Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa
File: 326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa (raw, json)
Hash identifier: rseOdje2BleZ7ZPyr4pnIufuG3yhgpSGZbD/eNFALuI=
Subject key identifier: 75:5F:46:2E:45:C0:F0:E3:16:A0:A6:CC:2D:45:91:16:14:6B:6F:81
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 3402B4C36BE45D1A05FE869CF561068DDF812C6F
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa
Signing time: Tue 29 Apr 2025 15:19:15 +0000
ROA not before: Tue 29 Apr 2025 15:14:15 +0000
ROA not after: Tue 28 Apr 2026 15:19:15 +0000
asID: 215436
IP address blocks: 2a14:7c0:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 08:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:02:b4:c3:6b:e4:5d:1a:05:fe:86:9c:f5:61:06:8d:df:81:2c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:15 2025 GMT
Not After : Apr 28 15:19:15 2026 GMT
Subject: CN=755F462E45C0F0E316A0A6CC2D459116146B6F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:71:4d:eb:89:e3:21:79:dc:42:92:c1:82:ae:
02:78:99:5a:d3:a6:83:91:06:fe:db:b6:e3:be:c0:
25:ec:c8:04:3a:31:6a:23:ea:ba:10:20:95:00:63:
09:63:59:c6:bd:83:32:65:9c:c7:d5:0e:0e:9c:48:
cd:01:7b:51:6b:2f:c4:a5:90:da:5b:2a:37:b6:ed:
9f:af:3f:d3:c9:b5:e3:a5:7a:8c:bb:d0:04:df:27:
7f:df:0a:dc:ed:0a:15:a7:23:a9:e6:ad:36:0f:4b:
9a:72:bb:25:16:e5:60:ff:20:9f:48:ad:1d:16:34:
fb:dd:a1:f0:a2:a9:1e:28:67:58:22:72:33:5b:32:
54:70:26:80:c2:88:1b:94:e8:e5:f6:85:48:63:5c:
e6:c5:7f:56:04:73:f8:71:c4:ab:9e:5f:20:46:32:
98:07:89:40:c0:be:1d:7d:46:fb:6d:d1:72:7e:bd:
6a:a0:3d:8f:7a:ba:44:4b:a3:80:7b:93:46:66:95:
35:bb:3a:f4:3f:b8:4a:62:4b:12:e5:34:98:e7:93:
90:fb:11:4a:e0:e7:51:ae:88:e3:f8:33:6f:34:a1:
1a:95:70:18:7d:22:30:f3:10:6f:67:c6:f5:c8:e0:
bb:bc:48:d3:e2:4c:8d:91:f2:ad:b6:d9:28:c6:73:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5F:46:2E:45:C0:F0:E3:16:A0:A6:CC:2D:45:91:16:14:6B:6F:81
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:b000::/36
Signature Algorithm: sha256WithRSAEncryption
6f:6d:c6:7f:e7:93:73:ad:a9:1c:d4:11:ad:11:a2:52:02:68:
79:7a:93:b4:e2:56:98:d0:db:74:a3:10:1f:69:c9:0f:a4:44:
db:29:1d:18:b1:d3:f9:d7:06:42:88:c0:87:10:ca:15:bb:7c:
fe:60:4e:83:76:a3:24:12:1f:a4:1d:f8:69:0c:16:0d:a6:5b:
2e:3c:5c:ad:25:4b:d1:05:17:50:31:09:30:e0:0f:e9:ea:43:
5e:11:90:21:6a:a5:c8:da:d8:39:14:0c:9b:e2:85:03:2f:53:
ec:57:a8:f2:28:8e:db:c6:2b:ff:da:2d:57:a2:71:7f:4b:4d:
13:85:8c:83:43:53:db:2a:e6:dd:15:cb:b9:59:9a:59:53:20:
b3:dd:ea:5d:f7:9c:8f:ee:76:98:3b:14:76:24:e1:47:3c:ce:
a8:4f:ab:c6:89:9e:51:b4:b4:22:a9:97:e2:e0:a8:06:47:8f:
90:7f:ba:6f:ff:f2:04:0c:f7:8f:98:92:30:2a:dc:6d:e9:68:
43:69:ff:20:ce:58:46:fd:45:4e:cc:c0:2e:a7:04:d8:49:47:
8d:51:11:44:ea:53:ab:55:6c:ca:22:39:e9:ff:c4:c2:58:a4:
88:0f:f6:6f:49:c2:25:89:30:ce:d5:b5:a8:99:ec:57:ea:96:
1f:d0:69:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:36:40 2025 by rpki-client