Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a336130303a3a2f34302d3438203d3e203630323233.roa
File: 326131343a3763303a336130303a3a2f34302d3438203d3e203630323233.roa (raw, json)
Hash identifier: FGG6rovi9kRQcOdROpD+cKq4K8c2g9SXP21Acj69od4=
Subject key identifier: 6B:80:D4:99:10:26:81:CA:4B:0A:89:47:C5:E6:59:58:88:B6:F0:89
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 2D18E2A18B2B5361B30D06C8EA21386F90BCBEC4
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a336130303a3a2f34302d3438203d3e203630323233.roa
Signing time: Wed 28 Aug 2024 10:59:03 +0000
ROA not before: Wed 28 Aug 2024 10:54:03 +0000
ROA not after: Wed 27 Aug 2025 10:59:03 +0000
asID: 60223
IP address blocks: 2a14:7c0:3a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:18:e2:a1:8b:2b:53:61:b3:0d:06:c8:ea:21:38:6f:90:bc:be:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Aug 28 10:54:03 2024 GMT
Not After : Aug 27 10:59:03 2025 GMT
Subject: CN=6B80D499102681CA4B0A8947C5E6595888B6F089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:c8:8f:71:89:61:af:ec:c2:de:01:af:95:
93:aa:73:5e:5a:8d:41:e2:9a:71:ab:fe:7c:b9:76:
bf:50:b1:18:0a:b1:d0:23:57:a5:74:a3:7a:2e:cc:
63:86:5e:82:53:40:6b:36:d4:9e:16:33:43:d4:c8:
21:2e:c1:30:01:cd:58:e8:f1:d5:dc:72:40:3b:17:
37:f2:0f:c4:d5:f9:1e:07:3b:ae:e8:04:75:1c:d3:
31:4d:dd:ab:c1:91:e1:15:80:5b:42:73:0b:e4:c6:
0b:95:8e:f8:f6:5c:c6:a0:6b:28:d7:f7:13:e8:aa:
ec:40:19:76:c6:39:da:e3:c6:01:48:20:19:35:8b:
93:46:1f:c9:1a:90:4e:15:16:a8:80:7d:bc:62:35:
af:6f:6c:0e:0e:85:d3:a2:bd:0f:28:82:fe:8b:55:
2e:1c:4e:29:3b:81:bb:f3:4b:2b:27:b6:c2:06:90:
d1:ff:f4:92:c2:96:b1:40:03:3c:ec:e3:38:c4:0a:
2b:1c:ca:a2:37:ce:86:c3:f7:0b:2d:fd:8c:78:bb:
e5:5a:ba:7e:9f:ca:9b:47:18:7e:b5:f2:93:9b:45:
52:ca:0c:da:b8:1e:bd:78:77:fd:e6:6b:6a:73:9e:
cd:0d:bd:47:9e:3a:76:bb:a5:f5:26:7c:dc:ff:ac:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:80:D4:99:10:26:81:CA:4B:0A:89:47:C5:E6:59:58:88:B6:F0:89
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a336130303a3a2f34302d3438203d3e203630323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:3a00::/40
Signature Algorithm: sha256WithRSAEncryption
57:42:bd:a6:cb:cb:44:d6:a2:20:05:ab:89:db:3a:6c:1f:a6:
86:76:ed:8d:75:5d:33:1b:ef:80:c0:f6:7e:a4:8e:8a:f4:3f:
5c:b7:45:eb:81:fe:d2:42:4b:71:36:3a:4e:a6:38:20:aa:e4:
ce:e7:c6:09:79:cc:45:c0:f5:71:dc:84:31:a5:ee:fd:20:dd:
c8:0e:1d:3a:b3:30:5a:b8:85:09:2d:94:5f:40:57:de:ad:3b:
67:76:2a:45:40:5b:dd:b6:7c:e8:b2:08:da:51:76:98:00:00:
5a:71:40:25:c8:8d:a2:83:ef:81:4d:df:56:4a:69:3c:32:a1:
81:12:7d:86:ee:73:5a:eb:ae:8c:27:c7:ee:c2:70:9b:ce:28:
64:a4:99:2c:c8:77:cc:00:37:51:4f:45:b5:d6:23:20:a6:26:
9d:cf:2f:0a:c5:e9:d0:0c:72:c3:7e:bb:25:81:b7:de:71:2f:
4f:3f:9a:8d:eb:93:e5:50:9d:a6:3d:3f:59:94:0d:fe:79:96:
03:f2:c8:44:14:7c:95:cd:a9:4c:0a:eb:d5:de:0e:1c:db:e6:
1f:6e:3e:24:20:73:ab:23:03:1b:e4:58:e6:0f:87:a9:9d:77:
3e:19:98:52:4a:d5:7b:28:15:4c:4b:ce:b7:c5:c4:0e:e4:fb:
7c:3c:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:27 2024 by rpki-client on console-fra.rpki-client.org