Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/3138352e3139372e3138322e302f32342d3234203d3e20323035383939.roa
File: 3138352e3139372e3138322e302f32342d3234203d3e20323035383939.roa (raw, json)
Hash identifier: JC5jKhxx3OIy7DOUCnEZpOrYN6Zy6zgE3XH9VGxunOo=
Subject key identifier: A8:6F:27:A6:7F:BC:80:54:8E:99:E9:BC:F4:62:D5:8D:0F:CF:B2:81
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 3585BAB875E326107F0482D9ACAE7F67EB53355E
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/3138352e3139372e3138322e302f32342d3234203d3e20323035383939.roa
Signing time: Fri 26 Sep 2025 09:29:07 +0000
ROA not before: Fri 26 Sep 2025 09:24:07 +0000
ROA not after: Fri 25 Sep 2026 09:29:07 +0000
asID: 205899
IP address blocks: 185.197.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:85:ba:b8:75:e3:26:10:7f:04:82:d9:ac:ae:7f:67:eb:53:35:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Sep 26 09:24:07 2025 GMT
Not After : Sep 25 09:29:07 2026 GMT
Subject: CN=A86F27A67FBC80548E99E9BCF462D58D0FCFB281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:67:ec:b2:b6:bb:44:73:be:d1:c3:98:f4:bb:
ca:78:12:78:ee:46:6e:69:d4:52:60:84:54:2e:11:
68:be:37:6e:d5:b7:b4:cd:ee:99:75:85:dd:1f:33:
c2:ce:ac:9d:3a:1c:53:75:16:f3:11:98:de:fa:4b:
2c:df:aa:17:38:e9:18:ec:5d:15:48:1e:ed:8e:4d:
d2:bd:d4:c3:df:eb:09:e4:34:b9:c2:4c:8b:13:ee:
ad:18:d2:e6:a2:cc:78:28:b3:0a:62:f3:1d:ed:a6:
70:37:48:e2:46:5d:c0:a2:b3:92:ae:bb:c5:0d:28:
45:f6:72:25:ad:c7:e2:7e:cb:a7:5c:00:e0:50:11:
ce:25:d5:a0:9d:e7:38:8a:1f:5d:60:f7:dd:80:57:
15:b2:ee:56:e7:e9:04:b0:5e:9e:7c:a1:ce:ef:22:
1f:4e:d5:87:5a:07:69:67:89:ce:de:1c:05:43:05:
da:f5:28:be:67:1c:a7:01:29:ba:29:99:51:98:57:
77:b3:0f:b0:8a:a0:2e:1e:26:23:24:86:8d:52:9f:
15:27:c3:89:2f:29:28:75:61:0d:23:df:75:b6:42:
27:95:49:04:bd:5d:98:32:12:af:9e:04:1a:ac:f7:
8b:00:be:ed:fe:73:fe:e4:4c:fa:92:b2:52:18:31:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6F:27:A6:7F:BC:80:54:8E:99:E9:BC:F4:62:D5:8D:0F:CF:B2:81
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/3138352e3139372e3138322e302f32342d3234203d3e20323035383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.182.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6c:d4:45:99:0d:ab:3a:ea:7a:95:e5:2f:59:13:fc:71:5d:
6a:79:dd:4e:05:57:72:49:4a:53:20:c6:c3:8c:60:cd:e2:6b:
c5:13:42:ab:72:f6:b4:e2:36:9e:b6:7e:91:e1:b6:aa:83:b5:
b9:2e:2c:40:60:95:32:3f:fb:e9:5a:d3:b5:ba:23:74:02:78:
10:fa:31:f7:d1:50:0e:09:18:fc:96:22:4b:43:74:aa:93:7d:
25:7a:53:1c:3e:e4:ab:80:30:3c:ce:4b:7c:60:f7:e4:67:2d:
45:8e:97:7d:82:c8:0d:5a:20:42:38:50:a5:65:80:d0:f8:11:
cb:7d:d2:92:0f:13:7e:c3:fe:dd:ac:73:bb:1c:5b:e5:d4:8c:
97:76:c3:d8:8e:0f:67:35:3f:40:46:4d:c0:86:57:f4:f5:3b:
82:47:b1:ca:af:85:c4:f7:da:87:6f:b4:65:c9:fc:03:25:91:
36:57:db:19:cb:b3:a2:43:87:a5:ea:7b:15:67:c4:bc:e6:e1:
82:ff:be:bc:f9:6a:73:95:c5:9d:4f:ee:9a:b2:62:9b:f8:26:
89:25:c0:d5:81:c0:f8:02:16:23:a8:a4:f7:eb:6b:8c:0a:1c:
93:94:28:6f:1e:b4:51:b0:7f:83:08:b2:74:e1:09:94:d4:1a:
44:85:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:15:01 2025 by rpki-client