Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383630303a3a2f34302d3438203d3e20323039303235.roa
File: 326131333a633030373a383630303a3a2f34302d3438203d3e20323039303235.roa (raw, json)
Hash identifier: eg78u0RxfITGDXXTAWC5NoCjIwIAt0/QY+NFdWApTHU=
Subject key identifier: 66:E9:FA:EE:E6:9B:E3:9B:74:41:30:56:DB:5C:62:63:2B:FF:AB:75
Certificate issuer: /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial: 0672AF8769454091B07B9572D54DD1F6C937AC75
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access: rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access: rsync://rpki.co/repo/AS945/5/326131333a633030373a383630303a3a2f34302d3438203d3e20323039303235.roa
Signing time: Sun 24 Mar 2024 09:43:04 +0000
ROA not before: Sun 24 Mar 2024 09:38:04 +0000
ROA not after: Sun 23 Mar 2025 09:43:04 +0000
asID: 209025
IP address blocks: 2a13:c007:8600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 22:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:72:af:87:69:45:40:91:b0:7b:95:72:d5:4d:d1:f6:c9:37:ac:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Validity
Not Before: Mar 24 09:38:04 2024 GMT
Not After : Mar 23 09:43:04 2025 GMT
Subject: CN=66E9FAEEE69BE39B74413056DB5C62632BFFAB75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:af:7e:21:c7:05:19:2f:76:36:7c:db:65:
05:f4:8d:01:89:65:84:74:e9:4c:cf:22:db:65:5d:
f2:65:3f:3b:3f:12:2b:1b:75:a5:8c:76:dc:cc:1e:
c7:e3:44:c4:1d:8f:60:bf:d0:36:c4:69:11:f4:f6:
2c:24:63:37:bd:7b:a7:f9:f0:11:ac:b8:d4:ed:2e:
6e:6e:ef:fd:41:68:35:7a:c8:db:d6:c6:94:36:3b:
24:b1:96:da:5d:b1:7c:5b:44:6f:e7:3f:da:9d:5d:
65:f7:68:d4:06:6f:fb:4e:52:c8:80:c4:ec:e1:fc:
3a:d2:4b:d3:49:f7:5d:79:d5:6f:2c:70:66:44:ec:
b9:b1:07:26:c4:98:77:a7:03:b8:a1:c0:32:b2:89:
17:cf:43:ce:28:81:9f:1c:cd:37:77:84:63:85:70:
cb:65:02:0f:89:02:5f:c3:6b:3c:ae:22:1a:9e:6f:
92:cb:3a:48:a1:90:52:94:b0:c0:7b:0f:43:fd:bd:
65:21:69:6e:65:9d:98:32:67:f7:71:ae:1e:6c:09:
e4:c0:7f:27:77:b9:6e:1f:24:c5:94:fa:5b:1f:ec:
76:2c:44:36:f3:28:15:cc:d5:eb:f6:7d:f5:9a:eb:
1a:6e:58:d7:f0:df:af:ab:a7:0b:b2:1b:8d:88:d6:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E9:FA:EE:E6:9B:E3:9B:74:41:30:56:DB:5C:62:63:2B:FF:AB:75
X509v3 Authority Key Identifier:
keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383630303a3a2f34302d3438203d3e20323039303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c007:8600::/40
Signature Algorithm: sha256WithRSAEncryption
9c:ce:8f:d2:59:6a:67:c0:a3:21:b3:73:c3:ba:5e:a9:1b:9c:
43:24:60:79:1a:1e:5b:05:7b:74:90:7e:7a:45:a0:5a:f1:48:
2c:b9:6e:b2:9f:aa:3a:ea:95:ac:0c:21:14:26:f3:54:b5:74:
bd:ba:fd:47:ac:a5:2b:58:6f:37:81:7e:06:72:df:f6:11:d0:
d3:f4:1c:fb:09:ea:ae:db:97:e6:34:93:c3:39:c5:f8:52:7c:
f5:0c:54:20:c7:46:4d:2e:66:85:46:c8:f7:55:78:30:e9:46:
93:6a:5f:c9:f7:91:be:dc:61:85:b2:1c:7c:53:0d:96:43:85:
db:d0:61:e6:33:f4:3f:a0:39:9e:1e:12:86:a6:0c:62:b2:78:
f4:a0:6a:96:3c:21:d6:de:c5:69:bb:3a:df:57:06:9a:12:c4:
99:73:a8:2c:f7:b8:ea:d6:c9:6d:6b:5d:33:ff:58:4b:62:b7:
84:7d:68:31:7c:e3:de:e4:44:06:2d:62:15:10:49:32:2c:37:
43:22:28:6c:b5:c7:04:b5:9e:f0:f6:d2:80:4e:bd:5f:0b:b9:
02:5a:94:f8:43:1c:6d:08:c4:28:47:8c:71:7d:84:26:3b:31:
7f:c7:4b:14:ae:97:99:9e:a4:56:0e:88:78:f7:35:dc:66:cc:
ea:98:5b:6d
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIUBnKvh2lFQJGwe5Vy1U3R9sk3rHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ0QTIyNEE5NTY1RjY3RTQ5MTRFNkY4QzJCM0MzNDMw
M0M5Qzg3NTAeFw0yNDAzMjQwOTM4MDRaFw0yNTAzMjMwOTQzMDRaMDMxMTAvBgNV
BAMTKDY2RTlGQUVFRTY5QkUzOUI3NDQxMzA1NkRCNUM2MjYzMkJGRkFCNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIW69+IccFGS92NnzbZQX0jQGJ
ZYR06UzPIttlXfJlPzs/EisbdaWMdtzMHsfjRMQdj2C/0DbEaRH09iwkYze9e6f5
8BGsuNTtLm5u7/1BaDV6yNvWxpQ2OySxltpdsXxbRG/nP9qdXWX3aNQGb/tOUsiA
xOzh/DrSS9NJ91151W8scGZE7LmxBybEmHenA7ihwDKyiRfPQ84ogZ8czTd3hGOF
cMtlAg+JAl/DazyuIhqeb5LLOkihkFKUsMB7D0P9vWUhaW5lnZgyZ/dxrh5sCeTA
fyd3uW4fJMWU+lsf7HYsRDbzKBXM1ev2ffWa6xpuWNfw36+rpwuyG42I1ruVAgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQUZun67uab45t0QTBW21xiYyv/q3UwHwYDVR0j
BBgwFoAUrUoiSpVl9n5JFOb4wrPDQwPJyHUwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzUvQUQ0QTIy
NEE5NTY1RjY3RTQ5MTRFNkY4QzJCM0MzNDMwM0M5Qzg3NS5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC8x
L0FENEEyMjRBOTU2NUY2N0U0OTE0RTZGOEMyQjNDMzQzMDNDOUM4NzUuY2VyMH0G
CCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvNS8zMjYxMzEzMzNhNjMzMDMwMzczYTM4MzYzMDMwM2EzYTJmMzQzMDJk
MzQzODIwM2QzZTIwMzIzMDM5MzAzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhPAB4YwDQYJKoZI
hvcNAQELBQADggEBAJzOj9JZamfAoyGzc8O6XqkbnEMkYHkaHlsFe3SQfnpFoFrx
SCy5brKfqjrqlawMIRQm81S1dL26/UespStYbzeBfgZy3/YR0NP0HPsJ6q7bl+Y0
k8M5xfhSfPUMVCDHRk0uZoVGyPdVeDDpRpNqX8n3kb7cYYWyHHxTDZZDhdvQYeYz
9D+gOZ4eEoamDGKyePSgapY8IdbexWm7Ot9XBpoSxJlzqCz3uOrWyW1rXTP/WEti
t4R9aDF8497kRAYtYhUQSTIsN0MiKGy1xwS1nvD20oBOvV8LuQJalPhDHG0IxChH
jHF9hCY7MX/HSxSul5mepFYOiHj3NdxmzOqYW20=
-----END CERTIFICATE-----
Generated at Wed May 8 02:04:35 2024 by rpki-client on console-fra.rpki-client.org