Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a316330303a3a2f33392d3438203d3e20323135353633.roa
File: 326131343a3763303a316330303a3a2f33392d3438203d3e20323135353633.roa (raw, json)
Hash identifier: 8OeMkpfPrj4yIqS8tE7Qqz34x5VeTtA2eYpNXrJ3BwU=
Subject key identifier: B6:26:4C:BA:5F:20:56:57:E2:6F:DE:5D:8F:8F:33:4F:13:26:0F:00
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 6B14131506B8AC0733E400CC818B052C522DA386
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a316330303a3a2f33392d3438203d3e20323135353633.roa
Signing time: Tue 28 May 2024 15:07:55 +0000
ROA not before: Tue 28 May 2024 15:02:55 +0000
ROA not after: Tue 27 May 2025 15:07:55 +0000
asID: 215563
IP address blocks: 2a14:7c0:1c00::/39 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 21:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:14:13:15:06:b8:ac:07:33:e4:00:cc:81:8b:05:2c:52:2d:a3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: May 28 15:02:55 2024 GMT
Not After : May 27 15:07:55 2025 GMT
Subject: CN=B6264CBA5F205657E26FDE5D8F8F334F13260F00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:16:ff:64:23:b2:89:94:e9:30:fd:1b:90:
7c:06:40:c4:39:75:4a:a0:ef:b7:cc:d6:f9:0f:b0:
85:46:15:2d:d4:d8:c0:bb:3a:23:22:cb:73:8a:94:
d7:99:70:42:12:f9:94:3e:a7:06:17:ee:ff:6d:70:
05:20:da:fd:ac:11:48:2c:e5:34:dc:85:4e:b7:4d:
94:d7:ec:bb:43:fb:1b:59:b2:8e:e6:10:38:fd:68:
87:6c:ea:fc:4d:6a:04:cf:1f:02:5d:79:42:ad:4f:
c5:fc:7f:52:86:0c:4b:90:40:be:14:13:b0:54:ad:
58:f2:60:4d:aa:f8:f0:7e:b0:a2:aa:70:4d:4a:70:
bf:6b:3e:cb:aa:87:c4:e7:fd:90:6e:7e:74:b7:62:
a0:46:b7:66:73:e3:26:06:57:67:f6:1c:99:82:d7:
e0:bc:c1:1e:50:99:cc:22:70:8c:ed:c3:5a:46:24:
ac:fd:f5:8f:cd:0a:e3:23:bf:3a:93:e9:14:90:78:
3c:bb:d2:51:d3:86:6a:19:4a:17:9a:15:52:7b:03:
48:55:01:85:09:7a:3c:8e:a9:0b:aa:ca:f4:df:9f:
72:c2:55:5d:90:c5:d4:66:be:16:8c:54:21:18:9f:
dc:34:c7:4b:80:3c:52:70:17:5e:13:39:56:60:ea:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:26:4C:BA:5F:20:56:57:E2:6F:DE:5D:8F:8F:33:4F:13:26:0F:00
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a316330303a3a2f33392d3438203d3e20323135353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1c00::/39
Signature Algorithm: sha256WithRSAEncryption
05:25:7d:44:dc:c2:9f:95:85:b5:b8:9d:36:3a:5f:48:c7:11:
80:06:a0:98:60:b5:f8:2f:42:f9:52:af:83:2d:bb:80:e5:6d:
55:22:45:34:e5:97:18:a6:ed:86:75:da:30:c0:94:d6:54:09:
52:3c:7f:65:2a:9c:fb:cc:ec:ad:81:54:57:3f:7b:63:98:c5:
2f:74:c4:38:62:4d:2a:5a:9e:ca:5c:20:7b:ad:1c:f5:a5:2c:
38:c9:06:21:c8:bf:33:7f:c1:5e:4f:f7:2d:6f:39:6c:f2:1d:
d7:ef:4f:9b:98:c1:30:e6:95:7b:6b:c9:10:ca:c5:10:4b:66:
04:14:76:7a:66:58:1f:8a:e3:dc:8b:e2:6e:c4:d8:05:15:e6:
3a:73:89:ff:12:37:25:c0:63:dd:91:ac:ea:08:b3:31:c3:87:
16:42:65:b7:fd:50:91:30:90:03:7e:2c:b5:e4:90:ae:bc:bb:
c7:56:44:a2:00:07:42:57:b3:46:5c:b1:b8:92:ed:ea:5b:2b:
a7:2a:d9:2c:94:40:e5:2f:b2:43:af:78:9b:e5:55:e2:5e:8f:
ca:f0:16:27:62:5c:1f:69:f0:7e:db:ad:f8:86:f2:80:b4:91:
d0:6e:d0:74:2d:be:d0:c0:83:43:6b:2f:09:a1:47:cf:b6:1e:
34:58:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 00:07:29 2024 by rpki-client on console-fra.rpki-client.org