b:e9:a7:b2:83:13:4e:50:f5:0a:a4:07:
                    97:4c:c7:63:2f:7e:c4:6b:a8:4e:a2:4c:eb:15:4a:
                    7e:cb:a9:34:ee:13:6c:33:8b:5f:13:b1:0c:f7:9e:
                    82:3c:e2:db:bb:2d:26:97:05:f9:78:52:1a:d1:99:
                    f6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1F:80:C4:35:09:03:92:65:C6:E5:DC:73:77:A4:51:42:81:B6:DC
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:112::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:ea:af:b6:67:4b:c5:78:11:73:33:e7:8a:1e:38:ce:19:5a:
         ec:c5:e4:dc:76:df:e7:fb:32:fa:13:fd:95:a1:df:e7:31:45:
         80:91:80:5c:66:5b:ff:75:11:18:b0:42:aa:77:69:6c:f5:04:
         06:0f:fe:2b:d1:8b:ad:29:44:fb:5f:ee:48:b0:ef:75:80:84:
         7c:a4:af:40:c3:11:af:85:34:00:9f:7b:86:ac:4f:1d:a7:82:
         1c:a3:8a:cc:7c:19:37:72:31:29:5e:21:c6:4d:e1:49:54:ba:
         75:a7:9d:7c:0d:1f:69:ed:35:6e:bf:39:3d:67:36:80:df:d2:
         6c:ed:e0:40:7e:a7:59:98:0a:b4:ed:42:c6:be:cf:5c:66:fe:
         ae:4e:c1:13:17:c8:9c:d6:a7:50:53:2a:de:0b:f3:14:2d:a0:
         a4:f7:9f:86:95:b3:03:a9:85:ba:99:11:a6:31:50:c5:fc:8a:
         93:0b:f4:3e:0d:19:28:7d:59:e2:79:26:cd:3e:d5:9e:19:50:
         7a:04:09:38:a7:11:1c:5d:9a:d2:c0:ba:e7:00:81:8d:f9:c9:
         91:cc:c6:d5:0c:74:06:28:5a:e1:9b:37:bc:e6:ff:3f:40:27:
         33:53:ca:1d:19:11:67:31:38:37:1d:ad:b6:a8:61:25:61:8f:
         e5:ba:03:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:32:00 2024 by rpki-client on console-fra.rpki-client.org