Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a336130303a3a2f34302d3438203d3e203630323233.roa
File: 326131343a3763303a336130303a3a2f34302d3438203d3e203630323233.roa (raw, json)
Hash identifier: 9Tl+VriXRXOSyJMy6oWBtN76Kp6TZUB8a9qpftepcJs=
Subject key identifier: 9C:A3:03:67:71:F6:69:73:73:F5:FE:09:5C:53:F4:78:CB:CE:05:B4
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 11E4E07277144B4E83C84BA14525BD24569525BB
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a336130303a3a2f34302d3438203d3e203630323233.roa
Signing time: Mon 25 Aug 2025 07:38:19 +0000
ROA not before: Mon 25 Aug 2025 07:33:19 +0000
ROA not after: Mon 24 Aug 2026 07:38:19 +0000
asID: 60223
IP address blocks: 2a14:7c0:3a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 17:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e4:e0:72:77:14:4b:4e:83:c8:4b:a1:45:25:bd:24:56:95:25:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Aug 25 07:33:19 2025 GMT
Not After : Aug 24 07:38:19 2026 GMT
Subject: CN=9CA3036771F6697373F5FE095C53F478CBCE05B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:e4:7d:84:61:7d:2c:96:29:8d:6e:83:fd:
19:42:e6:51:21:9b:1c:ff:f6:bf:8d:ac:56:11:7f:
f1:60:67:f1:66:75:4f:92:2f:71:26:0f:13:05:ff:
50:b3:a5:06:ab:0e:57:92:ef:b2:66:10:72:bb:e4:
ed:8f:60:14:b1:61:0d:13:8d:0e:c9:43:3b:b3:67:
3f:68:90:c0:d5:11:3a:b8:05:9f:45:cd:03:c8:1d:
93:b6:91:27:08:4e:77:b2:2d:8f:cd:b1:90:29:5e:
a8:95:cf:3f:c7:04:f4:87:85:03:60:0f:95:e5:7c:
50:a4:3b:a6:03:d6:43:b9:70:6e:83:63:71:67:f6:
f5:67:1c:64:4e:02:f7:f9:02:f0:cd:da:fb:68:b8:
0c:0a:db:28:2d:e4:08:6e:6d:0a:85:78:25:b2:bb:
7c:e9:05:0d:6f:59:38:50:26:56:ea:4c:0c:01:7a:
4f:22:5e:b6:c0:fa:5e:97:b1:09:72:0a:20:a1:35:
05:1c:72:b4:f4:5b:0e:05:91:35:fb:d5:de:5b:d3:
5a:6b:df:e1:44:55:43:44:97:b4:76:8e:cf:96:6d:
4c:61:e6:68:e2:b7:92:88:aa:6d:49:d6:7a:ed:66:
19:9c:b9:bc:00:59:84:47:c3:b2:0b:a2:7a:be:dd:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A3:03:67:71:F6:69:73:73:F5:FE:09:5C:53:F4:78:CB:CE:05:B4
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a336130303a3a2f34302d3438203d3e203630323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:3a00::/40
Signature Algorithm: sha256WithRSAEncryption
34:f2:25:0a:bd:88:68:d5:6e:68:3b:83:11:2f:c1:f6:7d:2d:
59:09:13:24:20:15:b2:59:92:eb:b7:66:de:ed:cd:e8:39:71:
d6:9c:8c:70:d4:cd:d8:63:03:6e:2d:d1:58:71:10:5a:61:79:
03:c6:ed:a2:3c:1c:38:ba:8a:0d:6c:fa:40:42:be:2b:a9:c4:
e5:5c:e5:2d:e4:d3:5b:c9:0c:80:67:fe:d1:5d:b2:68:b1:e2:
b8:d5:a7:6e:29:cc:83:dd:7e:d6:9c:e0:f5:a0:ea:fe:ec:e6:
c9:9f:96:c9:1b:12:81:17:e0:b2:55:0b:3a:16:24:3e:ad:8e:
db:00:53:b6:60:13:33:7a:e4:ff:bc:8b:d7:b3:c1:f5:b5:d1:
7a:13:35:90:e6:e7:d8:f8:e2:1a:d3:f1:58:7b:c2:c7:4d:14:
45:3d:ee:ac:81:e1:00:56:1c:e5:a6:53:3c:2a:b9:5c:ee:44:
49:1c:be:3f:4f:db:d7:8f:11:62:69:5e:03:96:d0:eb:5c:d3:
9b:ae:41:3a:76:de:2a:09:3b:90:4b:fb:c6:78:6e:8a:35:a0:
a4:47:74:ab:82:82:d6:cd:c1:55:dd:b6:92:0d:42:17:25:d4:
ca:51:42:c9:44:80:30:9e:df:8d:4f:25:72:03:e6:2e:d0:7e:
d0:55:59:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:28:57 2025 by rpki-client