Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763353a3a2f33322d3332203d3e20323133393933.roa
File: 326131343a3763353a3a2f33322d3332203d3e20323133393933.roa (raw, json)
Hash identifier: Sn5VrnrHSMgqrHqex+5ZOcPr/z6tIsNgBalOzWZuiQA=
Subject key identifier: E3:0B:8A:16:3B:67:C1:E3:8F:80:AB:E7:B8:9A:62:12:02:71:82:CB
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 24737CF08E7D69BFED3A89467CADEE7AC6915E57
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763353a3a2f33322d3332203d3e20323133393933.roa
Signing time: Tue 30 Sep 2025 19:43:51 +0000
ROA not before: Tue 30 Sep 2025 19:38:51 +0000
ROA not after: Tue 29 Sep 2026 19:43:51 +0000
asID: 213993
IP address blocks: 2a14:7c5::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:73:7c:f0:8e:7d:69:bf:ed:3a:89:46:7c:ad:ee:7a:c6:91:5e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Sep 30 19:38:51 2025 GMT
Not After : Sep 29 19:43:51 2026 GMT
Subject: CN=E30B8A163B67C1E38F80ABE7B89A6212027182CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:9e:ae:32:2f:6a:c4:d7:49:a8:37:27:2f:
8f:a7:de:9f:2a:1b:18:ee:76:5e:9f:d0:03:14:5d:
20:37:4c:c8:be:64:fe:49:98:ac:ef:b2:95:78:63:
13:35:03:c6:b1:1a:e3:44:8b:e6:b4:28:cb:68:b6:
ec:36:07:af:50:a8:27:d2:cf:5c:46:2b:c3:9b:0e:
1c:fc:5e:df:0b:e5:76:4f:d8:fa:42:05:f1:57:80:
e1:2f:32:95:7d:5a:2a:da:af:54:df:ec:14:62:4d:
64:ae:73:a2:63:1a:14:9c:e9:b4:2f:06:b8:95:3c:
4e:39:94:7b:9f:a6:32:64:1a:aa:44:94:8b:23:06:
5c:25:e0:84:e7:c7:e2:a5:41:f1:7b:1a:51:9b:6c:
3c:5f:8b:02:03:0e:5c:39:38:0f:92:72:4e:2a:4d:
b5:12:c1:75:9c:c7:16:b4:67:7b:91:39:a4:2e:db:
b8:c3:9b:34:a2:a7:b9:52:30:f6:09:f7:b8:13:b5:
fe:77:e5:84:8f:5a:15:95:19:8d:06:36:97:49:dc:
20:02:b6:87:4d:9e:5e:d0:97:62:ae:6a:e7:8d:a6:
30:c0:fd:e6:87:c4:6b:43:e2:8d:ac:c3:e5:19:cb:
01:d7:99:2c:81:88:55:9a:67:f1:e6:ec:d3:ac:a7:
45:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0B:8A:16:3B:67:C1:E3:8F:80:AB:E7:B8:9A:62:12:02:71:82:CB
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763353a3a2f33322d3332203d3e20323133393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c5::/32
Signature Algorithm: sha256WithRSAEncryption
30:d8:40:96:5a:52:d3:bf:86:47:75:8b:ea:22:b3:21:94:78:
da:f7:c4:80:72:a3:bb:af:12:9c:6a:3d:ee:91:ee:47:4b:6b:
13:41:6a:b0:fb:68:96:e5:f8:19:da:73:30:50:1e:61:8a:19:
87:4f:e6:19:8a:fa:75:aa:e0:8f:f0:d4:db:07:a1:34:6e:eb:
ca:93:12:39:04:b6:75:94:c2:64:c8:d8:11:76:b5:89:b4:c5:
27:5a:92:e5:0c:82:c4:07:7c:65:0f:3e:e2:64:ed:33:77:e1:
1c:ba:40:07:27:a7:d8:ac:8e:fb:f1:ee:4a:ed:a3:e7:0f:cf:
75:a5:a8:e3:81:28:e7:64:18:0f:0e:0a:95:14:9a:39:4d:28:
1e:50:36:57:eb:f5:ca:20:0d:f5:71:32:62:45:4c:d3:15:e0:
1d:0d:ed:ff:cb:b5:c5:dc:58:43:e8:bf:bf:bb:ec:80:e6:3b:
7d:db:b4:a7:a0:b1:a7:2a:89:44:07:6c:42:86:8d:ac:34:02:
e9:ef:46:f8:a9:2f:25:7c:39:27:39:fa:9e:dc:70:fa:f1:02:
b8:ef:70:40:93:55:d8:50:c9:c3:e7:f2:8c:f0:9d:49:30:de:
09:fb:76:c2:2c:87:61:bd:68:ef:6e:ad:bf:b6:56:26:91:c1:
df:e5:55:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:41:25 2025 by rpki-client