Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34302d3430203d3e20323030313630.roa
File:                     326131323a646434373a353230303a3a2f34302d3430203d3e20323030313630.roa (raw, json)
Hash identifier:          2zC2z3oNHORoWwUHXn6+s1eedt8cjSwZxGR2fvh5ELE=
Subject key identifier:   21:5F:7A:50:89:91:64:DD:AE:41:EE:FF:1A:DF:88:BC:55:F4:8A:F1
Certificate issuer:       /CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
Certificate serial:       52BD3A4B99986F57C38F7EEB2246870B1435EEAA
Authority key identifier: 51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
Authority info access:    rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
Subject info access:      rsync://rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34302d3430203d3e20323030313630.roa
Signing time:             Tue 05 Sep 2023 06:09:13 +0000
ROA not before:           Tue 05 Sep 2023 06:04:13 +0000
ROA not after:            Tue 03 Sep 2024 06:09:13 +0000
asID:                     200160
IP address blocks:        2a12:dd47:5200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl
                          rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.mft
                          rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:bd:3a:4b:99:98:6f:57:c3:8f:7e:eb:22:46:87:0b:14:35:ee:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
        Validity
            Not Before: Sep  5 06:04:13 2023 GMT
            Not After : Sep  3 06:09:13 2024 GMT
        Subject: CN=215F7A50899164DDAE41EEFF1ADF88BC55F48AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:57:e5:52:e4:2b:a5:29:24:af:15:ae:a4:
                    15:dd:06:1b:70:91:35:e7:f2:ce:0b:cc:47:ed:75:
                    1e:bd:f6:ef:2d:1c:5d:e6:5b:a5:61:e5:1e:41:77:
                    0d:ff:d9:3e:20:0e:62:38:1b:0b:31:2e:13:70:fa:
                    22:e1:4f:11:0a:a8:96:de:9f:10:36:9a:a5:3c:60:
                    e4:9b:de:3f:47:7c:8d:6f:0d:0c:82:a5:73:39:e4:
                    4e:9a:9c:e9:ef:3d:1d:fd:39:9d:64:98:1f:97:36:
                    f4:07:78:e9:06:b8:7e:89:c5:81:06:aa:e8:5d:5a:
                    a1:c6:fb:39:4a:59:61:ba:aa:7a:46:7c:f6:f3:8c:
                    78:bc:91:04:db:f3:37:17:c6:89:33:e8:47:58:ff:
                    6e:77:c4:96:11:a7:2e:04:1d:10:27:4f:44:38:fd:
                    20:ae:fe:3e:8c:ab:28:48:af:32:50:79:cc:83:e4:
                    2e:40:36:fb:79:8f:67:55:48:bc:62:33:7a:72:0e:
                    ee:c9:71:0a:4a:a2:c9:c1:32:fd:51:75:c8:31:58:
                    70:a7:2d:31:94:7e:e9:5f:0d:7c:92:9a:e3:02:7f:
                    a5:f7:ba:65:7c:9f:f0:b5:79:e1:a9:c6:54:76:93:
                    a3:66:0d:f8:d6:9d:de:7a:d2:4e:76:09:bf:c6:a5:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5F:7A:50:89:91:64:DD:AE:41:EE:FF:1A:DF:88:BC:55:F4:8A:F1
            X509v3 Authority Key Identifier:
                keyid:51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34302d3430203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:18:b2:53:30:d7:31:4f:cc:02:91:af:b7:c6:da:f0:16:85:
         2a:f6:5a:53:d2:ef:c5:57:ae:1b:3b:f0:34:ee:da:ba:0c:4c:
         ad:57:3c:3e:1f:aa:23:8d:e8:ad:aa:3b:78:9b:b7:67:00:eb:
         f9:73:8c:f7:d4:b2:97:a7:07:a9:52:c6:55:f2:2e:37:0f:18:
         72:b6:92:16:d1:00:25:a9:53:f6:44:6e:a2:19:87:b6:47:38:
         43:f5:7e:ca:f2:6d:2c:3e:0a:0e:f8:15:06:fe:83:0b:2b:47:
         f4:6c:c8:8d:86:04:fc:0b:5a:ce:db:f3:6d:17:1d:c3:20:88:
         fa:54:27:60:6b:87:3c:7d:05:b2:17:63:71:dc:4c:68:89:d4:
         63:e7:4a:bf:25:9f:e9:50:cd:f3:09:00:67:81:49:2e:ab:cc:
         3c:50:42:23:22:9b:c9:6d:f9:81:07:2a:c9:c2:6a:ad:e2:08:
         c6:3c:6f:8d:02:ae:41:fc:1d:b8:a0:b7:a1:2f:6b:1f:32:92:
         d2:91:ab:94:a8:69:85:a3:73:20:c0:dc:5a:d9:4c:73:e7:2e:
         50:72:84:fb:c8:96:d4:00:52:c2:48:fb:70:23:95:8e:68:a2:
         90:d2:fa:76:df:a5:ff:b5:f5:4c:da:16:3c:5c:51:6d:f6:86:
         b1:fe:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:13:50 2024 by rpki-client on console-fra.rpki-client.org