Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a343830303a3a2f34302d3430203d3e20323135323932.roa
File: 326131343a3763303a343830303a3a2f34302d3430203d3e20323135323932.roa (raw, json)
Hash identifier: ZLky9+wxOoGSgkCZ3yRYQFlTf2QsFxNR+8wDvTcTwfM=
Subject key identifier: 4F:86:2E:BB:2B:FE:CB:46:FA:E2:B5:59:7F:11:25:C0:C9:51:D9:01
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 07C0F0F6CCD38087A80E22B99BB57F2BC684E89A
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a343830303a3a2f34302d3430203d3e20323135323932.roa
Signing time: Tue 29 Apr 2025 15:19:13 +0000
ROA not before: Tue 29 Apr 2025 15:14:13 +0000
ROA not after: Tue 28 Apr 2026 15:19:13 +0000
asID: 215292
IP address blocks: 2a14:7c0:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 08:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c0:f0:f6:cc:d3:80:87:a8:0e:22:b9:9b:b5:7f:2b:c6:84:e8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:13 2025 GMT
Not After : Apr 28 15:19:13 2026 GMT
Subject: CN=4F862EBB2BFECB46FAE2B5597F1125C0C951D901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:72:75:af:9e:7c:32:ec:22:c5:cc:28:1f:35:
0e:14:79:11:06:03:f5:02:a4:11:05:f9:11:95:c2:
63:a0:e3:35:de:91:56:79:71:dd:f1:ab:09:22:66:
ce:54:4a:18:5c:b2:47:60:58:e2:de:6c:9f:1a:a6:
f6:8c:99:04:99:e9:d0:21:7f:ec:0f:59:ba:b2:bb:
8e:64:ac:af:63:7c:17:6e:05:7b:65:d6:1a:14:f5:
14:32:8a:0f:7b:30:55:3d:48:65:34:58:c1:23:7f:
35:b6:ae:bf:31:5b:b1:75:bf:92:fe:a9:1b:45:6c:
30:f0:31:47:1e:ba:f9:40:0c:d8:13:ff:18:5e:32:
4c:47:c9:89:61:51:54:14:0e:aa:4e:06:d5:a7:06:
e9:a0:8e:16:3e:e9:93:a9:8c:c4:c8:58:74:70:a6:
c9:52:23:c9:ee:33:6f:86:26:cd:3c:68:02:55:08:
91:55:0f:da:8b:6a:0d:77:fc:58:28:ba:02:8a:34:
68:e1:65:76:69:ff:dd:f5:0c:e3:80:59:94:f2:02:
82:b5:e2:5a:74:37:44:ef:a7:fa:c1:d8:21:92:1e:
2a:ac:8d:56:bf:e6:41:b3:cc:20:cc:ae:9f:91:03:
b3:76:4b:7e:bb:13:d1:c3:b0:85:a7:cb:e3:ff:fa:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:2E:BB:2B:FE:CB:46:FA:E2:B5:59:7F:11:25:C0:C9:51:D9:01
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a343830303a3a2f34302d3430203d3e20323135323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:4800::/40
Signature Algorithm: sha256WithRSAEncryption
87:08:9d:dd:7b:a2:5e:eb:e3:a6:00:ed:ca:97:f2:f3:d6:80:
31:97:62:bd:90:ef:21:17:c7:23:f1:60:da:a6:72:e9:d4:e3:
3c:7d:f9:c1:bc:c0:9b:02:79:24:fd:d3:85:6a:ee:93:18:2c:
33:9f:5f:f0:d7:46:18:86:98:b9:1a:59:13:49:74:dc:b7:8b:
06:3a:50:05:e6:4b:0f:3b:6d:c5:00:4d:c6:1e:89:b1:62:0d:
53:60:26:8e:45:8e:7a:55:ee:e7:9a:69:e0:f7:92:d2:a7:66:
cc:ed:cd:88:81:19:72:15:7d:6c:f9:6f:fa:d0:64:1c:36:ad:
17:5d:0f:de:22:c7:43:ae:88:fd:f2:27:1c:f6:4a:22:84:3a:
7f:28:4f:0f:65:d5:ed:b4:00:6e:e2:bc:37:63:f6:4b:71:94:
9d:be:2b:09:e5:be:9e:c0:e2:b5:56:ae:ae:28:3f:97:6f:a6:
a3:53:83:6f:e0:32:4b:d9:97:34:d9:db:2a:e4:47:65:fc:84:
19:f0:30:fe:fa:2f:f3:3e:e6:ab:0b:d8:f6:19:a9:fc:a4:c1:
23:ca:99:7e:2d:ea:d1:16:f4:17:8a:6c:b3:c2:fe:5e:88:62:
91:88:7c:06:c7:74:22:5f:8f:75:f5:3a:62:00:5b:3c:f2:2d:
ac:59:31:12
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUB8Dw9szTgIeoDiK5m7V/K8aE6JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNTA0MjkxNTE0MTNaFw0yNjA0MjgxNTE5MTNaMDMxMTAvBgNV
BAMTKDRGODYyRUJCMkJGRUNCNDZGQUUyQjU1OTdGMTEyNUMwQzk1MUQ5MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8cnWvnnwy7CLFzCgfNQ4UeREG
A/UCpBEF+RGVwmOg4zXekVZ5cd3xqwkiZs5UShhcskdgWOLebJ8apvaMmQSZ6dAh
f+wPWbqyu45krK9jfBduBXtl1hoU9RQyig97MFU9SGU0WMEjfzW2rr8xW7F1v5L+
qRtFbDDwMUceuvlADNgT/xheMkxHyYlhUVQUDqpOBtWnBumgjhY+6ZOpjMTIWHRw
pslSI8nuM2+GJs08aAJVCJFVD9qLag13/FgougKKNGjhZXZp/931DOOAWZTyAoK1
4lp0N0Tvp/rB2CGSHiqsjVa/5kGzzCDMrp+RA7N2S367E9HDsIWny+P/+vI9AgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUT4Yuuyv+y0b64rVZfxElwMlR2QEwHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMzI2MTMxMzQzYTM3
NjMzMDNhMzQzODMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjMxMzUzMjM5
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgAqFAfASDANBgkqhkiG9w0BAQsFAAOCAQEAhwid3XuiXuvj
pgDtypfy89aAMZdivZDvIRfHI/Fg2qZy6dTjPH35wbzAmwJ5JP3ThWrukxgsM59f
8NdGGIaYuRpZE0l03LeLBjpQBeZLDzttxQBNxh6JsWINU2AmjkWOelXu55pp4PeS
0qdmzO3NiIEZchV9bPlv+tBkHDatF10P3iLHQ66I/fInHPZKIoQ6fyhPD2XV7bQA
buK8N2P2S3GUnb4rCeW+nsDitVaurig/l2+mo1ODb+AyS9mXNNnbKuRHZfyEGfAw
/vov8z7mqwvY9hmp/KTBI8qZfi3q0Rb0F4pss8L+XohikYh8Bsd0Il+PdfU6YgBb
PPItrFkxEg==
-----END CERTIFICATE-----
Generated at Tue May 6 22:02:42 2025 by rpki-client