Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363530303a3a2f34302d3438203d3e20323134383139.roa
File: 326131343a3763303a363530303a3a2f34302d3438203d3e20323134383139.roa (raw, json)
Hash identifier: Wm6AakENjEq+K+nIb1GZMWpJviQDH6Zqc/eNWaw6jRA=
Subject key identifier: 8C:58:1B:11:C9:4A:27:3A:6C:05:52:07:43:EA:D6:A0:A5:79:6E:78
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 2B76A01F599D600CF0FEB0EBA4C788172071EAB8
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363530303a3a2f34302d3438203d3e20323134383139.roa
Signing time: Tue 07 Oct 2025 22:43:51 +0000
ROA not before: Tue 07 Oct 2025 22:38:51 +0000
ROA not after: Tue 06 Oct 2026 22:43:51 +0000
asID: 214819
IP address blocks: 2a14:7c0:6500::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:76:a0:1f:59:9d:60:0c:f0:fe:b0:eb:a4:c7:88:17:20:71:ea:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Oct 7 22:38:51 2025 GMT
Not After : Oct 6 22:43:51 2026 GMT
Subject: CN=8C581B11C94A273A6C05520743EAD6A0A5796E78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:13:44:5d:7b:87:23:87:a7:f1:2e:74:53:65:
35:87:b5:4f:22:eb:6f:12:de:50:46:46:b2:07:e9:
ca:83:e4:aa:6a:50:12:c7:c2:ef:6c:54:60:fa:c6:
ce:1d:f5:8b:9c:9e:ef:78:94:1e:92:59:54:4f:6b:
33:73:f0:04:c6:83:5e:9b:69:3d:53:f5:17:bc:cf:
68:bf:5e:d6:1b:c7:18:1e:86:91:02:18:c5:39:a0:
0b:cf:e6:9c:87:f1:9f:3d:da:ee:9d:4b:a8:44:d8:
0b:7f:e6:d3:91:f4:c5:33:fc:48:ce:cc:67:db:58:
84:e1:02:82:67:3b:61:73:fe:be:24:96:3f:69:de:
32:81:e4:84:db:2f:38:c8:17:5b:1c:62:59:27:0d:
e6:64:40:3d:06:4e:3f:81:d7:b0:f4:3b:57:05:7e:
72:cc:c4:6f:99:12:85:77:c0:e8:84:3f:9a:e3:a4:
c6:69:1f:21:60:a8:79:97:2a:e9:72:eb:2b:2f:16:
b6:2e:5f:f1:06:fe:fb:bf:1e:d5:21:40:2a:f1:dc:
81:72:bc:ca:32:4c:cf:20:bb:af:aa:97:63:45:4e:
a6:99:01:2a:14:95:65:8a:2b:4a:33:9e:03:34:86:
2a:08:60:45:af:66:6e:b9:b8:7f:48:40:d1:77:d9:
38:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:58:1B:11:C9:4A:27:3A:6C:05:52:07:43:EA:D6:A0:A5:79:6E:78
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363530303a3a2f34302d3438203d3e20323134383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:6500::/40
Signature Algorithm: sha256WithRSAEncryption
83:58:78:09:57:59:02:82:ea:01:4b:69:e6:93:da:bd:45:1e:
96:f3:f3:9b:87:f4:09:a7:65:e2:bd:ec:e3:98:ac:c5:30:1b:
67:56:f3:d9:16:8a:c1:82:44:fa:e2:2c:4f:4d:ce:15:24:2c:
25:c6:ce:27:2b:2e:80:fa:b3:a2:14:1f:9b:fb:5b:5d:31:f9:
43:f5:7f:1f:a7:95:69:1d:6d:22:6f:51:01:77:eb:71:85:5d:
3b:80:1a:51:90:1c:14:52:f1:ac:e6:8e:2b:2f:78:ed:45:a2:
3d:03:e6:6d:e9:27:cb:00:0b:c5:3a:db:5b:55:a7:d6:2f:67:
65:ef:b0:0d:a5:cd:4f:eb:b4:0b:6d:90:cb:f1:09:4d:5a:84:
d2:c2:f4:d7:e8:4f:83:7b:94:66:1f:cb:6d:94:6d:56:cd:99:
8d:87:22:3f:4e:24:c2:89:91:23:52:cd:40:28:98:39:59:1f:
4d:3e:1b:f8:ea:d4:fe:59:1e:56:a4:75:8f:39:18:82:62:de:
27:d6:7e:5b:2c:80:75:3d:a6:ce:b1:d4:41:cc:cc:52:d2:5a:
9f:0a:74:71:90:b9:c4:5a:39:2f:1c:04:0f:ab:1f:76:05:f3:
d8:c6:e2:89:dc:22:52:57:2e:69:34:fe:6a:da:ec:70:57:d4:
70:5f:07:a1
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUK3agH1mdYAzw/rDrpMeIFyBx6rgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNTEwMDcyMjM4NTFaFw0yNjEwMDYyMjQzNTFaMDMxMTAvBgNV
BAMTKDhDNTgxQjExQzk0QTI3M0E2QzA1NTIwNzQzRUFENkEwQTU3OTZFNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhE0Rde4cjh6fxLnRTZTWHtU8i
628S3lBGRrIH6cqD5KpqUBLHwu9sVGD6xs4d9Yucnu94lB6SWVRPazNz8ATGg16b
aT1T9Re8z2i/XtYbxxgehpECGMU5oAvP5pyH8Z892u6dS6hE2At/5tOR9MUz/EjO
zGfbWIThAoJnO2Fz/r4klj9p3jKB5ITbLzjIF1scYlknDeZkQD0GTj+B17D0O1cF
fnLMxG+ZEoV3wOiEP5rjpMZpHyFgqHmXKuly6ysvFrYuX/EG/vu/HtUhQCrx3IFy
vMoyTM8gu6+ql2NFTqaZASoUlWWKK0ozngM0hioIYEWvZm65uH9IQNF32ThLAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUjFgbEclKJzpsBVIHQ+rWoKV5bngwHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMzI2MTMxMzQzYTM3
NjMzMDNhMzYzNTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMxMzQzODMx
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgAqFAfAZTANBgkqhkiG9w0BAQsFAAOCAQEAg1h4CVdZAoLq
AUtp5pPavUUelvPzm4f0Cadl4r3s45isxTAbZ1bz2RaKwYJE+uIsT03OFSQsJcbO
JysugPqzohQfm/tbXTH5Q/V/H6eVaR1tIm9RAXfrcYVdO4AaUZAcFFLxrOaOKy94
7UWiPQPmbeknywALxTrbW1Wn1i9nZe+wDaXNT+u0C22Qy/EJTVqE0sL01+hPg3uU
Zh/LbZRtVs2ZjYciP04kwomRI1LNQCiYOVkfTT4b+OrU/lkeVqR1jzkYgmLeJ9Z+
WyyAdT2mzrHUQczMUtJanwp0cZC5xFo5LxwED6sfdgXz2MbiidwiUlcuaTT+atrs
cFfUcF8HoQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:39:22 2025 by rpki-client