Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/August/12/3130342e33372e34322e302f32332d3234203d3e20393435.roa
File: 3130342e33372e34322e302f32332d3234203d3e20393435.roa (raw, json)
Hash identifier: r1IapZi2dXnxzVZJN/Qhgc9lfi7VmINJK2GCQULgTBI=
Subject key identifier: 1D:2B:12:F0:DE:D3:1A:3B:BE:B7:9F:56:C0:74:FB:0F:E7:9E:9A:65
Certificate issuer: /CN=64EF7C64F4E72CC0730DD0DA80D3C367CB785E67
Certificate serial: 6874030A49D2E28349C104F3407CDAACE567D801
Authority key identifier: 64:EF:7C:64:F4:E7:2C:C0:73:0D:D0:DA:80:D3:C3:67:CB:78:5E:67
Authority info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.cer
Subject info access: rsync://dev.tw/rpki/August/12/3130342e33372e34322e302f32332d3234203d3e20393435.roa
Signing time: Sun 15 Oct 2023 04:00:21 +0000
ROA not before: Sun 15 Oct 2023 03:55:21 +0000
ROA not after: Sun 13 Oct 2024 04:00:21 +0000
asID: 945
IP address blocks: 104.37.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:74:03:0a:49:d2:e2:83:49:c1:04:f3:40:7c:da:ac:e5:67:d8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64EF7C64F4E72CC0730DD0DA80D3C367CB785E67
Validity
Not Before: Oct 15 03:55:21 2023 GMT
Not After : Oct 13 04:00:21 2024 GMT
Subject: CN=1D2B12F0DED31A3BBEB79F56C074FB0FE79E9A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:62:af:f9:e0:d0:30:b4:33:03:3c:8e:c2:
e2:08:0b:cd:43:7e:7c:08:cc:44:e9:f6:7d:66:71:
50:a0:56:24:94:9f:48:50:eb:b8:24:0f:af:50:05:
85:33:01:1d:ec:de:6d:9a:9b:dc:1a:ae:d5:47:95:
e3:61:57:1b:23:bf:f3:36:67:08:b3:21:6b:63:ac:
b2:3f:87:23:eb:46:64:4f:3f:95:69:f6:75:77:f6:
03:bf:04:76:d7:10:5a:7d:53:a0:8d:12:1a:9b:f0:
5d:e7:b0:10:5d:63:1f:4a:f8:12:39:cb:52:31:fe:
da:12:bc:97:52:41:4a:cc:96:2a:c7:06:e7:2e:e0:
8c:47:16:dc:34:51:ad:2d:af:f5:d5:45:ab:4a:46:
5a:d2:da:fa:62:c9:04:b5:7a:94:97:7f:58:63:71:
3a:79:a7:2d:74:ad:ec:64:f1:90:bd:ea:ce:83:bb:
6e:b5:91:d0:70:0f:41:5b:23:96:e6:ea:bc:3f:9a:
8e:0a:e8:f2:57:3d:5d:2b:8f:5f:6e:fa:aa:20:c8:
bc:43:f2:d7:d1:ce:2a:25:5c:13:e1:93:99:00:eb:
4e:68:eb:3e:5e:d6:7c:47:b4:be:35:86:ad:15:87:
f8:f5:e3:06:dd:90:db:b8:c5:d6:73:7d:35:4d:14:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2B:12:F0:DE:D3:1A:3B:BE:B7:9F:56:C0:74:FB:0F:E7:9E:9A:65
X509v3 Authority Key Identifier:
keyid:64:EF:7C:64:F4:E7:2C:C0:73:0D:D0:DA:80:D3:C3:67:CB:78:5E:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/12/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/August/12/3130342e33372e34322e302f32332d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.37.42.0/23
Signature Algorithm: sha256WithRSAEncryption
21:86:43:c3:67:f8:29:66:65:e1:04:49:6e:eb:46:e7:22:78:
1a:44:9f:9b:97:05:25:6d:cd:7c:20:f2:d7:9f:9f:f5:7a:7c:
aa:42:a0:94:05:7b:d7:b6:d6:9f:37:46:5a:40:38:ce:7b:4b:
e0:e0:bb:43:56:10:65:23:44:9f:37:af:7c:54:c0:02:22:00:
bc:22:ed:ad:2b:51:87:78:9b:25:25:2d:cf:f6:20:12:29:46:
89:d4:d3:e6:21:69:c6:b3:ad:47:86:e9:3b:93:d5:b6:0c:6d:
ed:13:90:90:81:20:cf:7b:6c:ff:e1:9e:7d:32:5e:00:7c:60:
b4:93:2a:4f:ed:f3:42:27:2b:7d:84:8c:48:5e:3f:41:05:d4:
19:5d:56:ae:49:8a:b2:c6:dc:32:f0:42:a3:3d:77:b1:dd:96:
41:27:12:8a:6f:c1:62:89:70:2e:8d:a1:47:99:97:91:41:ef:
63:e0:38:64:a7:30:f5:9f:b0:10:e5:46:ec:31:26:5a:3b:8b:
dd:13:90:53:d2:26:be:d4:aa:1c:0f:da:47:5e:27:6b:5f:f2:
37:7a:3e:46:79:a7:78:14:06:ed:c0:f3:47:a9:f2:02:e5:a1:
c6:9b:73:ac:8b:10:86:a3:87:78:77:ba:8d:bb:28:24:7e:ea:
f3:c2:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 08:32:11 2024 by rpki-client on console.sobornost.net