Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa
File: 323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa (raw, json)
Hash identifier: esucw7CB4zVx0kqVYhYqCRtq9KdJe0gcECQZXE6+sW8=
Subject key identifier: B2:1F:80:C4:35:09:03:92:65:C6:E5:DC:73:77:A4:51:42:81:B6:DC
Certificate issuer: /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial: 613FD56DC9B1FCEF298EF878FFEFA3A02AA5C9EF
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access: rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access: rsync://rpki.co/repo/AS945/2/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa
Signing time: Mon 11 Mar 2024 04:13:48 +0000
ROA not before: Mon 11 Mar 2024 04:08:48 +0000
ROA not after: Mon 10 Mar 2025 04:13:48 +0000
asID: 212360
IP address blocks: 2602:fc23:112::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:3f:d5:6d:c9:b1:fc:ef:29:8e:f8:78:ff:ef:a3:a0:2a:a5:c9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Validity
Not Before: Mar 11 04:08:48 2024 GMT
Not After : Mar 10 04:13:48 2025 GMT
Subject: CN=B21F80C43509039265C6E5DC7377A4514281B6DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:78:ae:94:fc:be:9f:22:9a:0f:90:34:00:
3f:c6:15:1f:12:d8:59:5f:cc:dc:e4:ae:67:88:71:
61:81:22:8f:e6:98:41:82:57:e7:32:7d:8b:3f:76:
d9:ea:dc:25:3b:e1:d7:a2:b1:25:af:0e:ec:e0:3e:
d2:5a:1b:4e:dc:91:0d:b1:61:ed:8f:a0:0a:af:15:
c2:d5:ae:c0:18:bf:14:c2:d1:cf:38:c7:c8:31:c6:
fb:41:27:c3:62:c1:fa:a3:98:ac:a4:c6:d3:a7:c7:
66:06:33:46:16:fb:93:01:57:e0:9e:7f:a0:e1:11:
6d:08:30:9f:a0:8f:97:4b:5a:5a:aa:3b:33:06:b3:
15:db:e0:00:db:bf:38:3c:6d:b9:98:5c:d2:39:f0:
76:a3:16:7b:17:ca:b9:34:20:e3:00:a7:8a:b1:cf:
cf:2f:9a:91:b4:3b:aa:9e:62:30:86:8c:7e:d1:99:
32:04:3a:95:2c:e4:49:02:11:88:ef:f1:9c:8d:c1:
e5:2f:87:5b:e9:a7:b2:83:13:4e:50:f5:0a:a4:07:
97:4c:c7:63:2f:7e:c4:6b:a8:4e:a2:4c:eb:15:4a:
7e:cb:a9:34:ee:13:6c:33:8b:5f:13:b1:0c:f7:9e:
82:3c:e2:db:bb:2d:26:97:05:f9:78:52:1a:d1:99:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:80:C4:35:09:03:92:65:C6:E5:DC:73:77:A4:51:42:81:B6:DC
X509v3 Authority Key Identifier:
keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc23:112::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ea:af:b6:67:4b:c5:78:11:73:33:e7:8a:1e:38:ce:19:5a:
ec:c5:e4:dc:76:df:e7:fb:32:fa:13:fd:95:a1:df:e7:31:45:
80:91:80:5c:66:5b:ff:75:11:18:b0:42:aa:77:69:6c:f5:04:
06:0f:fe:2b:d1:8b:ad:29:44:fb:5f:ee:48:b0:ef:75:80:84:
7c:a4:af:40:c3:11:af:85:34:00:9f:7b:86:ac:4f:1d:a7:82:
1c:a3:8a:cc:7c:19:37:72:31:29:5e:21:c6:4d:e1:49:54:ba:
75:a7:9d:7c:0d:1f:69:ed:35:6e:bf:39:3d:67:36:80:df:d2:
6c:ed:e0:40:7e:a7:59:98:0a:b4:ed:42:c6:be:cf:5c:66:fe:
ae:4e:c1:13:17:c8:9c:d6:a7:50:53:2a:de:0b:f3:14:2d:a0:
a4:f7:9f:86:95:b3:03:a9:85:ba:99:11:a6:31:50:c5:fc:8a:
93:0b:f4:3e:0d:19:28:7d:59:e2:79:26:cd:3e:d5:9e:19:50:
7a:04:09:38:a7:11:1c:5d:9a:d2:c0:ba:e7:00:81:8d:f9:c9:
91:cc:c6:d5:0c:74:06:28:5a:e1:9b:37:bc:e6:ff:3f:40:27:
33:53:ca:1d:19:11:67:31:38:37:1d:ad:b6:a8:61:25:61:8f:
e5:ba:03:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:11:09 2025 by rpki-client