Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313030303a3a2f33382d3438203d3e20323135333635.roa
File:                     326131343a3763303a313030303a3a2f33382d3438203d3e20323135333635.roa (raw, json)
Hash identifier:          NOPxHBxs7KSKuA0gv0zlUecZU2p/nDaTo+XLAC5oFS4=
Subject key identifier:   31:25:07:FD:BF:4D:F0:3A:AE:FE:FB:4C:62:9C:DE:A8:2C:2A:0C:45
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       6EE487D50B95B932936AD1530D02BBF125DA948E
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313030303a3a2f33382d3438203d3e20323135333635.roa
Signing time:             Tue 28 May 2024 15:04:29 +0000
ROA not before:           Tue 28 May 2024 14:59:29 +0000
ROA not after:            Tue 27 May 2025 15:04:29 +0000
asID:                     215365
IP address blocks:        2a14:7c0:1000::/38 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 21:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e4:87:d5:0b:95:b9:32:93:6a:d1:53:0d:02:bb:f1:25:da:94:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: May 28 14:59:29 2024 GMT
            Not After : May 27 15:04:29 2025 GMT
        Subject: CN=312507FDBF4DF03AAEFEFB4C629CDEA82C2A0C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:5d:09:03:71:4a:d5:d9:fe:0c:63:aa:61:
                    d9:f2:40:47:7e:dc:df:05:08:35:cb:72:0e:7f:4b:
                    99:e3:44:e9:50:04:38:11:09:4f:d5:48:90:3b:a8:
                    99:12:71:05:62:5f:4e:03:ce:ba:80:a1:a2:b2:99:
                    45:6d:99:b8:d9:4a:12:2e:04:2c:a9:8b:4f:fc:97:
                    44:40:a2:97:5d:0d:2f:4a:ba:30:ad:03:62:8e:93:
                    38:d8:a8:6b:ca:ed:a6:ed:50:cf:09:67:3a:fb:62:
                    28:c1:51:d9:43:d6:e7:e9:ef:60:07:82:70:71:f8:
                    4e:b9:2f:14:0d:6b:b0:c7:87:c3:0d:1d:06:0a:c7:
                    b5:4b:e2:8c:2c:5b:fb:2a:8c:ee:ea:d5:bd:5c:4c:
                    9c:b9:9e:c9:65:e5:e4:a7:88:ec:45:6c:70:c4:19:
                    6a:03:23:4d:1e:6d:1e:63:1d:36:31:60:9b:56:bf:
                    f2:d4:33:15:48:8b:cc:29:a9:b0:6c:55:b5:de:c6:
                    dd:57:1c:5b:7b:ba:0e:b8:c7:30:71:84:0e:d0:ae:
                    89:4f:48:91:1c:17:92:6c:58:69:77:02:4c:d9:a9:
                    dd:02:95:f6:c1:07:8b:10:cf:09:55:61:36:69:42:
                    7f:81:5f:6f:d4:36:ec:83:d7:88:6b:d2:55:6c:84:
                    45:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:25:07:FD:BF:4D:F0:3A:AE:FE:FB:4C:62:9C:DE:A8:2C:2A:0C:45
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313030303a3a2f33382d3438203d3e20323135333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         30:4f:48:db:db:d4:b9:17:18:07:05:6b:9a:70:e4:81:18:3a:
         0f:ab:e0:c8:0e:bc:63:56:b7:5b:16:b4:87:a0:67:01:b7:05:
         ed:da:ae:eb:d7:6e:e1:cf:f4:88:28:0e:a8:9f:0f:13:ab:25:
         9d:55:c8:a3:b8:3a:57:09:20:74:3d:ba:a5:fe:7e:88:d5:1a:
         1c:b2:2b:1a:a2:28:11:c9:ed:a9:73:f3:7f:85:80:d4:0d:3e:
         c5:04:d1:c8:0b:a0:e7:32:c3:a1:a4:08:f0:7d:16:36:67:66:
         c8:89:aa:9f:63:7c:a5:e4:4b:dd:6a:43:5d:01:1e:de:76:e4:
         7f:8b:ea:04:b1:5a:cc:4e:7e:12:d2:5b:5b:50:e3:0a:df:ed:
         d3:f0:db:19:8b:b5:a1:c9:05:04:69:d9:ed:1a:6e:86:02:11:
         6d:0f:2e:e5:99:f3:71:95:41:ac:24:e7:ec:13:af:58:26:b0:
         e8:de:86:3e:06:ac:22:20:e6:cd:8b:b5:5c:52:f7:56:fb:2c:
         1d:32:d0:00:bc:63:6c:a3:e7:b5:15:ea:dc:51:c3:66:3e:6a:
         da:e7:7c:20:0a:56:f4:cc:77:43:92:37:a2:59:74:3d:1a:27:
         da:6b:2b:15:d7:94:bb:20:34:d3:c5:f5:d2:e2:0f:48:5b:2e:
         28:6f:2a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----