Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663430303a3a2f33382d3338203d3e203531333936.roa
File: 326131343a3763303a663430303a3a2f33382d3338203d3e203531333936.roa (raw, json)
Hash identifier: lv7k/nTi6nVywZ08CiGe12gJDOkyOSzUbrhJHgoZBeA=
Subject key identifier: 9E:5E:CA:87:2D:D8:F0:D0:26:4C:CC:B4:DE:AA:E6:40:C8:8D:4E:78
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 2CEBD5263F687FD437B0D18FA4D771B7E30C1EBD
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663430303a3a2f33382d3338203d3e203531333936.roa
Signing time: Wed 20 Nov 2024 20:34:18 +0000
ROA not before: Wed 20 Nov 2024 20:29:18 +0000
ROA not after: Wed 19 Nov 2025 20:34:18 +0000
asID: 51396
IP address blocks: 2a14:7c0:f400::/38 maxlen: 38
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:eb:d5:26:3f:68:7f:d4:37:b0:d1:8f:a4:d7:71:b7:e3:0c:1e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Nov 20 20:29:18 2024 GMT
Not After : Nov 19 20:34:18 2025 GMT
Subject: CN=9E5ECA872DD8F0D0264CCCB4DEAAE640C88D4E78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:65:a4:e4:7c:70:11:25:92:19:9a:fc:9a:
80:73:f4:a6:3a:80:69:02:db:f0:d3:3a:7e:0c:6e:
ef:11:47:15:23:b5:5a:73:2c:41:e0:47:12:bb:87:
03:2d:5d:a5:f1:c1:36:05:a0:9b:51:b7:2e:27:9c:
0d:e3:f7:2a:82:2d:a2:f5:87:a9:59:5c:3d:17:22:
29:df:12:21:2a:4d:57:12:3e:8a:c8:6e:ed:62:ef:
89:a5:85:b2:4c:25:9f:bc:fa:59:b8:95:cf:2b:77:
2c:f0:2f:1b:61:79:69:93:34:d3:4e:40:66:b0:44:
d0:d5:6b:41:fd:86:b6:f6:60:87:77:ac:eb:b6:00:
34:fc:72:17:da:8d:6a:d2:59:d7:f2:e7:a1:0f:3b:
64:ec:0f:8a:e2:d9:b4:c6:15:98:01:e4:e5:46:f4:
93:0e:1e:8b:59:ec:97:b1:ab:fb:c2:fc:c4:7a:65:
3c:56:92:6f:57:6f:df:68:00:eb:19:eb:fb:48:7c:
9e:79:8b:13:51:ea:68:01:28:c9:7b:95:a7:53:03:
75:ef:03:90:96:7d:23:ad:08:69:7f:2c:2c:46:66:
a8:e0:67:57:cd:8b:97:b2:07:f0:22:a7:d2:32:2f:
82:8a:c2:d0:81:9e:90:8d:3d:ae:8f:46:c5:e0:07:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5E:CA:87:2D:D8:F0:D0:26:4C:CC:B4:DE:AA:E6:40:C8:8D:4E:78
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663430303a3a2f33382d3338203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:f400::/38
Signature Algorithm: sha256WithRSAEncryption
8a:68:8c:44:48:fd:be:98:f2:c9:65:86:d0:be:03:52:3f:5b:
d5:82:72:ce:2f:d8:c9:e2:80:a1:07:86:a0:46:93:a0:45:2f:
52:42:ba:1f:f4:2e:a5:63:3c:a5:ae:96:25:c4:cc:0d:3f:be:
d7:3d:73:6e:bd:9c:ad:ef:d5:3b:19:24:e4:16:88:3a:88:be:
3a:88:26:48:a7:74:df:96:6b:f0:56:dd:92:6d:e9:50:9b:b4:
23:9e:18:77:26:34:4c:10:bf:96:22:63:c0:fc:9e:ce:7d:b6:
0e:ef:55:ac:fe:cd:3c:78:0c:e9:e6:12:5e:5b:ee:fa:47:f9:
fd:17:f5:7e:9f:03:c7:da:92:b1:a0:6d:1f:c0:69:f9:c4:de:
06:96:a6:60:e5:e1:b8:7a:33:bd:d4:74:29:29:a6:db:a8:e0:
47:96:6b:cf:24:da:ee:9f:0c:d1:9e:a0:e3:a0:42:62:5b:be:
76:95:65:6c:a3:d3:22:27:fe:0e:d8:d5:13:3e:9b:9b:02:62:
f6:d7:1d:ce:1a:bb:a2:0e:db:d6:a0:ed:72:c3:03:fb:7b:d4:
1a:b6:c7:ce:a2:0d:a2:f9:5f:f8:58:8a:a2:b6:69:45:d2:e5:
93:34:c7:70:fb:2d:9f:d6:a9:7c:17:a4:8d:99:fb:dd:64:bd:
8b:f4:5e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:27 2024 by rpki-client on console-fra.rpki-client.org