Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763363a3a2f33322d3332203d3e20323133393933.roa
File: 326131343a3763363a3a2f33322d3332203d3e20323133393933.roa (raw, json)
Hash identifier: Cg4f0PIK/7Y+bYLA5KjIuh0d+90nPyot/j/ZBCxZH6w=
Subject key identifier: 37:0D:3D:BE:27:13:9E:5D:9E:9A:16:B5:43:93:4B:4A:EE:51:1B:41
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 705A16BCDDD49A6E242B15DB8303C260A1F830BD
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763363a3a2f33322d3332203d3e20323133393933.roa
Signing time: Tue 30 Sep 2025 19:43:50 +0000
ROA not before: Tue 30 Sep 2025 19:38:50 +0000
ROA not after: Tue 29 Sep 2026 19:43:50 +0000
asID: 213993
IP address blocks: 2a14:7c6::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:5a:16:bc:dd:d4:9a:6e:24:2b:15:db:83:03:c2:60:a1:f8:30:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Sep 30 19:38:50 2025 GMT
Not After : Sep 29 19:43:50 2026 GMT
Subject: CN=370D3DBE27139E5D9E9A16B543934B4AEE511B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:98:f5:be:3a:82:4b:50:ed:9a:fa:83:ee:
1e:02:02:90:bc:37:87:3b:12:97:34:69:00:23:58:
e7:0b:94:02:25:cf:51:f3:ca:f7:82:da:44:b5:77:
58:b0:73:a7:e0:5f:7a:b4:83:8e:cc:30:9a:ce:08:
b8:01:6c:dd:94:4e:e7:6c:1c:5f:b9:7e:c0:d8:71:
8e:70:28:b0:0f:12:66:e9:84:57:5c:c7:1a:00:46:
cf:fb:25:de:27:86:11:ac:5d:35:c5:9f:fb:43:71:
2c:f1:19:09:54:17:be:25:d0:f3:9e:f0:0d:61:b3:
fa:12:31:38:ca:ea:f0:a1:f3:5d:79:dd:a1:fd:78:
87:1e:9f:13:eb:a4:7d:9b:b7:a2:a2:12:45:47:aa:
1c:db:c1:81:ff:3e:fd:5f:ca:f1:0a:2a:1f:11:c1:
54:ca:72:5f:d2:6f:ba:93:de:1b:71:04:53:16:96:
d5:77:97:a5:00:99:c2:62:66:31:46:59:08:ab:7c:
60:3a:21:64:dc:51:c2:c2:ea:51:8f:12:4c:15:86:
c7:1b:28:8b:9f:65:1d:6b:e2:f6:11:2f:f0:67:0f:
5d:47:aa:ee:a8:6f:2e:bf:76:44:1a:35:1d:b0:85:
c8:2b:6d:81:23:17:b6:40:85:5d:30:6b:88:b8:38:
e3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0D:3D:BE:27:13:9E:5D:9E:9A:16:B5:43:93:4B:4A:EE:51:1B:41
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763363a3a2f33322d3332203d3e20323133393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c6::/32
Signature Algorithm: sha256WithRSAEncryption
88:2d:c3:b3:2d:1c:8d:26:f6:d1:56:4c:5c:f6:0e:67:40:b4:
5b:1d:88:fb:53:d5:36:8e:f0:d6:7c:b4:ea:77:52:00:73:bc:
b0:cb:80:a1:bf:da:5f:49:2d:87:90:3d:08:ed:eb:f9:c3:d4:
b5:7a:6d:65:b4:a1:e1:aa:7c:a2:b7:b7:67:cf:ea:a8:73:0e:
e7:f2:50:b9:d2:46:e4:b3:25:3b:13:1c:24:ef:39:83:aa:69:
42:5f:01:0a:72:87:63:ef:18:34:e0:13:8b:b8:4c:0a:d4:2a:
bb:16:c6:dd:3c:f6:5f:e1:67:06:81:ad:87:8c:6f:4b:bc:0f:
31:ff:41:5f:7b:6d:f3:2f:c9:60:d9:5e:d9:ab:b6:6c:60:88:
15:9a:2c:28:6b:ba:e6:48:82:50:3f:3b:df:6e:c3:c7:cb:b4:
5e:db:f8:8d:a9:da:b3:96:f4:c8:69:51:8a:99:c5:ee:39:65:
85:f1:d7:38:7d:99:10:42:91:a0:13:98:bf:2d:69:11:19:3f:
a3:79:aa:fc:92:77:49:05:af:01:ed:b1:c0:70:98:47:69:34:
b6:6b:04:11:8a:ed:72:43:54:77:09:c4:fd:d1:37:01:00:63:
de:45:f3:4f:31:03:de:82:35:3c:b6:04:af:e3:7f:3f:a1:22:
78:ee:81:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:34 2025 by rpki-client