Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a653030303a3a2f33362d3336203d3e203531333936.roa
File: 326131343a3763303a653030303a3a2f33362d3336203d3e203531333936.roa (raw, json)
Hash identifier: 3fEf0C4boH6WR4MH2/jf1TaPoOORwjsDpzy1QGA92Nw=
Subject key identifier: D3:E2:80:4E:EF:10:91:1A:B9:38:30:A6:7E:7E:D8:A2:45:D9:CE:B8
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 50661D299572EF2EF27B2A1C08E0E08B1D90128D
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a653030303a3a2f33362d3336203d3e203531333936.roa
Signing time: Wed 01 Oct 2025 14:43:51 +0000
ROA not before: Wed 01 Oct 2025 14:38:51 +0000
ROA not after: Wed 30 Sep 2026 14:43:51 +0000
asID: 51396
IP address blocks: 2a14:7c0:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:66:1d:29:95:72:ef:2e:f2:7b:2a:1c:08:e0:e0:8b:1d:90:12:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Oct 1 14:38:51 2025 GMT
Not After : Sep 30 14:43:51 2026 GMT
Subject: CN=D3E2804EEF10911AB93830A67E7ED8A245D9CEB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:fb:0b:4c:9d:d6:62:5e:f2:96:64:bd:6e:
93:c3:78:5f:90:43:a6:31:cd:86:ae:22:e7:c1:03:
1d:e0:ee:ef:f5:a5:2f:5c:a9:9e:08:71:87:9f:8f:
a2:a4:0d:56:e6:48:2b:69:70:5f:43:0a:0b:45:19:
f3:7a:00:ca:5e:97:32:38:8f:5c:50:9c:e7:25:e6:
9a:9f:d4:01:f5:8e:68:09:da:9a:34:a4:f3:63:99:
f3:c9:98:1e:76:a9:77:ec:61:c0:fd:4a:d4:bb:78:
b3:e0:a4:4a:39:3d:2d:a1:fa:4b:37:01:ec:48:3d:
56:c9:34:8c:a6:24:c6:6f:03:29:be:77:6c:dc:32:
5c:32:90:8a:d5:56:c3:0d:a6:91:60:a7:c5:c8:22:
53:d8:5d:5d:81:40:22:44:0a:50:71:03:0b:d6:c2:
b9:e6:be:a3:cb:ca:53:1b:60:5e:79:3b:c0:a7:1c:
a4:d6:88:29:87:1d:6a:04:44:34:79:6a:4d:10:fb:
fc:a5:69:d1:47:94:c2:80:09:2b:e1:62:a3:d1:11:
f6:17:e0:31:a5:03:2d:6a:a9:e8:22:0e:bf:9c:11:
c6:61:b5:89:58:40:ec:80:76:95:70:51:c3:e8:f0:
55:8a:41:c6:bc:5f:e0:bf:f3:95:7a:c9:ef:7f:e2:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E2:80:4E:EF:10:91:1A:B9:38:30:A6:7E:7E:D8:A2:45:D9:CE:B8
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a653030303a3a2f33362d3336203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
2c:bb:12:6a:a0:82:ca:64:b2:dd:54:14:83:ad:76:e3:c0:38:
0b:1b:96:dd:79:37:c9:8c:34:31:64:96:2f:55:e2:4b:72:c5:
48:c1:42:8f:b5:0a:01:06:c4:8d:e2:d1:eb:5c:b9:95:b9:6c:
1d:6f:57:52:8a:f8:48:43:06:33:31:e3:e5:bd:6b:89:35:d8:
89:f7:9c:0a:e5:47:60:09:f3:8a:6b:0c:a3:7e:ee:8d:bf:7e:
e6:ed:60:4d:87:84:ab:fa:49:39:0a:d4:ed:49:5d:c9:a0:66:
18:44:fc:59:49:ca:64:d4:cd:e3:2f:3d:5d:8f:fc:42:47:87:
f6:0f:4d:e5:75:62:d0:f5:7b:37:1b:11:2e:f4:84:2e:ec:57:
e8:9c:c5:60:d7:34:98:eb:58:00:b9:d9:46:95:d8:03:0b:6d:
03:7b:b9:a6:72:c0:97:a5:52:18:56:c9:fe:b5:2d:84:6b:44:
b1:49:4c:87:77:9d:e9:23:ee:d7:55:9c:c9:49:dd:70:3f:82:
01:97:9b:dc:57:d2:87:82:e9:50:84:85:54:a0:56:0b:e1:2c:
ea:96:da:98:23:37:fe:30:d6:fe:53:e8:41:c5:aa:7a:16:4c:
7e:b1:58:c7:e0:0e:20:e5:82:00:1f:90:1f:cf:de:bc:4a:fd:
36:8f:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:39:30 2025 by rpki-client