Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363830303a3a2f34302d3438203d3e203538323132.roa
File: 326131343a3763303a363830303a3a2f34302d3438203d3e203538323132.roa (raw, json)
Hash identifier: 3DKPiQSSt7/ueoniX0itR1vJjhcBaWNuC6kn5EJzuRk=
Subject key identifier: C7:F0:7A:AB:E5:9C:1D:6B:B1:AD:6F:11:8B:35:60:0F:D6:BE:4C:10
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 73FE24412ADB5240A2A80FBC651DA1F01796E880
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363830303a3a2f34302d3438203d3e203538323132.roa
Signing time: Sun 02 Feb 2025 20:03:24 +0000
ROA not before: Sun 02 Feb 2025 19:58:24 +0000
ROA not after: Sun 01 Feb 2026 20:03:24 +0000
asID: 58212
IP address blocks: 2a14:7c0:6800::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:fe:24:41:2a:db:52:40:a2:a8:0f:bc:65:1d:a1:f0:17:96:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Feb 2 19:58:24 2025 GMT
Not After : Feb 1 20:03:24 2026 GMT
Subject: CN=C7F07AABE59C1D6BB1AD6F118B35600FD6BE4C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:43:c2:a1:95:63:b0:2a:b9:2c:19:7d:59:
7a:79:48:5e:34:0d:2d:cd:ad:ea:f0:01:aa:49:71:
c3:f9:24:eb:e5:02:f8:9b:47:dc:ca:61:9f:a0:c7:
a6:10:bb:44:34:ba:59:60:bc:ba:f0:fe:07:d9:a8:
a4:7b:14:bf:94:e4:98:21:ff:48:c2:90:f2:23:f9:
b6:3f:37:4f:a1:31:3c:f5:82:58:18:96:42:3c:08:
02:86:a8:c0:43:46:67:8b:29:cf:b8:e7:9a:53:2a:
15:74:27:ce:dd:66:60:e3:29:10:82:75:e4:bc:f6:
0b:ef:93:5a:85:6c:42:67:ff:9d:88:9f:6e:46:d2:
cf:d1:5a:cc:78:0d:35:ae:6d:d7:b5:dc:ef:4a:8b:
b8:25:2d:90:1b:5d:c8:48:c6:f3:e6:27:88:9a:44:
35:3b:6c:70:39:48:99:9b:00:af:26:97:5e:f9:2f:
a8:63:33:55:1b:f5:c2:95:d8:2d:c4:fe:61:18:e8:
25:10:09:c7:70:e9:4c:93:92:09:84:bb:e5:6a:7b:
f7:37:b6:d5:68:9e:2c:5f:0f:72:ed:61:5a:9b:a1:
ae:72:df:a5:29:72:5a:69:fd:40:d9:ef:bc:7d:7f:
55:33:c3:f8:8c:a8:4a:86:0b:31:8b:08:70:9f:43:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F0:7A:AB:E5:9C:1D:6B:B1:AD:6F:11:8B:35:60:0F:D6:BE:4C:10
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363830303a3a2f34302d3438203d3e203538323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:6800::/40
Signature Algorithm: sha256WithRSAEncryption
36:b1:62:6c:f3:7d:96:43:ae:b6:e6:aa:76:2d:ec:2c:5a:e3:
b8:e4:6d:ce:18:23:20:e1:a9:dd:09:a0:40:7a:c4:99:6e:0b:
93:e7:e6:9c:76:cc:1f:a4:3f:5d:2f:81:68:28:44:a8:e2:f8:
0b:bd:bd:2e:11:8a:9a:68:a4:67:28:6a:57:b9:c8:4c:b3:98:
1d:06:e5:70:d5:42:46:58:59:63:60:58:05:bd:55:ff:48:b8:
55:42:b0:5b:01:52:24:4b:44:d8:35:70:a2:16:7d:ff:3d:0e:
00:81:c7:68:3e:f5:cd:59:1c:6f:8f:c4:3d:5a:7f:21:fc:e2:
d6:43:50:5e:f0:e6:00:b9:2c:00:b3:09:32:4c:81:54:a5:5f:
89:ca:48:46:8b:30:d0:5f:3d:ea:d7:2c:bd:da:83:d2:2b:e8:
38:04:62:89:a8:28:bd:1b:b1:ef:99:64:53:02:fa:93:a4:d6:
f9:7a:27:7b:15:5b:46:57:a6:62:6e:aa:12:64:56:38:3f:f5:
1a:b9:37:b0:da:1c:dd:94:14:29:90:5c:f5:6d:55:1a:ff:c2:
72:d8:cd:89:db:a3:ad:81:c2:dc:e8:0c:41:3a:28:fd:e2:66:
40:85:87:6d:d4:2d:3b:79:63:26:74:fb:22:cb:6b:70:56:a7:
ca:2a:12:4f
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUc/4kQSrbUkCiqA+8ZR2h8BeW6IAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNTAyMDIxOTU4MjRaFw0yNjAyMDEyMDAzMjRaMDMxMTAvBgNV
BAMTKEM3RjA3QUFCRTU5QzFENkJCMUFENkYxMThCMzU2MDBGRDZCRTRDMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaZUPCoZVjsCq5LBl9WXp5SF40
DS3NrerwAapJccP5JOvlAvibR9zKYZ+gx6YQu0Q0ullgvLrw/gfZqKR7FL+U5Jgh
/0jCkPIj+bY/N0+hMTz1glgYlkI8CAKGqMBDRmeLKc+455pTKhV0J87dZmDjKRCC
deS89gvvk1qFbEJn/52In25G0s/RWsx4DTWubde13O9Ki7glLZAbXchIxvPmJ4ia
RDU7bHA5SJmbAK8ml175L6hjM1Ub9cKV2C3E/mEY6CUQCcdw6UyTkgmEu+Vqe/c3
ttVonixfD3LtYVqboa5y36Upclpp/UDZ77x9f1Uzw/iMqEqGCzGLCHCfQxXFAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUx/B6q+WcHWuxrW8RizVgD9a+TBAwHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMzI2MTMxMzQzYTM3
NjMzMDNhMzYzODMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzNTM4MzIzMTMy
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAOBAIAAjAIAwYAKhQHwGgwDQYJKoZIhvcNAQELBQADggEBADaxYmzzfZZDrrbm
qnYt7Cxa47jkbc4YIyDhqd0JoEB6xJluC5Pn5px2zB+kP10vgWgoRKji+Au9vS4R
ippopGcoale5yEyzmB0G5XDVQkZYWWNgWAW9Vf9IuFVCsFsBUiRLRNg1cKIWff89
DgCBx2g+9c1ZHG+PxD1afyH84tZDUF7w5gC5LACzCTJMgVSlX4nKSEaLMNBfPerX
LL3ag9Ir6DgEYomoKL0bse+ZZFMC+pOk1vl6J3sVW0ZXpmJuqhJkVjg/9Rq5N7Da
HN2UFCmQXPVtVRr/wnLYzYnbo62BwtzoDEE6KP3iZkCFh23ULTt5YyZ0+yLLa3BW
p8oqEk8=
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:58:27 2025 by rpki-client