Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa
File: 326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa (raw, json)
Hash identifier: SWyDEj1VN+UfzUCOkigP6vKdEhlU3UrtyaEmgSQTi2M=
Subject key identifier: C2:71:CF:C5:9F:C4:93:32:9D:41:70:56:AB:42:60:07:C1:3A:F5:82
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 0BDAA9E5B55AB15BDFD0A0F5D5990AD2BEAA4E15
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa
Signing time: Tue 29 Apr 2025 15:19:16 +0000
ROA not before: Tue 29 Apr 2025 15:14:16 +0000
ROA not after: Tue 28 Apr 2026 15:19:16 +0000
asID: 215531
IP address blocks: 2a14:7c0:800::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 08:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:da:a9:e5:b5:5a:b1:5b:df:d0:a0:f5:d5:99:0a:d2:be:aa:4e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:16 2025 GMT
Not After : Apr 28 15:19:16 2026 GMT
Subject: CN=C271CFC59FC493329D417056AB426007C13AF582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:8e:75:65:4a:2d:f1:33:ed:e2:78:6b:e7:
27:c0:2d:12:b3:63:0a:f8:19:0d:11:4b:b4:60:c1:
df:b1:ea:e9:be:38:84:2a:3a:96:ea:a2:52:7e:fb:
b9:75:67:d3:ae:5b:30:e0:d1:0c:a9:e2:be:9f:0d:
33:ba:af:c3:5d:27:a8:8c:b4:6c:8b:3a:15:46:b0:
54:06:24:9d:af:7e:48:b1:a9:34:10:bb:0e:eb:2c:
09:8a:df:89:85:02:16:f0:43:55:0c:45:64:3e:21:
a1:8e:f9:1c:72:79:80:66:e5:d6:d8:f4:6b:7e:38:
fe:da:a4:6d:4c:35:43:42:34:7e:f1:df:2d:6d:13:
de:48:f3:de:f6:12:d7:c8:60:d9:60:cd:b6:9c:56:
65:9c:7b:49:88:8a:53:4b:1a:6e:22:5e:46:77:1f:
c1:c8:63:b4:24:b4:22:1e:ed:1d:f7:18:89:5c:2a:
cd:7a:7e:25:e8:f4:c9:c0:ee:8a:c7:47:26:36:9a:
00:e2:5d:11:75:71:41:ff:82:4c:30:17:23:76:ce:
7b:c3:80:ca:52:c1:ff:81:6a:b6:f2:7c:dc:2a:58:
08:b4:cc:81:a9:09:fa:50:ce:86:a1:1d:6c:39:76:
10:db:74:9b:61:4a:10:ff:fa:52:cc:cf:f0:7c:9a:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:71:CF:C5:9F:C4:93:32:9D:41:70:56:AB:42:60:07:C1:3A:F5:82
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:800::/38
Signature Algorithm: sha256WithRSAEncryption
9c:4c:5f:b5:4d:71:5f:fc:cd:18:03:d1:2f:f4:67:ee:6e:32:
a4:65:e3:51:d5:6f:90:74:7c:92:de:91:c3:dd:18:c1:be:24:
8e:ac:ff:cc:c6:dc:a8:43:54:89:b9:0a:8f:a9:5b:e0:fa:89:
9e:59:25:13:8a:68:04:72:b5:83:64:5f:d1:03:5f:99:1d:ee:
d4:c7:fe:52:6d:2c:04:21:9c:f9:6e:1c:3c:a0:bd:84:b6:bd:
99:62:da:55:6b:7a:6a:b1:f8:dd:1a:20:75:43:fa:4b:9a:f7:
d8:22:98:7b:68:e9:83:5b:5e:1d:40:1e:65:04:7b:8f:54:b4:
f5:54:56:d7:c3:5e:00:4e:6c:21:65:18:6f:35:6f:bf:b0:c2:
4b:b8:71:88:09:27:ab:db:5c:4e:53:68:30:7d:8e:92:87:29:
a9:bc:b1:c8:fe:4d:3f:40:53:6b:e2:66:9a:ff:05:7a:df:a0:
a4:69:13:42:7c:a7:e4:26:77:87:59:2e:54:43:08:a8:86:25:
00:37:f4:23:2e:45:2d:b2:48:d3:bb:fa:c8:d4:a3:a2:e7:c8:
39:eb:b0:ea:70:e1:b9:12:1c:a6:b9:df:3c:7d:50:6d:38:e8:
d8:9f:9f:f4:30:1c:5c:94:82:79:27:5c:47:78:b1:c5:95:53:
b6:30:5f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:30:24 2025 by rpki-client