Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa
File: 323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa (raw, json)
Hash identifier: F81FrPw0rYQmp55Ub4mYH/tCqVt2WZOoQGIJPCDe70k=
Subject key identifier: AA:58:99:89:9C:F9:30:4C:F6:94:D6:92:BC:05:F7:F8:A1:F0:21:E3
Certificate issuer: /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial: 6A572A9C6C10A14A78888CAAAABF61B4EE799B71
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access: rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access: rsync://rpki.co/repo/AS945/2/323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa
Signing time: Mon 11 Mar 2024 04:13:48 +0000
ROA not before: Mon 11 Mar 2024 04:08:48 +0000
ROA not after: Mon 10 Mar 2025 04:13:48 +0000
asID: 205432
IP address blocks: 2602:fc23:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:57:2a:9c:6c:10:a1:4a:78:88:8c:aa:aa:bf:61:b4:ee:79:9b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Validity
Not Before: Mar 11 04:08:48 2024 GMT
Not After : Mar 10 04:13:48 2025 GMT
Subject: CN=AA5899899CF9304CF694D692BC05F7F8A1F021E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:3a:43:ff:0f:08:d7:53:6d:9e:63:00:d7:
9f:14:20:d9:16:40:68:ba:7a:25:cb:db:ce:cb:75:
27:9c:12:2b:06:35:ad:39:08:f6:7b:d8:e6:3d:df:
8e:a7:eb:05:ae:fc:06:fd:85:cc:63:92:32:ea:28:
42:7d:c2:cd:75:76:ea:1f:a7:a2:b9:92:1c:58:b3:
49:4b:aa:d5:31:4d:1b:31:c2:c1:85:b1:7e:1b:6a:
50:3b:88:4e:c4:9f:44:4b:19:f3:02:df:28:9e:88:
9d:8c:62:ec:fd:18:58:cb:3a:81:54:53:3d:ea:17:
33:c7:f7:65:e1:26:2f:a0:7b:c2:e8:30:7f:95:dd:
e8:78:10:d1:bd:7d:3a:02:17:ee:89:14:c0:d8:59:
c0:93:88:0f:72:0a:0d:49:ee:19:0a:96:fa:0c:b2:
48:c0:6c:2e:99:77:ab:df:24:a3:18:8c:22:ec:8f:
cf:86:d8:6f:08:7f:a4:b1:e4:96:7d:32:d6:69:44:
59:b7:54:c0:db:39:bd:4b:4b:9a:53:d5:ac:6f:54:
77:2a:5c:9b:c4:a1:bf:92:49:61:f4:ac:9a:40:33:
3d:50:08:1c:c7:dc:5b:7d:ed:13:b1:ef:64:b1:68:
9e:85:33:6c:33:20:f8:dd:3b:ca:ef:8b:28:bf:41:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:58:99:89:9C:F9:30:4C:F6:94:D6:92:BC:05:F7:F8:A1:F0:21:E3
X509v3 Authority Key Identifier:
keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc23:200::/40
Signature Algorithm: sha256WithRSAEncryption
59:4d:51:16:96:fa:88:c4:b1:50:b8:e9:a1:e3:00:65:b6:9e:
12:4a:ad:af:e9:51:71:c9:a2:85:7b:e9:5f:ee:8f:63:10:69:
89:c2:f9:89:4e:75:77:e9:fa:7d:cb:6b:22:44:4f:89:36:de:
80:7b:2d:aa:45:b9:01:0e:80:4b:d8:a0:7d:8f:05:9c:7d:9f:
96:32:88:4d:45:21:e1:23:b6:c8:49:b1:d2:63:50:57:14:c0:
bb:83:9f:ef:a7:6c:3e:91:ea:72:6e:b0:12:3f:95:84:15:10:
b7:29:43:73:bb:84:e6:76:b4:8b:89:ac:19:26:ee:eb:8e:c1:
31:a8:71:45:7f:07:9d:6d:fd:c8:d2:5b:96:77:79:69:8b:f3:
02:67:78:e1:71:e0:66:e5:57:ba:50:83:b0:64:dd:ac:3c:1c:
03:d3:1a:85:b2:e7:c3:07:95:e8:60:90:7a:da:fd:0f:ba:37:
13:1e:b0:7e:c4:e2:d3:48:93:5a:94:79:db:8c:30:1d:11:ad:
04:88:97:c6:97:d0:12:16:55:1e:04:16:bf:fb:d1:6f:a6:50:
f5:ee:67:38:2c:58:f1:17:f8:50:3c:85:59:b9:6e:35:9e:8d:
32:c7:6d:a7:36:0f:0c:74:7d:0a:e3:53:12:60:d4:37:6a:bc:
5a:24:62:e2
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUalcqnGwQoUp4iIyqqr9htO55m3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA2NDY1REUxQUIzOUI5MDlBMzZCQzVCNjdGQTM3OTc5
MDI4NkM5MTAeFw0yNDAzMTEwNDA4NDhaFw0yNTAzMTAwNDEzNDhaMDMxMTAvBgNV
BAMTKEFBNTg5OTg5OUNGOTMwNENGNjk0RDY5MkJDMDVGN0Y4QTFGMDIxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ODpD/w8I11NtnmMA158UINkW
QGi6eiXL287LdSecEisGNa05CPZ72OY9346n6wWu/Ab9hcxjkjLqKEJ9ws11duof
p6K5khxYs0lLqtUxTRsxwsGFsX4balA7iE7En0RLGfMC3yieiJ2MYuz9GFjLOoFU
Uz3qFzPH92XhJi+ge8LoMH+V3eh4ENG9fToCF+6JFMDYWcCTiA9yCg1J7hkKlvoM
skjAbC6Zd6vfJKMYjCLsj8+G2G8If6Sx5JZ9MtZpRFm3VMDbOb1LS5pT1axvVHcq
XJvEob+SSWH0rJpAMz1QCBzH3Ft97ROx72SxaJ6FM2wzIPjdO8rviyi/QUi9AgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUqliZiZz5MEz2lNaSvAX3+KHwIeMwHwYDVR0j
BBgwFoAU4GRl3hqzm5CaNrxbZ/o3l5AobJEwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzIvRTA2NDY1
REUxQUIzOUI5MDlBMzZCQzVCNjdGQTM3OTc5MDI4NkM5MS5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC83
L0UwNjQ2NURFMUFCMzlCOTA5QTM2QkM1QjY3RkEzNzk3OTAyODZDOTEuY2VyMHsG
CCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMi8zMjM2MzAzMjNhNjY2MzMyMzMzYTMyMzAzMDNhM2EyZjM0MzAyZDM0
MzAyMDNkM2UyMDMyMzAzNTM0MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYC/CMCMA0GCSqGSIb3
DQEBCwUAA4IBAQBZTVEWlvqIxLFQuOmh4wBltp4SSq2v6VFxyaKFe+lf7o9jEGmJ
wvmJTnV36fp9y2siRE+JNt6Aey2qRbkBDoBL2KB9jwWcfZ+WMohNRSHhI7bISbHS
Y1BXFMC7g5/vp2w+kepybrASP5WEFRC3KUNzu4TmdrSLiawZJu7rjsExqHFFfwed
bf3I0luWd3lpi/MCZ3jhceBm5Ve6UIOwZN2sPBwD0xqFsufDB5XoYJB62v0PujcT
HrB+xOLTSJNalHnbjDAdEa0EiJfGl9ASFlUeBBa/+9FvplD17mc4LFjxF/hQPIVZ
uW41no0yx22nNg8MdH0K41MSYNQ3arxaJGLi
-----END CERTIFICATE-----
Generated at Thu Jun 20 06:05:19 2024 by rpki-client on console-fra.rpki-client.org