Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa
File: 326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa (raw, json)
Hash identifier: dwRE61lXxibZHOU4JprLiaJEZT76ezph9Gg9aRXQ8no=
Subject key identifier: D5:64:58:09:94:90:FC:9B:1B:F9:17:E9:39:F9:D8:FE:17:E6:26:2C
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 1F24F7B11D5AA641E27360798879A5A90DE71A31
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa
Signing time: Tue 28 May 2024 15:02:26 +0000
ROA not before: Tue 28 May 2024 14:57:26 +0000
ROA not after: Tue 27 May 2025 15:02:26 +0000
asID: 215203
IP address blocks: 2a14:7c0:d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:24:f7:b1:1d:5a:a6:41:e2:73:60:79:88:79:a5:a9:0d:e7:1a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: May 28 14:57:26 2024 GMT
Not After : May 27 15:02:26 2025 GMT
Subject: CN=D56458099490FC9B1BF917E939F9D8FE17E6262C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:ac:ba:d7:23:40:fc:bc:59:82:f0:fe:29:
2e:23:03:80:f0:d2:2c:05:09:32:9d:12:57:3d:ad:
3b:a0:9c:54:77:98:e4:f2:95:ad:4c:9e:16:ec:e3:
a9:4b:24:01:20:e2:c3:5d:5e:d5:59:eb:de:68:35:
19:cd:5e:42:e4:68:97:72:ef:85:a1:da:2d:17:8d:
bf:c8:f5:75:60:9c:69:b7:9c:93:10:10:d8:65:05:
7d:7c:05:e5:02:07:2a:54:be:6f:d6:51:e1:10:d9:
d7:39:5d:83:10:33:f6:4b:47:eb:35:fc:ce:98:3b:
6c:ac:bb:8f:a3:40:f7:99:29:03:35:65:6e:0f:5c:
4d:55:0a:df:66:6b:80:ee:af:d9:f1:72:b8:b9:97:
98:1a:c8:8e:a7:5d:ab:32:45:fd:76:d2:07:a3:99:
d3:7d:ee:94:38:ba:5b:4e:4f:26:1e:dd:27:d3:f2:
20:b0:29:2c:0b:5a:e4:f5:fc:ab:4b:00:96:e5:0d:
7a:5b:a7:2d:01:0d:61:40:61:cd:93:e4:81:30:c6:
de:58:65:f4:40:8a:e5:ce:8f:84:3a:ad:72:39:e8:
50:d6:8f:4e:e4:7e:68:c7:c2:ab:56:10:5a:72:e7:
9a:2d:9c:ee:cc:e7:51:7f:5a:24:c2:81:51:2a:16:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:64:58:09:94:90:FC:9B:1B:F9:17:E9:39:F9:D8:FE:17:E6:26:2C
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:d0::/44
Signature Algorithm: sha256WithRSAEncryption
5d:41:b9:b0:87:ec:dd:36:de:27:d9:e6:fd:9c:92:e2:79:59:
3f:62:2d:ca:d6:61:e5:0a:ba:79:71:c0:27:a5:ea:2a:4c:68:
da:82:fc:57:34:82:3a:f1:c6:b7:73:9b:7b:aa:2f:bb:3a:ad:
4e:92:ef:4f:9f:08:c4:d4:5f:2a:03:66:d9:b4:53:2c:b5:08:
28:cd:4f:29:56:d7:71:21:e7:f4:4b:af:67:41:e7:7c:ab:51:
4b:ab:54:38:6a:da:5b:7f:50:4d:86:f3:c6:79:4e:6e:f6:df:
80:3b:0a:ea:1d:c9:33:69:e2:4e:6e:4b:fc:3b:af:99:dc:b9:
a7:02:f8:c8:64:be:63:15:50:39:4e:14:eb:60:0d:67:a3:1f:
cf:3c:f8:d2:21:60:07:5f:80:9e:86:3b:2d:2a:b1:c2:01:8d:
da:ae:e2:6e:56:2e:d1:60:2e:91:ea:5a:46:d9:90:9c:7c:69:
65:85:b9:dc:e9:b7:b4:37:e3:a2:1f:e6:49:83:ed:c1:e6:36:
dc:f9:0e:0a:d2:4d:4b:2b:9c:46:02:92:71:6c:ab:48:60:b3:
28:24:9a:7c:7e:07:f5:61:eb:1b:6c:7e:3a:1e:d6:5e:99:a5:
b0:02:46:33:cc:9d:1a:4c:e1:81:bb:a7:ea:40:70:a2:53:60:
39:ba:4e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 16:31:01 2024 by rpki-client on console-fra.rpki-client.org