Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa
File: 326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa (raw, json)
Hash identifier: l3OsZjsoemi5DzhAQXNCPxbjFpWIvm+pbLsXgVFqcVY=
Subject key identifier: 63:08:78:74:0F:54:6A:A9:DF:43:AB:26:84:1D:20:DA:F5:1A:AA:3E
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 595A9B84BD724F159BAF7ACF21B432CBC4946895
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa
Signing time: Tue 29 Apr 2025 15:19:16 +0000
ROA not before: Tue 29 Apr 2025 15:14:16 +0000
ROA not after: Tue 28 Apr 2026 15:19:16 +0000
asID: 197464
IP address blocks: 2a14:7c0:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5a:9b:84:bd:72:4f:15:9b:af:7a:cf:21:b4:32:cb:c4:94:68:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:16 2025 GMT
Not After : Apr 28 15:19:16 2026 GMT
Subject: CN=630878740F546AA9DF43AB26841D20DAF51AAA3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:c9:62:a8:05:e7:2c:bc:23:31:c7:3b:58:
cd:b0:8f:01:5e:61:01:07:10:bf:8b:90:b2:a2:01:
fc:2c:53:e1:d3:b5:28:e4:20:ea:65:3f:93:bf:9c:
a6:72:ae:63:c0:65:8b:a6:5b:fa:9e:54:a4:32:c8:
f5:96:b4:57:92:dd:c3:f7:e3:ab:bc:62:84:87:2c:
ad:bb:15:71:05:87:ca:1f:29:92:02:b5:e5:3b:4e:
09:16:2e:82:db:74:8f:50:d8:39:fc:33:38:a9:b2:
4e:ab:aa:29:3b:e5:dc:cf:4c:f7:7e:f9:af:79:d3:
76:2d:f4:c1:7f:a9:99:3e:64:1d:a8:63:a9:20:de:
89:f7:22:e8:fd:a7:4d:4f:95:7f:85:5b:f8:0f:5f:
68:9f:07:9d:6e:06:6d:9d:b0:6a:df:b2:49:1c:9c:
db:9c:3c:38:82:e7:b0:9e:43:99:0d:e5:fb:13:33:
2d:63:84:8a:c3:28:fb:b8:1e:60:03:73:b4:98:f2:
de:55:77:67:7b:19:1d:1e:53:e1:9c:08:09:65:e3:
69:3a:35:41:d2:ee:52:1f:5b:22:6e:20:90:51:d5:
eb:a1:e6:60:62:72:b7:47:53:bd:58:e2:dc:db:de:
98:cc:bb:a6:98:30:4a:5a:cc:ee:ed:51:f1:1a:be:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:08:78:74:0F:54:6A:A9:DF:43:AB:26:84:1D:20:DA:F5:1A:AA:3E
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:3000::/40
Signature Algorithm: sha256WithRSAEncryption
82:7f:cc:58:42:36:29:6c:91:1c:07:72:bc:21:64:83:fa:cf:
1d:a1:46:16:94:30:90:c3:ba:ce:e1:4f:80:56:b9:ad:ba:ae:
d0:7e:7f:11:e4:90:77:b1:3e:c7:18:e0:d4:f3:f9:73:d0:15:
09:4d:b2:49:21:6c:27:8e:1c:f5:3c:7f:0f:d6:3d:ec:d6:b1:
d0:83:7a:57:44:67:4a:e3:21:9b:e7:05:e6:52:d2:c0:de:12:
8a:93:52:36:6e:06:05:7d:e0:e2:77:e3:dc:88:e8:19:62:12:
59:11:57:ab:0f:a1:45:cd:7c:f9:5f:99:c4:37:2c:3e:c1:ce:
55:4a:3f:bd:a2:4d:79:60:75:3a:b2:49:6f:e3:cd:ad:a9:22:
9f:a6:34:74:db:d9:4d:c0:66:d4:39:57:e4:a8:d6:d1:bb:aa:
a3:0d:cd:b9:ba:90:0f:d6:4e:98:b4:f9:88:4d:3d:34:43:3b:
90:c8:a6:ce:72:68:7f:c4:e3:5c:97:67:de:15:f9:56:4a:83:
f5:3f:1c:cc:e4:82:39:2e:ab:d4:d8:ca:d5:41:e8:86:a4:6f:
cf:df:49:42:5f:7a:43:58:ed:c0:24:e2:4d:0e:eb:26:65:f5:
ba:9a:92:e4:71:49:fb:87:07:b1:30:26:84:19:21:fe:76:3b:
8f:2d:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:11:20 2025 by rpki-client