Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763353a3a2f33322d3332203d3e20323133393933.roa
File: 326131343a3763353a3a2f33322d3332203d3e20323133393933.roa (raw, json)
Hash identifier: ws1qPs7tr2kvcbAEGamBqzMf9vGrI/aH0wiOIUbFnzI=
Subject key identifier: 6E:AD:27:98:73:E3:32:DC:0E:96:4F:C1:BD:17:71:CC:0B:0B:20:73
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 16AB4F348C22C51CB5C256F7DC4F49864779B62A
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763353a3a2f33322d3332203d3e20323133393933.roa
Signing time: Tue 29 Oct 2024 19:41:02 +0000
ROA not before: Tue 29 Oct 2024 19:36:02 +0000
ROA not after: Tue 28 Oct 2025 19:41:02 +0000
asID: 213993
IP address blocks: 2a14:7c5::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ab:4f:34:8c:22:c5:1c:b5:c2:56:f7:dc:4f:49:86:47:79:b6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Oct 29 19:36:02 2024 GMT
Not After : Oct 28 19:41:02 2025 GMT
Subject: CN=6EAD279873E332DC0E964FC1BD1771CC0B0B2073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:aa:46:cc:72:6f:41:af:10:01:76:5a:0b:
c4:18:53:6e:1c:f7:9f:e5:59:bb:1b:10:0b:ab:79:
70:60:fb:50:74:24:54:15:01:bc:ff:11:08:b7:3d:
6f:5a:95:ad:9a:db:45:f9:bb:00:f4:97:2f:03:28:
19:48:0e:85:c0:6b:6d:57:8f:19:8e:56:91:36:ef:
e9:b9:26:cd:4e:64:74:c4:b3:38:85:60:1c:5a:09:
44:0d:85:d4:5a:c8:17:48:d8:9b:0b:5d:b4:91:14:
70:91:05:f9:d7:c0:aa:38:c7:28:dd:fe:2f:64:ff:
57:42:47:ff:d4:ed:d0:2b:7d:e8:05:05:5b:be:22:
86:10:c2:8a:f4:d4:b4:a4:b0:05:d5:2e:47:1e:6e:
f8:be:aa:4f:69:43:9f:ea:c5:1b:e5:1c:d9:3d:f0:
1d:91:85:0f:f0:4f:32:d7:1b:ea:f4:dc:78:98:2e:
23:ef:8b:24:b0:4e:07:27:63:fa:90:10:40:dc:6a:
7b:1c:2c:b9:b8:ba:29:0a:13:21:22:0c:99:4b:56:
50:64:c8:15:90:f8:37:c2:3b:cd:f3:ac:2e:5b:bf:
0e:0b:75:74:6d:56:0c:a6:f9:8b:dc:ff:9c:4a:b3:
c6:41:0e:06:ed:f1:ce:b4:ca:65:fe:70:32:da:a0:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AD:27:98:73:E3:32:DC:0E:96:4F:C1:BD:17:71:CC:0B:0B:20:73
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763353a3a2f33322d3332203d3e20323133393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c5::/32
Signature Algorithm: sha256WithRSAEncryption
72:bc:91:9e:a8:48:64:1f:21:22:06:77:65:62:b4:e9:60:0e:
47:f0:1e:a2:49:60:39:f2:68:6b:b9:c0:4c:5e:01:05:11:12:
0a:49:a5:f4:b6:fb:79:18:84:a8:ff:73:7a:2f:44:0f:0a:f3:
f5:bc:e2:74:26:f3:7c:fd:32:29:23:e1:d8:32:01:8a:dd:8e:
06:a6:30:d5:b6:59:ed:fe:45:ac:ab:95:54:64:f0:de:1a:b2:
ec:04:7a:51:fb:01:6f:94:29:c8:64:20:f0:74:84:4c:ff:01:
6b:24:ca:0e:4e:f0:aa:3a:e8:e7:e8:8d:05:6c:bf:6e:18:07:
89:08:85:66:f6:b4:b8:dc:45:e0:19:c3:ae:d5:66:9b:5b:f6:
24:b0:6f:df:97:91:e2:6a:07:15:2d:ec:39:64:5e:1d:8e:2a:
1e:b2:57:02:36:5d:60:05:80:cf:af:98:01:90:cf:f3:eb:b2:
74:67:0d:25:42:95:6e:2a:49:aa:4e:41:50:33:14:91:d3:36:
fa:49:ae:50:7e:40:63:6a:55:76:e6:27:fa:fe:a9:78:3d:24:
e8:ee:86:ca:2b:1b:22:4e:84:de:1c:de:40:51:73:0d:bb:5c:
b7:ce:fa:c5:e2:a2:eb:09:d8:2a:78:00:25:c3:48:40:b8:a0:
1f:8c:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org