Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa
File: 326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa (raw, json)
Hash identifier: fgulAstvqIAcVch4biCJH1N8+VgJuzG7X+sSN+hBQ9s=
Subject key identifier: 71:A3:0A:07:98:AE:12:9C:3C:B2:34:A5:31:B2:DC:19:5A:AE:0F:18
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 5B1DA2F2EE192DE390248831BDF04F01D001FCC6
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa
Signing time: Tue 29 Apr 2025 15:19:17 +0000
ROA not before: Tue 29 Apr 2025 15:14:17 +0000
ROA not after: Tue 28 Apr 2026 15:19:17 +0000
asID: 60223
IP address blocks: 2a14:7c0:3900::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 08:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1d:a2:f2:ee:19:2d:e3:90:24:88:31:bd:f0:4f:01:d0:01:fc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:17 2025 GMT
Not After : Apr 28 15:19:17 2026 GMT
Subject: CN=71A30A0798AE129C3CB234A531B2DC195AAE0F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:bb:4d:c1:6d:f8:84:52:fd:c9:2b:57:cd:
77:03:7b:eb:9b:d0:35:54:7f:a5:2b:f4:da:ec:b0:
7e:1f:be:23:c7:88:e5:0b:71:45:ba:20:0b:3c:cd:
d5:22:7e:bd:39:ed:39:74:bc:fc:64:4d:5c:d0:b1:
20:e3:fc:30:27:30:d2:16:60:22:34:fb:0e:0d:8e:
13:a8:0d:5f:88:aa:4c:15:4e:5e:fe:91:fb:42:43:
2d:9d:03:74:4b:a0:32:c1:3d:3d:8f:94:76:b6:4c:
03:33:91:0d:2c:0d:4f:2a:5f:87:5b:70:8d:45:6c:
ec:e4:c8:c9:a0:c1:84:87:c3:0c:38:00:76:50:48:
28:89:3a:f8:18:7f:9e:16:b4:ac:88:f1:8b:b2:78:
0a:a2:d0:3f:4b:00:b3:0d:d8:1a:00:34:a1:ad:da:
42:2d:52:91:cc:a6:e9:37:35:f1:00:a7:98:e4:c3:
d5:96:12:cb:dc:30:2b:af:8d:0a:2c:0d:1a:8a:18:
c2:3f:1e:9a:5d:6e:06:30:fb:ef:6d:f3:dc:cb:af:
d7:44:47:13:51:0c:da:e2:85:14:f3:47:2d:b8:4a:
81:f5:9f:4b:eb:48:92:75:52:f7:8d:a1:fd:35:1f:
85:fa:a4:75:13:af:d5:64:eb:2b:dd:18:dd:48:0f:
00:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:0A:07:98:AE:12:9C:3C:B2:34:A5:31:B2:DC:19:5A:AE:0F:18
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:3900::/40
Signature Algorithm: sha256WithRSAEncryption
77:67:ad:3b:0e:d0:9d:ce:c4:f6:35:d8:84:72:4f:bb:31:57:
d9:84:88:90:d3:81:5e:fc:fd:5a:14:90:c8:78:c4:f1:3f:87:
02:60:ed:f6:24:bf:84:3e:43:60:aa:3e:9e:df:75:58:16:78:
6b:d3:09:04:53:c6:22:46:a7:7a:c8:45:d7:4d:40:87:f2:2d:
c1:53:8f:05:64:28:60:ed:9c:80:f8:d3:97:7d:07:ec:df:23:
0a:99:d9:23:4d:24:14:ed:d0:c8:8f:40:74:f1:03:d1:aa:05:
0d:a7:5b:c6:2a:e3:3f:46:1e:06:67:52:12:fb:e9:5f:c4:27:
2f:e6:82:2e:27:06:4f:e7:a9:48:9c:ed:59:ff:9b:2f:11:90:
8b:16:f8:21:07:ed:b8:b2:cd:ff:cd:c1:88:d7:e7:c3:43:3e:
2a:2e:83:e0:14:0c:fd:9a:2c:b3:d0:24:b9:4e:a8:e5:96:4c:
c9:db:b6:95:c2:49:02:5c:39:ee:6f:ce:0e:4a:0f:ef:e0:17:
e1:81:e6:50:e2:01:73:39:81:7a:73:d8:b7:e8:4b:33:ed:97:
59:43:77:25:f8:11:e4:4f:a2:1d:8e:cb:6a:6e:46:b4:b6:c3:
07:84:52:f4:72:ef:80:6a:d8:d1:6d:ef:12:f5:4d:97:5a:49:
b9:c4:72:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:43:27 2025 by rpki-client