Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a393030303a3a2f34302d3438203d3e203331383938.roa
File: 326131333a633030373a393030303a3a2f34302d3438203d3e203331383938.roa (raw, json)
Hash identifier: G3VsoLkptJRLCa3YHjd1Drbb1V4P4uXBVsOBZYWQ8qg=
Subject key identifier: CB:2D:9A:21:53:9E:43:DC:28:F1:17:C2:9A:23:25:B5:80:70:6C:A2
Certificate issuer: /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial: 7BEFC0202C8ACBB3CC830679345479B69439AD8E
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access: rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access: rsync://rpki.co/repo/AS945/5/326131333a633030373a393030303a3a2f34302d3438203d3e203331383938.roa
Signing time: Thu 06 Jun 2024 03:22:37 +0000
ROA not before: Thu 06 Jun 2024 03:17:37 +0000
ROA not after: Thu 05 Jun 2025 03:22:37 +0000
asID: 31898
IP address blocks: 2a13:c007:9000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ef:c0:20:2c:8a:cb:b3:cc:83:06:79:34:54:79:b6:94:39:ad:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Validity
Not Before: Jun 6 03:17:37 2024 GMT
Not After : Jun 5 03:22:37 2025 GMT
Subject: CN=CB2D9A21539E43DC28F117C29A2325B580706CA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:f8:86:4c:2b:b1:78:1d:c1:cf:0e:a9:b1:
56:4d:1e:e6:a4:3b:9d:ea:89:5a:4d:d0:f5:99:d2:
89:79:70:0e:81:1a:1d:f4:0d:38:96:4f:a1:09:59:
7b:3c:f8:fd:f8:91:89:23:92:21:c3:fa:9a:2b:64:
1b:8e:a3:7c:12:c6:17:70:9c:69:13:99:c4:ad:dc:
ce:42:ea:b8:dd:f4:99:fe:54:df:e5:8c:65:fb:f5:
7a:f2:1f:fd:83:39:70:11:b5:5d:0b:b7:86:a9:74:
d4:4c:9e:95:19:56:8b:59:c5:76:ba:02:dc:a8:a0:
28:f4:b7:97:b2:d9:4d:36:49:84:6c:02:83:a7:26:
00:1c:f5:6f:fb:a2:9c:b8:7f:e2:53:d1:44:de:34:
69:6c:d4:7a:a0:6e:86:0e:98:a6:bd:b5:42:5d:5a:
68:54:6f:5e:6f:39:94:ce:94:67:58:dc:e8:e4:6b:
d1:3e:ff:4f:ee:bc:86:bb:61:0d:2b:e5:4a:84:ab:
c8:27:0f:f0:92:c5:48:b4:ea:fd:98:19:c5:bd:8b:
5c:59:a9:06:9f:24:25:b7:17:ce:d8:aa:f3:36:32:
de:d0:3e:84:35:e4:3d:8f:10:d2:d6:ac:13:87:99:
8e:d3:b9:16:13:ba:87:e6:54:c0:2c:c0:bd:91:32:
91:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2D:9A:21:53:9E:43:DC:28:F1:17:C2:9A:23:25:B5:80:70:6C:A2
X509v3 Authority Key Identifier:
keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a393030303a3a2f34302d3438203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c007:9000::/40
Signature Algorithm: sha256WithRSAEncryption
99:c5:2c:65:6c:aa:61:8a:8a:d0:bb:88:31:77:39:b2:cf:60:
72:1c:a6:bc:59:d1:2d:2a:88:17:eb:b4:f1:58:ca:79:fc:be:
53:8d:5b:af:63:1e:78:c6:1c:9b:36:a1:6e:6a:f3:3a:53:d7:
3d:43:d5:5c:f5:a1:38:c3:b3:ec:59:23:bf:ae:01:d8:54:6c:
61:a8:e1:6c:aa:bc:56:2d:e0:82:a2:2b:69:0c:84:39:89:8c:
4f:3b:fa:b2:0c:06:1a:75:69:bc:46:86:e4:73:f0:81:b2:af:
a6:3d:a8:17:3f:a3:3f:21:c5:13:53:4e:57:69:c9:82:2e:db:
31:c4:b3:4b:dc:bf:77:ca:60:4f:4f:e0:7a:10:fe:c2:5d:82:
b8:0d:b6:a7:8a:61:ac:88:af:47:42:47:c1:22:30:3c:ad:0f:
39:89:0d:4f:55:a5:43:7d:40:65:f7:de:39:41:00:bd:86:4a:
24:23:a1:0a:30:67:67:09:23:81:f0:4c:db:25:25:31:90:38:
40:1f:85:54:23:14:46:ad:80:e0:85:38:8c:2f:2b:26:0c:9e:
74:a4:d5:1d:c1:a3:4c:bb:51:4d:c9:91:24:71:74:e0:4c:04:
93:e3:21:4b:7a:05:ea:c1:00:ce:0e:f2:01:6d:a1:ad:9f:b3:
a6:03:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:43 2025 by rpki-client