Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa
File:                     323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa (raw, json)
Hash identifier:          /kiBfd/1QyIzZXUtnJC2LWtVrpybDdyCzcBx253G2Js=
Subject key identifier:   94:9F:2E:4C:AD:48:9F:6F:ED:F7:2E:09:7E:A7:E7:08:F2:8A:6E:92
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       5CDFEF671F6C405BCB74904D421838D4BD65AB22
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa
Signing time:             Mon 11 Mar 2024 04:13:47 +0000
ROA not before:           Mon 11 Mar 2024 04:08:47 +0000
ROA not after:            Mon 10 Mar 2025 04:13:47 +0000
asID:                     213045
IP address blocks:        2602:fc23:11a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
                          rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.mft
                          rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 18:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:df:ef:67:1f:6c:40:5b:cb:74:90:4d:42:18:38:d4:bd:65:ab:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Mar 11 04:08:47 2024 GMT
            Not After : Mar 10 04:13:47 2025 GMT
        Subject: CN=949F2E4CAD489F6FEDF72E097EA7E708F28A6E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:bd:43:8e:19:85:08:7e:b2:9a:38:d9:1b:
                    99:c6:c7:27:e2:05:53:b4:09:4a:b6:9b:df:dc:df:
                    80:06:a1:f5:ba:b8:bd:a8:08:3d:d2:6e:2f:e5:85:
                    2d:94:f3:d1:c6:bd:fd:e7:3e:f9:d3:49:4a:00:4d:
                    bc:6c:70:73:66:2d:ca:f2:05:66:3d:15:5d:1c:79:
                    15:32:ac:a5:21:e2:75:6f:b3:7f:7b:2a:1f:8e:ed:
                    bb:de:8e:68:89:01:fe:b5:6b:44:d6:2b:50:22:42:
                    a7:db:93:b7:37:e4:d0:a1:81:5c:69:28:92:25:24:
                    96:08:74:e2:75:08:30:27:71:e4:6f:9a:28:2f:12:
                    54:53:92:02:ea:1b:98:6a:43:5b:bd:da:2e:8e:a0:
                    12:96:f6:97:3a:53:c9:46:e5:84:16:b5:ff:9d:01:
                    e5:37:2c:46:bd:0a:44:9b:9f:ce:3a:d6:15:28:93:
                    4e:d5:2e:9d:e1:5b:63:e8:73:ce:f3:02:ac:34:22:
                    bb:75:b4:61:ce:fb:fb:60:0a:4f:9f:ff:15:8b:44:
                    46:64:14:9a:2f:07:57:3f:dc:6c:df:ae:0b:b2:45:
                    6b:f5:5a:c4:24:68:20:d1:b0:49:8f:72:51:a0:e2:
                    fd:cf:0b:4e:bd:a9:f1:8f:e7:ce:05:23:0b:b1:93:
                    58:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9F:2E:4C:AD:48:9F:6F:ED:F7:2E:09:7E:A7:E7:08:F2:8A:6E:92
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:11a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:13:38:83:93:64:1f:6a:ad:b3:eb:2f:1e:10:08:9a:ca:7a:
         00:74:ca:65:71:f3:b5:33:f3:c9:e5:6f:6b:3b:2c:75:e0:1f:
         44:9d:71:b7:97:c3:0a:69:01:86:eb:2f:a7:cc:88:7c:63:8a:
         3d:4a:61:28:cf:b2:95:a0:ec:7c:f8:86:c6:02:3b:98:36:0f:
         89:63:11:ef:57:c6:a2:82:48:03:9e:3e:2b:dd:14:85:5b:c1:
         8c:5f:e1:e5:0b:83:d2:57:4c:e3:c8:bc:cf:7d:31:14:ec:09:
         38:bd:e9:55:71:87:7d:11:cf:07:c0:56:5f:98:82:24:d5:15:
         59:6c:59:a3:77:fb:ee:84:47:af:79:28:ca:f4:6b:8a:68:f4:
         ab:4f:01:4f:e0:20:b7:7e:8e:4d:96:12:bc:dd:d2:c8:d2:ef:
         b5:66:ce:1f:34:78:53:b9:9d:7e:07:0a:0d:ea:f4:17:45:c9:
         16:2e:f1:f2:33:0c:c3:cd:9e:08:68:3c:72:8f:03:f9:2b:81:
         50:53:cd:7e:d9:ed:c2:56:99:ee:98:16:6f:c1:fe:18:5e:db:
         67:81:ee:b9:19:e7:c4:61:15:57:7e:7f:ef:61:11:a0:bb:22:
         dd:f2:8b:5e:1c:9f:ce:95:d2:10:59:66:1f:24:e3:be:02:ba:
         7a:92:04:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:32:00 2024 by rpki-client on console-fra.rpki-client.org