Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a633030303a3a2f33352d3438203d3e20323134383334.roa
File: 326131343a3763303a633030303a3a2f33352d3438203d3e20323134383334.roa (raw, json)
Hash identifier: +eM8ixZWFPoZAPm+UbrG/nIV5eRjGZQPnH9xA6SvyWs=
Subject key identifier: DE:A1:8B:7C:22:2C:D3:4F:96:B8:64:CE:59:EB:5B:44:36:92:16:7A
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 60ACB4F0C31F4AD8EDDBDE6C32A4CC272F2B64C4
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a633030303a3a2f33352d3438203d3e20323134383334.roa
Signing time: Sat 03 Aug 2024 20:16:27 +0000
ROA not before: Sat 03 Aug 2024 20:11:27 +0000
ROA not after: Sat 02 Aug 2025 20:16:27 +0000
asID: 214834
IP address blocks: 2a14:7c0:c000::/35 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ac:b4:f0:c3:1f:4a:d8:ed:db:de:6c:32:a4:cc:27:2f:2b:64:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Aug 3 20:11:27 2024 GMT
Not After : Aug 2 20:16:27 2025 GMT
Subject: CN=DEA18B7C222CD34F96B864CE59EB5B443692167A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:44:37:a4:ce:fe:cc:0f:19:f9:67:2f:5a:
ef:35:41:b1:e2:8b:0c:f7:1a:cf:39:89:13:00:43:
6a:bf:59:ab:bf:41:a1:2e:5e:45:bc:59:cc:af:f5:
9c:8b:61:38:0a:f8:4d:79:1d:3a:1e:a5:47:16:d6:
07:0b:f0:74:f6:6a:ba:4b:3c:46:ea:96:60:8e:66:
25:4c:62:2d:1c:71:6f:84:88:3c:c6:41:ff:eb:bd:
8b:39:4d:fc:09:5b:6e:3c:66:c6:b0:e2:76:0a:01:
df:c2:39:26:6d:08:81:1d:3d:95:79:47:27:21:66:
6b:38:c6:d4:84:78:a1:3e:0e:a5:40:77:3c:8f:4e:
5c:b7:ad:82:01:2f:44:eb:2d:c8:28:18:25:c3:5a:
95:35:b9:39:3f:83:96:69:9c:68:25:ba:65:32:c6:
ec:42:ca:a6:88:63:33:2f:45:86:0c:5b:4c:0d:15:
57:32:0b:b1:6e:43:dd:14:fc:92:87:a6:86:94:d1:
a3:45:e7:74:b3:2f:fb:08:bf:8a:74:5e:23:4b:36:
0c:36:e1:e4:ae:77:e2:9b:08:fa:be:e7:61:16:60:
3a:a5:2f:32:c3:3f:9e:fd:66:c3:e5:13:95:97:75:
fd:63:ae:ea:01:74:a5:b2:4d:e3:81:22:6b:19:af:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A1:8B:7C:22:2C:D3:4F:96:B8:64:CE:59:EB:5B:44:36:92:16:7A
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a633030303a3a2f33352d3438203d3e20323134383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:c000::/35
Signature Algorithm: sha256WithRSAEncryption
84:63:37:b4:b6:53:a5:3f:b7:8f:dc:5f:1f:e5:b2:7f:7e:f7:
6d:54:c0:7e:14:61:8a:2a:a8:a8:16:90:55:84:e1:f5:5c:bb:
77:12:72:5d:82:72:ad:89:10:7e:4a:6d:cf:45:74:69:e6:6e:
98:8e:8a:29:f3:2c:e3:04:17:c1:4c:11:f9:82:20:fb:f0:46:
af:9f:04:b6:56:60:4a:96:81:3d:68:d1:06:5c:61:e2:0c:52:
ed:0b:ff:83:d4:97:c6:fc:9d:4e:12:27:b4:29:36:af:eb:88:
10:78:07:31:d9:c0:44:ab:b0:d8:9d:a8:e9:c4:57:06:d5:f6:
ad:fd:57:c0:9d:12:f9:22:8f:99:76:96:d3:df:10:73:78:c4:
3c:e5:96:7d:5f:fa:53:5f:cd:40:48:8d:0c:17:02:52:f1:89:
97:5a:0b:92:cf:d8:96:4a:5c:d7:01:27:7b:58:4d:1d:5c:1b:
d2:5e:99:21:e8:f1:4b:33:f1:de:37:dd:3a:3e:26:12:c1:c5:
ec:75:96:18:35:53:1d:66:6b:e5:66:ca:12:58:54:f9:de:99:
bd:36:c2:76:3e:fe:73:6a:f7:d0:34:cd:c3:d5:8a:cd:b6:48:
10:cc:47:c0:71:a2:2b:37:d4:84:8a:be:8a:08:ff:a2:0c:6c:
31:8b:32:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:25 2024 by rpki-client on console-fra.rpki-client.org