Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3430303a3a2f33382d3438203d3e2030.roa
File:                     326131343a3763303a3430303a3a2f33382d3438203d3e2030.roa (raw, json)
Hash identifier:          TR0drCE5zCTOZKkCRW/sT8DVAhEf97+DxuBdxsJhoQM=
Subject key identifier:   70:24:1C:61:7C:E7:B2:AF:7F:41:F9:DF:DA:FA:F2:53:61:6F:18:0C
Certificate issuer:       /CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
Certificate serial:       5508BCD591B04901C0ABA2630C2DF4AAE48BE3A9
Authority key identifier: DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3430303a3a2f33382d3438203d3e2030.roa
Signing time:             Sat 15 Jun 2024 15:23:13 +0000
ROA not before:           Sat 15 Jun 2024 15:18:13 +0000
ROA not after:            Sat 14 Jun 2025 15:23:13 +0000
asID:                     0
IP address blocks:        2a14:7c0:400::/38 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl
                          rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:08:bc:d5:91:b0:49:01:c0:ab:a2:63:0c:2d:f4:aa:e4:8b:e3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
        Validity
            Not Before: Jun 15 15:18:13 2024 GMT
            Not After : Jun 14 15:23:13 2025 GMT
        Subject: CN=70241C617CE7B2AF7F41F9DFDAFAF253616F180C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:28:c0:e9:a3:95:5a:89:87:db:52:e7:b1:
                    b2:1a:cf:c0:a8:a6:26:4c:e0:b3:2a:a6:14:c5:71:
                    4a:d2:b2:96:11:f3:3d:4d:24:20:fa:62:99:5e:76:
                    14:b1:81:0c:19:2b:41:fd:3a:61:98:c1:81:73:0e:
                    9f:09:3f:b5:5a:31:d7:c0:15:f8:9a:7c:25:d4:e9:
                    e5:c4:f2:18:24:cd:df:a4:9d:96:04:2f:f7:c0:26:
                    b8:ab:4f:05:6a:15:c8:13:73:17:b8:df:ac:07:3d:
                    b7:82:08:63:38:c7:85:d3:7e:e3:d2:3e:65:68:f8:
                    d1:0b:14:cf:07:8d:5b:f2:f1:fe:36:c6:47:3d:2f:
                    be:57:6f:b1:59:da:70:24:0d:ca:44:bf:49:41:c7:
                    61:89:f4:fe:ed:91:bb:ef:60:59:0b:3d:9b:dd:7d:
                    9f:5e:4a:10:a1:b4:9c:d5:d4:b5:4e:6b:da:e3:ab:
                    58:b9:50:8c:c7:c6:f7:ef:e1:1b:05:b6:74:d5:74:
                    8c:33:7d:94:74:1a:30:41:a3:05:35:e3:66:c0:a0:
                    5d:75:c7:64:0d:a6:78:21:4b:5d:cc:2d:ed:61:93:
                    52:05:28:2b:58:28:0e:0c:ce:4d:db:4a:50:09:8a:
                    80:71:b2:be:8d:d0:65:34:00:0a:ab:f9:3c:4b:d3:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:24:1C:61:7C:E7:B2:AF:7F:41:F9:DF:DA:FA:F2:53:61:6F:18:0C
            X509v3 Authority Key Identifier:
                keyid:DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3430303a3a2f33382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         2e:ff:ab:e0:ef:49:c0:d2:8b:e5:58:20:23:77:3d:fb:da:21:
         e4:42:67:05:dc:2b:42:75:be:a8:3a:1d:b7:7c:59:ad:d9:70:
         f1:61:9b:6f:f0:f9:f1:eb:21:a4:ad:9f:b3:75:ed:7a:46:14:
         e0:5c:ff:dd:f0:7c:91:9e:5c:13:7a:b1:ea:3e:79:3a:d7:31:
         6c:14:6f:78:3b:85:6d:16:ae:d1:86:d8:cc:59:d0:7e:a6:4b:
         9d:e5:74:54:75:d1:1a:95:03:e7:75:1f:83:36:ae:b0:b1:fe:
         5f:84:ce:94:6d:87:c9:83:6e:d5:45:47:7e:9e:9a:e1:2b:62:
         04:11:63:85:a8:98:95:03:96:64:b4:d9:fa:aa:8a:1c:1e:c1:
         21:e1:e0:d9:58:20:a1:22:16:b4:53:70:82:85:1b:1d:a6:12:
         57:87:14:70:72:b1:ab:c7:02:bc:87:51:e9:c4:2f:41:58:d1:
         ae:e0:3b:86:2a:f1:19:7e:0c:f0:a4:89:62:7b:c2:07:c8:3b:
         c8:05:f6:34:27:b1:77:76:08:a2:02:27:ef:ba:8c:92:d6:d9:
         44:52:b4:b7:23:51:45:de:ff:53:cc:af:b1:e0:d8:08:2b:1f:
         ba:f4:39:d4:ff:ee:c3:55:32:45:d5:15:4b:60:c6:d4:55:36:
         8d:4b:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org