Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346230303a3a2f34302d3438203d3e203434333534.roa
File: 326131343a3763303a346230303a3a2f34302d3438203d3e203434333534.roa (raw, json)
Hash identifier: n9mOsWuYXkFd0BuKIhejQ1gIPKVy8ZJWUpI8hS9FBsY=
Subject key identifier: FC:A8:02:17:69:3A:40:32:37:BE:83:5B:87:56:6C:3E:CD:1E:7A:DF
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 6EB307A1D886B42413B9581C2BB33668363B763A
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346230303a3a2f34302d3438203d3e203434333534.roa
Signing time: Tue 29 Apr 2025 15:19:17 +0000
ROA not before: Tue 29 Apr 2025 15:14:17 +0000
ROA not after: Tue 28 Apr 2026 15:19:17 +0000
asID: 44354
IP address blocks: 2a14:7c0:4b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b3:07:a1:d8:86:b4:24:13:b9:58:1c:2b:b3:36:68:36:3b:76:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:17 2025 GMT
Not After : Apr 28 15:19:17 2026 GMT
Subject: CN=FCA80217693A403237BE835B87566C3ECD1E7ADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:17:20:ab:76:6c:b6:6f:1f:06:72:da:aa:
a8:ff:0a:e8:a6:bf:79:44:e8:57:e7:bd:f3:0e:c2:
a2:4f:3d:54:41:51:b4:10:8e:cc:a9:e5:2c:30:b6:
97:e8:70:6e:f3:3f:c8:e8:78:54:d3:7e:5d:3b:fc:
95:92:d3:d8:87:fb:f1:4d:f2:52:7a:79:ee:db:82:
df:83:11:31:1c:f8:a5:54:f6:04:96:67:fc:1a:e8:
c4:2f:e6:5a:bb:97:63:78:b8:83:cf:81:58:29:89:
ff:29:12:9b:18:b5:88:e1:1f:79:9c:42:f5:d4:25:
f5:97:df:bc:e3:9c:4b:ab:df:57:61:22:f9:8d:02:
2f:47:a5:0a:59:03:f4:50:d1:bd:2a:94:a2:f1:ca:
6e:d9:49:f9:8d:9d:78:3d:53:2b:54:3f:10:0c:38:
b5:a8:34:d6:e9:92:cd:9d:40:ed:e6:1b:10:98:f6:
49:96:52:cd:2a:ba:b7:bb:3b:64:ce:21:b3:89:84:
44:85:82:3a:72:6d:a0:16:88:73:64:fd:7a:dd:7d:
7d:ce:ff:66:3a:06:9b:83:ab:1c:6f:6e:c0:9e:0a:
3b:27:0a:53:bf:02:57:8d:0f:0e:b7:a9:cc:8f:9e:
74:7b:3b:e3:c3:0e:92:9c:95:c5:8a:95:9a:ce:61:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A8:02:17:69:3A:40:32:37:BE:83:5B:87:56:6C:3E:CD:1E:7A:DF
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346230303a3a2f34302d3438203d3e203434333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:4b00::/40
Signature Algorithm: sha256WithRSAEncryption
46:7c:2b:4c:51:52:b8:2a:d4:50:2c:be:5a:69:39:7e:4b:0a:
aa:65:9d:0e:21:f8:79:c0:38:7a:b0:29:ca:eb:0f:dc:5e:2e:
5d:35:c0:f3:ae:38:50:b8:3e:45:87:c9:cc:2a:6d:fe:8a:95:
ee:ee:71:ef:d5:d9:cf:67:fb:3b:3f:b1:13:c6:8f:84:d6:9c:
db:49:27:b0:ff:99:d0:c7:b9:29:c1:0f:fd:39:a7:97:bc:dd:
8b:8b:21:90:76:a0:51:1e:5f:d8:83:4d:b6:c1:53:1e:25:77:
08:e1:90:04:aa:12:e0:54:24:00:0a:b2:cb:21:7b:9c:14:0b:
a6:8c:f5:96:05:d4:d4:8e:24:dc:2e:66:46:12:09:10:7d:37:
10:9e:e4:00:45:95:87:ed:e3:34:a4:cb:d7:bf:f8:cf:74:4e:
3e:69:7d:f4:1d:2a:90:71:6b:22:a7:29:2c:59:65:00:f8:01:
52:2c:40:df:71:f7:0c:39:44:ce:16:89:f9:fd:be:db:71:02:
dc:d7:6a:46:a6:cf:c0:f4:ec:a5:b3:74:10:4a:14:57:07:51:
f8:7a:64:77:0a:c5:cf:e3:1e:8b:d2:73:62:91:ba:9d:72:66:
b4:c6:38:93:78:44:fb:dd:85:24:07:c9:aa:23:27:96:ed:e5:
36:fb:c8:be
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUbrMHodiGtCQTuVgcK7M2aDY7djowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNTA0MjkxNTE0MTdaFw0yNjA0MjgxNTE5MTdaMDMxMTAvBgNV
BAMTKEZDQTgwMjE3NjkzQTQwMzIzN0JFODM1Qjg3NTY2QzNFQ0QxRTdBREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9Bcgq3Zstm8fBnLaqqj/Cuim
v3lE6FfnvfMOwqJPPVRBUbQQjsyp5SwwtpfocG7zP8joeFTTfl07/JWS09iH+/FN
8lJ6ee7bgt+DETEc+KVU9gSWZ/wa6MQv5lq7l2N4uIPPgVgpif8pEpsYtYjhH3mc
QvXUJfWX37zjnEur31dhIvmNAi9HpQpZA/RQ0b0qlKLxym7ZSfmNnXg9UytUPxAM
OLWoNNbpks2dQO3mGxCY9kmWUs0qure7O2TOIbOJhESFgjpybaAWiHNk/XrdfX3O
/2Y6BpuDqxxvbsCeCjsnClO/AleNDw63qcyPnnR7O+PDDpKclcWKlZrOYeetAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQU/KgCF2k6QDI3voNbh1ZsPs0eet8wHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMzI2MTMxMzQzYTM3
NjMzMDNhMzQ2MjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzNDM0MzMzNTM0
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAOBAIAAjAIAwYAKhQHwEswDQYJKoZIhvcNAQELBQADggEBAEZ8K0xRUrgq1FAs
vlppOX5LCqplnQ4h+HnAOHqwKcrrD9xeLl01wPOuOFC4PkWHycwqbf6Kle7uce/V
2c9n+zs/sRPGj4TWnNtJJ7D/mdDHuSnBD/05p5e83YuLIZB2oFEeX9iDTbbBUx4l
dwjhkASqEuBUJAAKssshe5wUC6aM9ZYF1NSOJNwuZkYSCRB9NxCe5ABFlYft4zSk
y9e/+M90Tj5pffQdKpBxayKnKSxZZQD4AVIsQN9x9ww5RM4Wifn9vttxAtzXakam
z8D07KWzdBBKFFcHUfh6ZHcKxc/jHovSc2KRup1yZrTGOJN4RPvdhSQHyaojJ5bt
5Tb7yL4=
-----END CERTIFICATE-----
Generated at Tue May 6 14:12:45 2025 by rpki-client