Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/1/326131323a646434373a666130303a3a2f34302d3438203d3e2030.roa
File:                     326131323a646434373a666130303a3a2f34302d3438203d3e2030.roa (raw, json)
Hash identifier:          w1sEI2mzfCnq2hSljdnOH6axbmuGmAt5+vkqatNzpUw=
Subject key identifier:   FF:C3:F4:38:BB:10:42:00:99:54:C1:68:C2:F2:4A:8A:35:BB:32:F1
Certificate issuer:       /CN=0B9793DB5D4383D5EB9329D4AFB5656B34D22D92
Certificate serial:       0E5627AE772E6A0627B7200EBCDEC5AE570E8FCE
Authority key identifier: 0B:97:93:DB:5D:43:83:D5:EB:93:29:D4:AF:B5:65:6B:34:D2:2D:92
Authority info access:    rsync://rpki.co/repo/AS945/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.cer
Subject info access:      rsync://rpki.co/repo/Cube/1/326131323a646434373a666130303a3a2f34302d3438203d3e2030.roa
Signing time:             Thu 10 Aug 2023 19:27:20 +0000
ROA not before:           Thu 10 Aug 2023 19:22:20 +0000
ROA not after:            Thu 08 Aug 2024 19:27:20 +0000
asID:                     0
IP address blocks:        2a12:dd47:fa00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/Cube/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.crl
                          rsync://rpki.co/repo/Cube/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.mft
                          rsync://rpki.co/repo/AS945/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:56:27:ae:77:2e:6a:06:27:b7:20:0e:bc:de:c5:ae:57:0e:8f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B9793DB5D4383D5EB9329D4AFB5656B34D22D92
        Validity
            Not Before: Aug 10 19:22:20 2023 GMT
            Not After : Aug  8 19:27:20 2024 GMT
        Subject: CN=FFC3F438BB1042009954C168C2F24A8A35BB32F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:43:6c:c6:77:99:58:ee:c8:53:a2:4a:50:
                    ac:0d:ac:41:cb:7e:84:b0:13:9c:0e:54:e3:39:89:
                    5f:0b:32:8c:7f:47:a3:6f:31:23:53:22:3a:f5:47:
                    90:83:0a:a3:8f:df:d7:b4:49:32:be:b3:53:e3:34:
                    f6:fe:8f:7e:ac:07:8e:cf:c1:66:08:6e:43:9e:33:
                    06:79:23:08:0e:20:03:a9:2c:2a:9f:35:5f:ed:f8:
                    96:8b:1d:1a:d1:71:a6:da:9f:12:ef:d0:76:2a:5b:
                    7d:6d:e3:b8:b4:d3:76:a9:58:00:50:9f:d5:49:b7:
                    10:d4:9c:70:9f:8b:f7:80:e7:cf:3a:2b:34:fe:31:
                    a8:02:a7:2d:ba:33:c6:b8:43:37:dc:4e:99:2b:3f:
                    c1:11:50:70:0a:aa:35:2f:88:9b:aa:34:41:57:cf:
                    4f:8f:cb:1a:91:e6:a9:35:9f:e5:b2:b6:11:f9:ed:
                    9c:83:6c:ae:25:9d:ad:fc:4b:e4:51:20:79:ea:e1:
                    b2:6d:cd:82:b7:5f:c8:86:9c:2e:b4:f2:eb:2e:89:
                    02:61:27:08:65:d7:60:8c:11:d4:ba:b0:5b:d7:20:
                    77:35:8f:59:3f:c5:02:99:9f:d9:3c:b5:0f:78:8b:
                    43:df:72:47:d8:9b:81:43:e2:b1:b4:d0:1b:9a:ce:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C3:F4:38:BB:10:42:00:99:54:C1:68:C2:F2:4A:8A:35:BB:32:F1
            X509v3 Authority Key Identifier:
                keyid:0B:97:93:DB:5D:43:83:D5:EB:93:29:D4:AF:B5:65:6B:34:D2:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/1/326131323a646434373a666130303a3a2f34302d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:e9:a0:2c:75:d0:6e:d2:cc:51:18:4b:95:c6:7c:84:28:5b:
         e1:6f:4b:ee:4b:66:16:de:87:f4:9d:1f:4f:f3:27:e6:82:8f:
         60:3f:50:d2:e7:59:e7:01:87:c6:47:d2:28:7c:8c:73:9f:b7:
         04:d5:28:ae:62:3b:68:9a:c6:dc:52:29:8a:47:1d:5e:bf:6b:
         7f:a9:1a:22:68:45:e4:87:ca:03:85:ea:f4:b6:bc:7c:c0:a0:
         11:e5:0c:ce:94:8a:77:dd:86:2d:d6:8b:bc:2d:e0:e3:e6:3c:
         2d:f5:fb:fd:36:79:47:2d:75:f0:99:d8:30:96:e6:7b:b5:48:
         cc:42:74:57:8c:d8:01:90:a1:cc:12:d7:d4:73:32:14:52:c2:
         8d:27:37:6f:2b:19:1f:85:d3:c1:d4:d5:9d:ed:d2:ab:da:39:
         95:f5:2a:f3:f6:09:7d:a7:b9:48:2f:be:79:9f:a7:10:a9:1b:
         1f:70:54:79:02:93:89:97:f9:25:bf:48:6a:f7:9e:5e:60:f2:
         bf:ea:42:27:3e:55:a4:23:da:ad:7f:dc:10:0c:3d:a5:d2:9b:
         fa:d3:44:c2:01:d8:5e:ad:5a:30:6e:d1:01:5c:0b:d7:eb:bd:
         f0:0b:29:30:69:68:68:ff:76:a6:0b:d4:9a:5e:d7:c3:4b:c1:
         c3:2c:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:08 2024 by rpki-client on console-fra.rpki-client.org