Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/9/32332e3135302e31312e302f32342d3234203d3e20343031313131.roa
File: 32332e3135302e31312e302f32342d3234203d3e20343031313131.roa (raw, json)
Hash identifier: x5Sa8vJDaKQWBBeVPqPw4kPktYF4MhHL1/eBE1fNU2g=
Subject key identifier: CE:AC:1E:EA:04:B8:EE:20:93:EE:4C:9E:BE:05:39:FB:CE:B9:FE:E3
Certificate issuer: /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial: 79516B0A5AAD8880B010FD1DCAE6456BAB2EF0A0
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access: rsync://dev.tw/rpki/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access: rsync://rpki.co/repo/AS945/9/32332e3135302e31312e302f32342d3234203d3e20343031313131.roa
Signing time: Sat 01 Jun 2024 03:38:58 +0000
ROA not before: Sat 01 Jun 2024 03:33:58 +0000
ROA not after: Sat 31 May 2025 03:38:58 +0000
asID: 401111
IP address blocks: 23.150.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:51:6b:0a:5a:ad:88:80:b0:10:fd:1d:ca:e6:45:6b:ab:2e:f0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Validity
Not Before: Jun 1 03:33:58 2024 GMT
Not After : May 31 03:38:58 2025 GMT
Subject: CN=CEAC1EEA04B8EE2093EE4C9EBE0539FBCEB9FEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:74:4e:33:fd:b7:37:b6:fe:12:85:a4:f4:
5c:da:9e:ca:65:4f:43:42:34:10:be:fa:39:df:6a:
3a:d0:ea:84:7d:14:2b:38:4a:f6:a3:d1:d9:67:5c:
e6:01:0a:a4:34:cf:a6:a7:97:13:1a:66:a6:6d:ba:
d5:88:8d:7c:1a:6b:b0:81:79:a0:f8:a6:0e:a0:92:
c1:79:8f:83:4d:2d:77:d2:87:a0:1d:b1:a2:0e:cc:
83:a3:35:9e:9d:a1:0c:64:c3:fb:4c:2b:9f:de:84:
01:ba:d7:38:c5:d1:69:bd:68:2e:f9:4f:3f:c8:57:
80:ff:be:80:5c:c2:44:11:67:69:58:4f:76:a9:1d:
81:21:0d:04:40:9b:fe:16:70:0c:75:a9:e9:1c:95:
a2:93:f2:0c:b0:e3:7a:32:e9:cf:25:95:a6:f4:dd:
0b:f3:aa:07:62:d2:6e:6f:58:4f:28:3b:29:f8:a2:
cf:0f:c0:b3:95:87:2a:22:51:5f:d5:4b:70:b0:fb:
b9:04:d1:bb:d1:0b:43:d1:22:65:7f:d7:2f:0f:a6:
a3:07:8b:19:22:ee:c4:b7:b4:cf:f2:72:64:2d:43:
30:14:f0:a7:75:2a:1c:ee:a7:64:71:28:d7:a0:b8:
85:e3:48:e9:c5:f2:23:b5:e8:07:cd:9a:f1:e9:d6:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AC:1E:EA:04:B8:EE:20:93:EE:4C:9E:BE:05:39:FB:CE:B9:FE:E3
X509v3 Authority Key Identifier:
keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/9/32332e3135302e31312e302f32342d3234203d3e20343031313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.150.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:4c:d7:11:b0:f1:6c:c3:4c:77:25:ff:e7:06:0e:c3:ef:55:
69:fd:20:90:0b:93:f1:7a:50:90:a4:67:5b:69:53:b3:47:f2:
76:6a:bf:50:d4:ff:97:91:bd:13:2a:ba:2b:61:bc:d6:b0:18:
fc:59:cf:ab:a1:87:6d:e0:f3:49:da:42:ba:1a:90:0a:88:44:
72:30:b3:83:c3:63:0d:60:64:9a:93:bc:f3:4c:95:8d:9d:48:
10:f8:ec:10:59:33:2e:a7:b4:62:5a:83:b4:73:8f:76:f2:72:
23:c4:18:bc:2a:e9:2a:e7:48:94:68:6b:6c:21:b7:46:9f:10:
5d:11:a2:0d:90:8a:6e:d7:bc:7b:84:c5:06:7d:e1:43:62:18:
98:66:ca:c1:a5:4c:79:6d:d2:66:df:6f:19:e3:69:c7:b2:3b:
49:86:79:e9:fc:bb:0a:8d:67:80:77:7e:d0:44:ac:ed:e0:32:
e6:ee:4c:a5:ab:58:40:0b:d4:b9:0e:1b:fa:3c:5a:12:01:87:
c5:08:99:75:fb:04:52:53:3a:b8:08:ee:b2:30:68:63:40:c2:
e1:4a:af:47:f9:8e:31:e5:63:da:9b:ee:9a:f9:a7:5c:e1:9c:
f4:77:bd:e0:d4:a2:c7:47:b6:0c:6b:9c:d4:39:8b:19:75:ea:
93:64:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 06:05:19 2024 by rpki-client on console-fra.rpki-client.org