Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa
File: 326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa (raw, json)
Hash identifier: xDBV4c/aOAT0QJegqrypTKJpuAQKB5xDFM3dfLX/t+8=
Subject key identifier: D5:D3:24:71:AC:5C:6C:28:A1:60:40:FF:08:51:00:21:3E:27:83:04
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 6E88EBB301FCCDFC250CABB7D369AE7554F2BEFE
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa
Signing time: Tue 29 Apr 2025 15:19:17 +0000
ROA not before: Tue 29 Apr 2025 15:14:17 +0000
ROA not after: Tue 28 Apr 2026 15:19:17 +0000
asID: 215292
IP address blocks: 2a14:7c0:1800::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:88:eb:b3:01:fc:cd:fc:25:0c:ab:b7:d3:69:ae:75:54:f2:be:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:17 2025 GMT
Not After : Apr 28 15:19:17 2026 GMT
Subject: CN=D5D32471AC5C6C28A16040FF085100213E278304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:5d:b9:9a:9b:2a:5f:3b:ff:6d:79:af:bf:
25:56:44:55:fc:23:14:32:4f:b0:98:d2:98:e5:50:
cd:23:fc:79:2b:24:1e:48:54:25:43:05:6e:f6:6d:
41:2e:60:3f:04:10:26:24:b8:58:df:1d:d6:99:b0:
4e:c5:6a:cf:ca:87:1d:ad:4b:6a:ad:04:65:76:0e:
57:31:37:18:f2:7c:bb:a0:38:54:3d:96:4c:1b:eb:
f9:1b:6d:ce:5b:e8:b0:fe:02:88:b7:f4:65:60:bf:
d6:92:2f:8f:92:a4:57:95:5f:26:19:2c:95:99:68:
ab:81:f6:10:f7:42:8e:ac:5d:47:3f:de:de:b8:1a:
de:61:ac:96:cc:9c:c7:7f:df:f0:7c:e8:43:2f:34:
14:fe:0b:d8:1b:d6:15:1f:c6:03:70:50:f3:b1:09:
36:55:8c:e4:80:e2:fd:68:eb:47:b1:5f:a7:a3:c8:
0c:e7:6e:55:f4:08:67:b5:0a:09:79:c6:6c:d5:c6:
29:78:59:6c:59:44:d3:16:99:0b:b8:78:1c:23:2f:
9a:39:eb:f4:69:eb:2e:a2:09:11:a4:e5:60:40:c1:
cf:b1:6e:0d:bf:d9:f8:5e:11:57:53:50:8f:cf:8d:
bb:f5:9e:f7:e4:6a:74:9d:07:ac:46:ee:a3:02:e0:
7b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D3:24:71:AC:5C:6C:28:A1:60:40:FF:08:51:00:21:3E:27:83:04
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1800::/38
Signature Algorithm: sha256WithRSAEncryption
0e:19:25:01:b0:de:6e:bb:b0:b7:8f:34:4d:74:a5:4b:40:3c:
0a:d2:6c:3f:ac:1c:09:ce:dd:66:ae:e7:0b:75:f4:f7:3b:1f:
31:a2:5f:d8:f7:35:b7:aa:dd:e3:cb:8c:cd:99:ad:37:8d:09:
a8:d1:1c:d0:7f:b1:f4:27:41:b4:36:a8:f1:9c:c7:fb:a9:be:
b9:43:be:3f:e8:2a:2d:45:9a:65:46:02:61:71:6c:b1:19:32:
96:b3:ae:2e:45:67:65:f4:8d:c0:fb:f3:24:56:be:2a:d1:3b:
eb:a8:24:e2:58:db:8a:b2:f4:b4:bd:57:07:9f:9e:1a:90:b2:
fa:be:b8:2d:bc:a0:39:2b:af:49:23:a5:c4:5f:41:a6:db:1d:
40:45:ff:6a:20:97:e6:42:8a:68:50:9f:96:e0:6b:0a:da:52:
0a:f7:2e:b8:d5:07:36:14:9e:74:01:31:06:ca:bf:06:a2:81:
6f:78:ca:8a:85:49:a4:a1:89:6c:70:a4:27:41:08:62:2b:66:
f8:df:30:0c:99:22:ac:50:18:89:e7:93:e9:41:b4:da:96:ec:
3c:42:93:d9:ee:19:3a:17:1a:75:2f:14:3a:67:f7:9c:1a:54:
d4:e8:6d:e2:23:6b:43:e5:0e:cc:d3:06:36:7e:d2:99:70:2d:
e9:8c:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:30:17 2025 by rpki-client