Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa
File: 326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa (raw, json)
Hash identifier: PldCnVF1udlhWnLpgVgS+PpeulV7GHEDhNzYYbgISU8=
Subject key identifier: 40:08:21:9C:83:DD:0F:DF:3E:8A:A1:5C:CA:B2:37:42:01:19:D7:FA
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 51093A96361AFE828E53FD014C8252BBB57343FA
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa
Signing time: Tue 28 May 2024 15:06:52 +0000
ROA not before: Tue 28 May 2024 15:01:52 +0000
ROA not after: Tue 27 May 2025 15:06:52 +0000
asID: 215531
IP address blocks: 2a14:7c0:800::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:09:3a:96:36:1a:fe:82:8e:53:fd:01:4c:82:52:bb:b5:73:43:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: May 28 15:01:52 2024 GMT
Not After : May 27 15:06:52 2025 GMT
Subject: CN=4008219C83DD0FDF3E8AA15CCAB237420119D7FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:c6:ef:fd:01:ee:5f:3e:b7:cb:df:75:0a:
31:a3:95:aa:96:55:0b:dd:e6:da:b6:46:8f:45:d8:
94:64:99:f5:f2:df:08:ac:5e:e8:6a:33:36:81:3b:
4b:5b:b5:99:84:05:26:01:25:9c:de:e3:38:a5:af:
89:da:4d:9d:72:c3:f1:ed:ab:11:01:f6:ff:87:f3:
14:b8:be:a8:3d:2f:36:27:7b:c1:f5:cf:08:b2:49:
3e:e2:8d:14:3e:56:65:59:4d:c0:cf:90:a1:d4:3c:
83:71:cd:69:80:ca:21:e7:65:0a:56:f4:20:c1:e0:
2d:d8:22:76:8b:07:92:74:6c:67:ae:be:81:35:ae:
aa:5b:ff:a2:35:46:fc:43:44:86:6d:29:08:7e:94:
c8:43:82:75:c9:13:b2:bb:38:e2:a9:53:d0:17:ff:
19:eb:43:64:49:00:bc:e1:5d:43:5b:d5:db:48:71:
18:23:52:99:b4:06:2d:96:ad:46:3b:d7:32:b3:6a:
0f:1c:78:68:d3:0d:3b:ca:07:81:6c:15:81:94:1a:
d9:d7:56:6b:50:cc:a4:a1:00:f2:26:71:1b:a5:5c:
77:85:f3:7d:e2:6d:f3:58:6d:c7:b9:ad:cc:1b:ee:
d4:ce:ff:f8:0a:7b:16:73:62:25:b6:0b:c0:da:af:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:21:9C:83:DD:0F:DF:3E:8A:A1:5C:CA:B2:37:42:01:19:D7:FA
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:800::/38
Signature Algorithm: sha256WithRSAEncryption
61:01:f5:ed:12:b0:47:5e:5b:3d:90:c9:9c:42:b7:12:bf:71:
ab:bb:b1:f1:41:a9:5a:4b:f6:0e:b0:b7:a7:93:bc:1d:7b:d6:
12:08:fd:57:c5:34:2c:52:9d:ce:17:bd:7d:37:d4:3d:72:7e:
81:57:06:fc:d6:9d:f1:bd:51:b4:8b:47:27:01:2d:4f:f2:0d:
74:50:6e:30:9f:33:11:9c:cc:fc:81:ba:13:d4:cc:92:e6:60:
ef:8c:d6:b6:3f:dd:d0:c6:fd:67:78:90:0d:4e:0e:c4:03:56:
d2:96:ee:09:9e:50:40:a6:c4:bb:03:3e:37:93:2e:52:ef:64:
99:24:38:c2:4f:99:f9:a6:57:fa:0b:64:37:50:c2:45:b9:bf:
78:08:a4:ef:31:9c:3b:9c:bf:dd:88:3d:a5:ba:bb:e2:ff:d4:
56:76:f6:a9:08:e1:fb:aa:44:ec:2b:a4:2c:09:64:ec:f5:d4:
cd:40:c2:ac:8f:e7:25:ef:ae:83:5c:4f:a5:81:24:4e:42:78:
ca:f4:5c:3a:06:14:16:0c:e8:2e:b4:52:07:b3:f0:18:10:e1:
b5:be:6d:f7:2b:31:99:28:e5:0b:8f:23:e7:48:d8:7e:ee:17:
3b:bf:7c:aa:74:05:6c:af:f0:b6:0c:34:e3:1a:75:5a:80:9d:
34:19:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org