Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa
File: 326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa (raw, json)
Hash identifier: PSoOSEfw0oZ2RdAZs2WpD6XgQ889tzdjTrBSkn4G3c0=
Subject key identifier: CB:A2:7A:8D:2B:94:7E:15:FC:55:AA:2C:BE:E3:C6:3A:75:1E:6E:8C
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 739395259C8963671DEF65A84CE5ADB8FB4B7C37
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa
Signing time: Tue 28 May 2024 15:02:55 +0000
ROA not before: Tue 28 May 2024 14:57:55 +0000
ROA not after: Tue 27 May 2025 15:02:55 +0000
asID: 215292
IP address blocks: 2a14:7c0:1800::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:93:95:25:9c:89:63:67:1d:ef:65:a8:4c:e5:ad:b8:fb:4b:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: May 28 14:57:55 2024 GMT
Not After : May 27 15:02:55 2025 GMT
Subject: CN=CBA27A8D2B947E15FC55AA2CBEE3C63A751E6E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:d4:19:00:5c:d0:e9:19:78:64:96:c3:ba:
4e:61:3b:8d:56:ad:2b:86:cc:de:65:82:32:f8:a5:
eb:3a:d1:8e:27:b5:b3:c3:c1:97:16:92:8e:50:94:
3f:ff:eb:a9:e3:e7:fe:6f:da:99:79:8d:7e:d3:2c:
2d:ff:05:b9:74:49:53:c9:a5:fe:f1:e9:f1:7d:d8:
00:27:d2:6c:fd:7b:a2:3b:7f:aa:f0:10:6e:0d:3c:
e0:e1:4c:c4:da:57:4b:a6:43:17:62:1a:24:37:f5:
0c:51:c6:49:e6:74:6c:24:ae:7b:29:6f:7d:dd:80:
b7:d8:8a:9e:ec:eb:3a:68:80:96:d6:2b:41:5b:c9:
b6:1f:bc:25:ea:34:07:39:65:3d:9a:d2:14:f0:ee:
cb:07:ef:40:30:0b:12:43:98:7e:5c:5c:58:85:42:
f5:5b:ff:c6:68:00:82:fe:06:71:53:a3:1c:4d:73:
88:86:22:54:ff:2f:98:eb:9e:34:6c:93:d8:05:65:
fb:4d:92:67:1e:f6:76:69:59:54:bb:f1:40:91:f9:
ec:ee:b5:f3:24:ed:80:fe:da:b1:12:6f:ac:1d:ca:
a3:29:38:ae:41:f0:a7:45:84:85:d3:8c:2b:a5:b5:
df:8c:88:b3:43:52:02:a3:cb:ae:6b:34:2e:ca:69:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A2:7A:8D:2B:94:7E:15:FC:55:AA:2C:BE:E3:C6:3A:75:1E:6E:8C
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1800::/38
Signature Algorithm: sha256WithRSAEncryption
0b:3e:5b:56:7d:12:f8:21:44:df:f5:39:27:dc:f9:0f:b0:7f:
35:31:c2:dd:3a:e3:a2:65:d1:e1:c8:ed:dd:c4:d6:90:73:1a:
b5:59:c6:b8:3c:7f:ad:31:16:da:f1:dd:41:d4:dc:b4:2f:b1:
6a:c0:54:79:2c:91:cc:fc:8d:e2:32:b5:7d:36:1b:a2:8e:fe:
0d:99:42:3d:4d:35:6f:08:37:62:aa:f6:11:bd:57:18:5c:18:
57:7b:74:a8:9e:8d:48:19:ae:ff:6d:f3:8b:0f:13:95:38:89:
79:a4:2e:94:a4:1b:38:de:41:2c:33:49:c2:f4:61:6b:a1:ba:
eb:47:be:b2:70:2c:b5:8b:0f:a1:ce:89:51:c3:53:4a:fd:b4:
67:c6:ed:4b:bf:6b:62:e7:7e:b2:6f:7c:b8:99:25:11:01:9f:
bd:5e:88:48:a7:a4:fc:fb:a5:39:25:f9:21:f4:49:d2:62:00:
39:0c:44:21:76:4a:43:e9:5f:2f:4f:67:8d:1e:09:be:75:03:
10:54:f5:d8:bd:f9:07:ae:6a:a7:0f:4c:43:10:82:a6:4c:a4:
1f:d3:51:69:8f:fb:c7:68:78:4c:03:ef:60:2c:8a:6a:ec:59:
d6:87:d2:35:76:d1:d1:30:2e:15:b6:52:93:75:31:08:b4:6d:
cc:d6:9a:7e
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUc5OVJZyJY2cd72WoTOWtuPtLfDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNDA1MjgxNDU3NTVaFw0yNTA1MjcxNTAyNTVaMDMxMTAvBgNV
BAMTKENCQTI3QThEMkI5NDdFMTVGQzU1QUEyQ0JFRTNDNjNBNzUxRTZFOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7tQZAFzQ6Rl4ZJbDuk5hO41W
rSuGzN5lgjL4pes60Y4ntbPDwZcWko5QlD//66nj5/5v2pl5jX7TLC3/Bbl0SVPJ
pf7x6fF92AAn0mz9e6I7f6rwEG4NPODhTMTaV0umQxdiGiQ39QxRxknmdGwkrnsp
b33dgLfYip7s6zpogJbWK0FbybYfvCXqNAc5ZT2a0hTw7ssH70AwCxJDmH5cXFiF
QvVb/8ZoAIL+BnFToxxNc4iGIlT/L5jrnjRsk9gFZftNkmce9nZpWVS78UCR+ezu
tfMk7YD+2rESb6wdyqMpOK5B8KdFhIXTjCultd+MiLNDUgKjy65rNC7KaSehAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUy6J6jSuUfhX8VaosvuPGOnUebowwHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMzI2MTMxMzQzYTM3
NjMzMDNhMzEzODMwMzAzYTNhMmYzMzM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMjM5
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgIqFAfAGDANBgkqhkiG9w0BAQsFAAOCAQEACz5bVn0S+CFE
3/U5J9z5D7B/NTHC3TrjomXR4cjt3cTWkHMatVnGuDx/rTEW2vHdQdTctC+xasBU
eSyRzPyN4jK1fTYboo7+DZlCPU01bwg3Yqr2Eb1XGFwYV3t0qJ6NSBmu/23ziw8T
lTiJeaQulKQbON5BLDNJwvRha6G660e+snAstYsPoc6JUcNTSv20Z8btS79rYud+
sm98uJklEQGfvV6ISKek/PulOSX5IfRJ0mIAOQxEIXZKQ+lfL09njR4JvnUDEFT1
2L35B65qpw9MQxCCpkykH9NRaY/7x2h4TAPvYCyKauxZ1ofSNXbR0TAuFbZSk3Ux
CLRtzNaafg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 13:13:46 2024 by rpki-client on console-fra.rpki-client.org