Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa
File: 326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa (raw, json)
Hash identifier: suudTxlLIhNx8eGPUX+OBYgohtRnLXnsi42sTVAQLt0=
Subject key identifier: C4:0D:8A:9D:00:BF:BD:88:0D:89:DF:12:F1:D2:6A:71:4A:4F:79:C7
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 4C072070A3F12A1734D4736774E64AAE13E72061
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa
Signing time: Tue 29 Apr 2025 15:19:15 +0000
ROA not before: Tue 29 Apr 2025 15:14:15 +0000
ROA not after: Tue 28 Apr 2026 15:19:15 +0000
asID: 215158
IP address blocks: 2a14:7c0:2400::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 08:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:07:20:70:a3:f1:2a:17:34:d4:73:67:74:e6:4a:ae:13:e7:20:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:15 2025 GMT
Not After : Apr 28 15:19:15 2026 GMT
Subject: CN=C40D8A9D00BFBD880D89DF12F1D26A714A4F79C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:dc:f4:d9:af:5c:88:a7:c0:ba:c7:5f:3a:
95:5a:66:93:1d:26:27:d2:c4:49:4e:6a:fb:59:74:
43:60:9e:12:4f:fe:46:af:b5:4e:b5:6b:1a:6a:ba:
db:2c:1c:5b:5d:76:f7:45:c1:82:e0:af:b9:3a:b3:
e9:50:e2:54:1a:a5:d6:b1:8f:bf:2c:18:1b:10:d3:
db:67:5f:97:a2:ff:2c:71:96:17:8a:c5:e1:88:3c:
ea:f0:7a:b5:5b:20:f5:f5:c5:69:aa:b8:93:62:f1:
6f:3d:d4:14:40:94:d2:74:44:57:de:be:85:84:d3:
85:8a:30:0c:d4:51:e2:aa:6a:c8:6b:77:51:d5:d4:
0c:b8:6a:7e:b1:eb:b0:b0:1e:91:2f:5a:af:58:73:
e7:b0:e7:c4:67:ac:0e:16:4e:24:eb:4c:cb:f1:d9:
00:0a:35:68:75:3f:77:1d:96:8d:bd:95:48:11:6b:
69:eb:bf:be:cc:10:4f:49:5e:2d:03:65:12:94:68:
df:7e:26:61:52:34:7a:50:79:90:72:58:88:4f:70:
3b:16:11:ff:c5:8c:4c:f4:0b:7a:6c:cd:40:43:41:
4f:42:4e:8e:9d:17:f5:a3:1d:87:fe:62:f2:cd:08:
fd:b1:5a:f8:37:fd:7d:bd:a3:e6:69:90:c6:f0:87:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0D:8A:9D:00:BF:BD:88:0D:89:DF:12:F1:D2:6A:71:4A:4F:79:C7
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:2400::/38
Signature Algorithm: sha256WithRSAEncryption
66:64:51:da:9e:4f:a2:d1:09:5b:b4:1e:46:6c:4e:8d:d5:26:
24:bc:92:03:12:ca:76:14:91:87:8f:e8:61:21:ab:15:98:26:
62:48:5f:b6:25:5f:32:f1:80:83:87:c6:8e:91:26:8e:5a:9c:
4e:36:bd:d0:d7:e5:72:f7:7b:ea:ee:d6:bd:76:cd:8f:bb:46:
5c:0e:3c:73:be:d8:13:cf:9f:f8:3c:7c:04:f2:45:7e:4a:44:
2e:62:ca:f7:72:3f:62:d4:33:5e:4b:d2:6c:0c:32:73:2e:70:
af:18:7d:01:0e:44:cd:a2:f7:65:36:58:dc:6c:5f:cc:1e:a7:
7a:19:da:1a:8b:23:52:ef:6c:b0:17:1a:ee:68:65:8f:e5:c0:
b6:2a:89:1e:d9:fe:ab:34:80:4e:4b:85:0e:0e:99:6e:8f:2c:
8e:77:e3:e9:e7:18:30:c2:cc:07:34:04:43:c5:a4:1c:6f:49:
2b:ab:27:b6:36:95:8a:4c:6e:6c:1e:6a:50:42:47:f5:2b:81:
a9:bc:94:41:fd:f7:34:82:5d:13:39:aa:9d:7f:a4:bc:21:ab:
8b:e9:d8:b9:f4:fc:97:e3:bd:17:48:1f:0c:a7:44:d0:9e:44:
ed:4f:45:d2:b6:a7:8a:65:de:90:42:05:a5:8b:c5:02:a0:12:
0f:09:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:17:51 2025 by rpki-client