Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa
File: 326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa (raw, json)
Hash identifier: JoOaNzjZj+e8meSBgJZ8rKVK4wITbGgwU7ifJn7qaaM=
Subject key identifier: BF:30:AA:1F:48:13:E9:06:7D:2F:10:55:12:7A:80:3A:B0:F4:80:D7
Certificate issuer: /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial: 12CE664B9DE263B486894C9D7727DE861B61B019
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access: rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access: rsync://rpki.co/repo/AS945/5/326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa
Signing time: Mon 11 Mar 2024 04:13:53 +0000
ROA not before: Mon 11 Mar 2024 04:08:53 +0000
ROA not after: Mon 10 Mar 2025 04:13:53 +0000
asID: 199186
IP address blocks: 2a13:c007:8500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 22:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ce:66:4b:9d:e2:63:b4:86:89:4c:9d:77:27:de:86:1b:61:b0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Validity
Not Before: Mar 11 04:08:53 2024 GMT
Not After : Mar 10 04:13:53 2025 GMT
Subject: CN=BF30AA1F4813E9067D2F1055127A803AB0F480D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:a5:88:1d:de:0b:8e:7a:93:80:6f:74:2e:
68:b5:7e:23:c4:54:26:27:dc:91:76:aa:50:ba:0d:
49:15:be:f0:9f:aa:a7:67:09:d9:b8:d1:55:e7:6f:
84:85:ea:16:b6:c1:81:79:82:be:f9:5e:44:1a:02:
ec:a3:b7:d5:cc:bc:e0:e9:e3:6c:f2:51:80:d4:b6:
36:8f:bb:53:c1:3e:7b:fc:3f:c4:c5:2b:b3:4c:77:
77:03:7d:aa:45:bb:81:f8:59:74:02:0d:20:ec:1e:
f1:20:f4:bc:ff:10:db:26:07:8f:17:92:83:60:db:
29:c0:38:5f:ba:73:77:9b:bb:65:fc:aa:9d:c8:7c:
87:33:43:ba:20:0f:bc:77:43:55:94:e0:f3:b1:a8:
24:4d:62:ef:4a:1b:bd:5a:04:1a:15:d4:b6:ae:19:
2e:fb:f7:b2:90:2b:0c:55:37:93:2c:85:d5:15:59:
d1:75:69:fb:0d:ba:60:c8:67:4f:6d:cc:98:85:72:
55:34:8f:f3:85:9b:d1:60:16:41:49:46:1d:22:c0:
bb:9f:93:ed:c4:5b:50:bc:62:ca:97:97:9b:92:3c:
f0:cd:a8:2b:20:9a:9d:6b:5c:35:7b:6a:e2:5c:7c:
78:6a:57:02:06:36:85:80:67:0a:75:12:e4:97:9c:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:30:AA:1F:48:13:E9:06:7D:2F:10:55:12:7A:80:3A:B0:F4:80:D7
X509v3 Authority Key Identifier:
keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c007:8500::/40
Signature Algorithm: sha256WithRSAEncryption
34:a4:5b:45:36:ca:9d:87:27:2a:f0:80:58:f8:48:61:97:92:
03:03:41:af:53:ea:d5:69:f1:a0:1a:60:ef:cb:91:3a:b5:ea:
fb:c0:14:15:6d:65:8e:0d:23:f8:92:d7:a8:2e:23:90:ef:79:
13:ff:c4:b7:36:f7:97:39:ff:72:19:c4:7e:28:fd:03:e9:6b:
65:2b:b1:e9:24:f9:a3:6d:a4:34:1a:d0:60:39:2e:2f:21:11:
b7:71:13:5f:45:b0:93:05:54:c8:7c:82:c9:f6:53:73:ec:a4:
89:0a:0b:49:23:31:44:c2:3e:e5:eb:5c:09:b8:73:21:51:bf:
05:1c:c8:3a:b1:34:9c:85:0a:df:ac:36:d1:d5:26:7c:ab:58:
3f:46:5c:f9:2a:d9:49:16:93:f4:a2:d9:88:8d:23:13:4a:68:
fd:f2:a7:aa:70:e6:b2:77:80:e4:44:ed:0e:92:47:93:49:ed:
01:92:ce:c7:a8:df:3e:6a:2d:06:8c:ed:43:e3:a6:aa:eb:1f:
1d:c5:c8:e2:42:c4:f5:59:8d:5a:25:c8:12:76:b5:6d:e0:f3:
0b:f0:de:97:93:3a:d6:b0:52:ba:84:3b:ec:73:18:a7:b7:76:
5b:78:b0:8e:6d:ee:4d:ab:59:2a:90:eb:86:0a:78:e9:3d:53:
aa:57:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:04:35 2024 by rpki-client on console-fra.rpki-client.org