Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363530303a3a2f34302d3438203d3e20323134383139.roa
File: 326131343a3763303a363530303a3a2f34302d3438203d3e20323134383139.roa (raw, json)
Hash identifier: lOc/gjsxiQ4tUp0nTyTtOXX31RCFsFm7EUbN4MiD1pM=
Subject key identifier: 17:13:22:4A:F0:73:CA:5C:EF:C7:B0:B7:B9:60:BD:E2:F8:4C:9C:99
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 7B5A6EE203D28B8F049F25B24F2B72FFC4180483
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363530303a3a2f34302d3438203d3e20323134383139.roa
Signing time: Tue 05 Nov 2024 22:20:05 +0000
ROA not before: Tue 05 Nov 2024 22:15:05 +0000
ROA not after: Tue 04 Nov 2025 22:20:05 +0000
asID: 214819
IP address blocks: 2a14:7c0:6500::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5a:6e:e2:03:d2:8b:8f:04:9f:25:b2:4f:2b:72:ff:c4:18:04:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Nov 5 22:15:05 2024 GMT
Not After : Nov 4 22:20:05 2025 GMT
Subject: CN=1713224AF073CA5CEFC7B0B7B960BDE2F84C9C99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:d4:2c:e0:ed:16:3f:1c:30:02:7c:8a:78:
d1:e5:0e:e1:0a:ca:44:98:51:08:cd:b2:7d:99:3f:
86:7f:fa:6b:7b:18:23:26:80:e9:62:f7:2b:63:ea:
78:51:d2:57:14:52:60:73:89:94:1c:15:77:52:5b:
e3:9d:55:10:82:85:23:a8:df:5a:73:58:fe:4f:54:
83:e7:d2:1b:4a:2d:27:d0:1e:c5:f4:4c:d5:e7:4a:
fa:66:b9:47:c0:7c:45:9f:23:9b:70:99:cd:a0:59:
02:16:4d:95:d0:c5:8e:63:10:8d:ed:74:c1:43:ef:
42:ce:10:11:1d:f2:af:fd:88:dd:ed:2e:65:ce:b1:
6a:0b:07:7e:0a:66:aa:b3:8d:8b:a1:d6:4e:98:55:
21:64:92:04:f1:c9:1b:b8:28:3c:2c:12:8c:54:5e:
ed:51:cc:ec:95:8c:47:66:64:87:3d:b6:7c:4a:cd:
0d:8d:0d:d8:53:ae:1d:4f:51:29:5c:7b:41:c0:92:
13:d3:bc:81:2c:6f:42:ce:e3:4e:46:16:1b:37:32:
4a:fc:e2:24:a0:b8:21:17:80:67:95:40:25:20:5a:
36:ca:83:e3:f5:69:d9:b8:f0:78:13:89:f7:15:fa:
13:85:b6:a8:60:f2:0d:7b:5a:40:e5:d9:72:fd:6a:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:13:22:4A:F0:73:CA:5C:EF:C7:B0:B7:B9:60:BD:E2:F8:4C:9C:99
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363530303a3a2f34302d3438203d3e20323134383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:6500::/40
Signature Algorithm: sha256WithRSAEncryption
92:ae:1e:96:ab:f2:ca:e8:26:e8:12:45:c1:e1:19:36:9c:19:
b2:1c:8b:9a:46:85:fd:19:96:d7:0a:cc:64:a5:1a:f9:3c:4b:
83:1f:2d:f6:b2:48:77:60:af:29:bc:4b:fc:d3:4f:1f:9f:62:
43:29:c1:32:d5:f7:0d:cb:cc:51:61:22:d6:21:5a:21:ba:1d:
a8:b8:4b:fd:b3:0f:16:e8:f9:72:c8:c8:e7:3e:9c:07:0e:b1:
9e:91:14:af:4f:36:7b:d2:43:c2:26:18:8c:06:92:40:bf:bd:
72:13:85:16:e7:df:ef:49:96:ec:08:e6:07:bb:7f:9e:d8:83:
20:69:c5:7d:82:b7:39:b6:29:ca:3d:17:0d:1a:df:b7:a8:52:
23:a1:24:c4:fc:37:d7:be:a6:b8:fb:61:b4:63:b7:e9:44:d9:
ca:a9:f9:39:ab:5e:35:23:39:4b:b9:b0:44:8e:b0:77:c4:89:
f4:55:75:9d:b6:f2:0c:c5:f5:2a:d2:72:fb:22:d6:b7:e2:fe:
d4:d4:a1:80:be:ff:d9:40:f3:26:11:4d:49:84:64:ac:10:72:
cf:80:50:71:dc:b5:19:17:22:91:54:6d:9c:81:77:76:29:36:
30:50:7a:21:a0:2f:49:8a:ef:f3:a7:2e:6c:cd:3b:2e:e9:7e:
f8:5b:43:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org