Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333330303a3a2f34302d3430203d3e20323134393637.roa
File: 326131343a3763303a333330303a3a2f34302d3430203d3e20323134393637.roa (raw, json)
Hash identifier: bZdTLKNUw0lzWelKvppymk3Wk1cM9dzRGtA/IGvp9TQ=
Subject key identifier: 7C:80:76:08:CD:71:E8:BC:49:92:70:CA:40:AC:B7:B7:71:7A:80:04
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 2D9347E38CB3A65EEC8FA4C6CE345778B4461169
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333330303a3a2f34302d3430203d3e20323134393637.roa
Signing time: Tue 29 Apr 2025 15:19:13 +0000
ROA not before: Tue 29 Apr 2025 15:14:13 +0000
ROA not after: Tue 28 Apr 2026 15:19:13 +0000
asID: 214967
IP address blocks: 2a14:7c0:3300::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:93:47:e3:8c:b3:a6:5e:ec:8f:a4:c6:ce:34:57:78:b4:46:11:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:13 2025 GMT
Not After : Apr 28 15:19:13 2026 GMT
Subject: CN=7C807608CD71E8BC499270CA40ACB7B7717A8004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:fb:87:02:03:90:09:58:03:39:13:7b:04:
80:ba:f4:31:6c:45:ec:29:62:3d:ac:3b:f7:08:3d:
e3:ce:97:de:4c:17:34:a8:ab:b8:a2:04:cc:41:53:
55:09:65:be:13:bc:16:8b:bb:3b:c6:9e:81:3e:46:
35:cc:d0:a7:37:00:5a:36:4f:30:cf:93:02:9e:08:
5f:b7:66:7b:31:e0:39:98:d7:44:73:89:1f:35:52:
70:1d:82:1f:b6:ee:26:d0:79:40:f2:db:3a:95:0d:
0c:54:df:f5:7d:be:ec:d4:a7:e4:7c:26:64:2d:16:
89:65:a9:56:de:ec:8b:35:84:96:b3:55:1d:f6:eb:
d7:e3:db:c5:fd:b8:6c:13:25:4b:6c:b6:11:d5:fd:
18:e4:9d:a8:66:ad:7a:d2:95:a5:22:f2:d8:29:92:
59:4b:fc:9f:28:8d:f8:05:6d:1a:e0:e4:93:b9:57:
7d:3d:24:dd:d6:81:8d:16:06:e2:4c:88:b4:12:ac:
97:cb:d3:a4:e9:84:2c:57:f0:0d:a3:70:fe:00:c4:
ee:f0:74:b8:23:11:a9:53:81:c1:5b:4a:e4:12:e9:
22:3f:52:a4:65:2e:ef:98:05:fd:71:d6:af:2c:ec:
2d:84:78:59:0b:b3:46:36:83:e1:cc:46:df:99:7d:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:80:76:08:CD:71:E8:BC:49:92:70:CA:40:AC:B7:B7:71:7A:80:04
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333330303a3a2f34302d3430203d3e20323134393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:3300::/40
Signature Algorithm: sha256WithRSAEncryption
58:b8:3e:46:54:65:6d:cb:5d:5b:c9:24:56:17:ec:d7:60:d7:
9f:5d:6d:15:16:79:72:16:38:a2:d4:06:53:b7:00:25:d7:05:
d5:09:90:e4:2e:fc:e5:4c:04:0d:13:d2:6a:c0:95:2b:b3:bc:
0b:05:2e:52:eb:53:74:e5:bf:ed:b1:23:f1:2d:22:c9:67:95:
ec:87:85:4c:53:19:8e:9c:36:f4:99:cc:aa:db:a8:d2:30:49:
f0:f6:c9:d9:e3:67:e5:45:ea:47:8e:67:50:9d:48:89:83:6f:
6b:b7:96:40:b8:a8:31:98:de:09:d5:c3:6d:c1:2f:70:55:67:
33:de:a6:ed:af:a7:9e:e9:7d:42:b0:0b:d7:d9:10:fb:4d:6e:
e3:be:29:12:18:0d:ab:2c:7b:4d:44:99:c1:78:ea:76:8c:aa:
9b:50:71:9a:aa:b4:a5:d4:82:eb:1a:0d:dc:a5:f6:a1:dd:5b:
9e:31:48:d0:7e:f1:fc:11:69:ad:10:66:32:dd:5f:7b:42:23:
fa:79:33:a3:fd:1a:9e:68:7a:00:60:37:61:10:aa:b3:15:00:
55:c8:83:6b:af:01:5b:4f:43:17:bb:1c:49:1f:1a:e5:21:b5:
3e:5b:7b:1b:70:09:b4:50:22:8b:9d:0c:4e:3e:fe:49:c6:bf:
8a:33:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:35:51 2025 by rpki-client