Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363630303a3a2f34302d3430203d3e20323133393933.roa
File: 326131343a3763303a363630303a3a2f34302d3430203d3e20323133393933.roa (raw, json)
Hash identifier: gTyWclC/wQ2fU6t0FNWykAorPtSguBjXbubZfTQFABk=
Subject key identifier: 27:9D:E9:04:91:AD:CB:36:21:E8:4F:E9:7F:0D:90:38:51:EA:82:21
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 2A37ACA3F48F1D1669CC5366A1B771D451624AE3
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363630303a3a2f34302d3430203d3e20323133393933.roa
Signing time: Thu 28 Nov 2024 21:05:27 +0000
ROA not before: Thu 28 Nov 2024 21:00:27 +0000
ROA not after: Thu 27 Nov 2025 21:05:27 +0000
asID: 213993
IP address blocks: 2a14:7c0:6600::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:37:ac:a3:f4:8f:1d:16:69:cc:53:66:a1:b7:71:d4:51:62:4a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Nov 28 21:00:27 2024 GMT
Not After : Nov 27 21:05:27 2025 GMT
Subject: CN=279DE90491ADCB3621E84FE97F0D903851EA8221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:0d:4f:3f:24:c2:38:83:27:a2:c9:3d:0f:
59:c4:a6:4a:41:37:b0:64:76:65:32:9b:65:2f:34:
ec:ab:7e:9c:05:bf:de:b2:80:e0:74:6e:28:a4:3f:
2c:26:0c:69:62:3f:11:bf:d1:35:02:f6:00:57:d9:
fa:cd:a5:10:46:1e:21:6b:8b:b8:8e:64:6e:b8:68:
4b:c5:14:8a:d9:dd:df:74:dd:f4:cf:e2:f1:aa:84:
b5:75:a9:2b:89:9e:19:f8:9f:a9:05:33:37:ac:eb:
2c:fd:2c:a3:3f:c6:87:b1:63:f1:47:8a:63:79:bf:
ca:5f:a7:64:4f:82:98:7f:60:fc:85:2c:ff:35:78:
72:16:4f:ca:74:26:c2:97:b9:97:cc:03:d1:24:d7:
38:36:82:e8:41:29:57:02:2d:55:dc:bf:84:b4:bc:
bf:5e:84:24:d3:6d:98:65:f6:af:0e:cf:91:46:fe:
22:f8:4e:c7:c0:e1:96:ae:b9:7c:f0:32:00:91:06:
ad:a6:d6:a2:87:77:73:39:88:20:a5:a7:1d:0b:58:
85:d0:d6:72:8b:42:78:1d:ff:69:70:67:19:b5:2c:
b5:b8:b9:b6:34:15:5c:8d:30:45:de:84:4e:18:e7:
dd:9b:b1:bc:86:85:e6:01:b0:e2:7a:f5:ca:c1:9b:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9D:E9:04:91:AD:CB:36:21:E8:4F:E9:7F:0D:90:38:51:EA:82:21
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363630303a3a2f34302d3430203d3e20323133393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:6600::/40
Signature Algorithm: sha256WithRSAEncryption
2d:a5:cd:aa:75:b5:e4:0d:30:28:e9:66:f1:c3:0e:bd:ac:bc:
f0:b6:48:34:fe:25:8b:71:30:28:e5:51:a4:c1:34:db:a6:67:
2d:9c:cf:8d:cb:50:27:5b:4b:d3:c0:ef:ed:5a:e9:22:8b:ad:
be:93:fb:c0:12:7c:91:1d:36:d6:ca:8a:89:31:cd:69:f1:bf:
d1:eb:a0:2d:a2:c1:9a:07:be:51:0b:4d:3d:5d:cc:ce:b2:99:
5d:00:23:80:9c:9f:f6:b8:60:0c:67:a6:9d:1e:89:e5:b6:cb:
9b:ed:7c:73:f4:26:d7:dc:8d:c5:43:2b:4d:fd:4d:2b:bc:cc:
f3:88:56:03:7d:41:da:1b:cb:9c:08:99:f4:8b:7d:4e:ea:2e:
45:58:ab:3b:9e:ad:d5:bd:2b:5e:b6:9e:9d:29:43:ce:14:83:
2a:e4:20:6e:67:4d:41:19:72:ec:dd:6f:a1:bd:11:7c:46:32:
5e:9b:c9:a2:f9:d6:c3:44:6e:84:7c:52:af:b0:11:5c:1f:a3:
f8:24:6f:f8:c4:7c:93:4c:f8:ae:3c:90:c1:37:07:29:b1:25:
68:da:25:4a:5e:ef:8d:d7:6d:45:b8:ef:e7:d6:31:8f:fd:6d:
ef:b2:33:78:03:fd:f8:13:a7:75:41:19:b0:5c:d7:1b:b1:67:
8a:99:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:00 2025 by rpki-client