Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa
File: 326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa (raw, json)
Hash identifier: l6yZu5hh9ue4LbgVs41cxjXn6llqzQ/6GkPSbbK3OQw=
Subject key identifier: C3:2D:AC:42:87:62:8B:BD:49:08:D7:76:F6:0D:58:82:44:89:98:1F
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 62202B8A44889F7A6049698EE7AB353D1C2FDE62
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa
Signing time: Tue 29 Apr 2025 15:19:18 +0000
ROA not before: Tue 29 Apr 2025 15:14:18 +0000
ROA not after: Tue 28 Apr 2026 15:19:18 +0000
asID: 215203
IP address blocks: 2a14:7c0:d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 08:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:20:2b:8a:44:88:9f:7a:60:49:69:8e:e7:ab:35:3d:1c:2f:de:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:18 2025 GMT
Not After : Apr 28 15:19:18 2026 GMT
Subject: CN=C32DAC4287628BBD4908D776F60D58824489981F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:97:c0:4b:f7:05:5a:da:8c:ee:9e:91:d8:
46:3a:dc:b6:4d:a8:4b:89:97:81:c4:a1:be:3e:52:
b9:14:3a:13:73:de:cb:ad:58:e4:a9:34:14:43:ed:
6a:ca:96:f3:72:80:b2:e9:c0:39:79:1d:5f:70:3d:
57:d2:cc:6e:20:32:21:9c:1b:02:78:75:07:81:22:
71:c2:a7:43:e8:4b:ac:3e:e2:6d:39:15:5f:58:2b:
27:cd:d6:3c:66:38:b8:18:c8:e8:00:73:7f:11:87:
5f:bc:f9:4e:87:2a:4e:10:5b:1a:f9:5f:85:d8:aa:
35:ef:3e:02:ab:30:2f:8c:d0:26:1a:e5:fc:a2:e1:
32:bd:ad:aa:3c:fd:c4:de:16:ff:a2:c7:26:7c:9e:
90:f0:c3:8e:13:87:d1:10:5c:a9:ff:93:0d:9d:44:
96:84:9f:20:06:42:fd:6b:47:eb:cc:af:39:c5:ae:
49:fa:e9:a5:ba:8c:cc:ba:05:3f:0c:f8:f2:10:16:
30:46:ad:12:bd:31:d0:bd:c9:e4:0d:c4:f1:47:c1:
57:16:10:42:79:90:5a:31:f8:0d:1b:62:ec:57:23:
b9:11:76:7f:3b:d8:dd:c7:f7:2d:77:24:6d:bd:4f:
d5:88:6d:7f:5a:a6:17:8e:55:b2:31:8d:d3:30:60:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2D:AC:42:87:62:8B:BD:49:08:D7:76:F6:0D:58:82:44:89:98:1F
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:d0::/44
Signature Algorithm: sha256WithRSAEncryption
73:0a:00:16:73:8a:a9:dc:78:3c:2f:53:10:51:ea:ba:95:d6:
a3:1d:1e:ea:bc:19:98:de:81:9e:a5:2e:1d:8f:c8:4b:73:4a:
e1:a9:eb:8e:15:2d:c9:1d:0e:2b:7c:44:25:0a:e1:ee:1f:cc:
6f:20:29:c3:49:c8:c8:f7:b4:b3:53:90:6a:94:d5:e7:a0:8f:
0d:25:46:a4:27:e9:f4:54:92:11:05:87:25:b9:62:e7:ac:02:
87:e1:9f:77:45:41:f4:1d:99:99:86:18:79:fc:f1:c8:08:6a:
fb:74:44:e1:d3:52:88:cf:69:fe:e2:ac:9b:11:1d:1a:e1:19:
ca:31:87:df:15:4d:86:22:78:8f:45:3a:9b:d9:15:70:ba:de:
63:c3:ce:eb:7c:e5:be:f4:27:24:b0:fe:03:c3:c9:cf:7c:ef:
25:3e:8b:3e:7b:a7:a0:36:6a:68:31:57:6c:43:73:90:ae:e8:
d4:99:a4:38:c6:45:26:a9:49:11:8c:58:98:4c:04:39:7e:5c:
a0:35:66:09:e1:55:9c:f8:a8:2e:b0:88:f3:9d:b5:04:a7:a9:
cd:4c:cf:b7:02:d5:01:c0:1b:14:c7:57:2e:73:61:1b:30:86:
40:30:22:21:e3:51:9d:de:11:03:1e:21:99:68:45:f0:e6:09:
4d:ac:0c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:23:17 2025 by rpki-client