Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa
File:                     326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa (raw, json)
Hash identifier:          m5UZfdb9/3xjgsroW3NrcgEKnYA9JCgadppwKKkPLGU=
Subject key identifier:   41:E7:C8:7C:FB:D0:26:55:CA:04:27:F8:DA:04:AB:1A:92:DE:EB:5C
Certificate issuer:       /CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
Certificate serial:       6D165023568C7AED576B9571C63E9EBC58B27D4C
Authority key identifier: DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa
Signing time:             Tue 28 May 2024 17:42:55 +0000
ROA not before:           Tue 28 May 2024 17:37:55 +0000
ROA not after:            Tue 27 May 2025 17:42:55 +0000
asID:                     215531
IP address blocks:        2a14:7c0:800::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl
                          rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 10:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:16:50:23:56:8c:7a:ed:57:6b:95:71:c6:3e:9e:bc:58:b2:7d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
        Validity
            Not Before: May 28 17:37:55 2024 GMT
            Not After : May 27 17:42:55 2025 GMT
        Subject: CN=41E7C87CFBD02655CA0427F8DA04AB1A92DEEB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:bf:8b:0e:3b:6e:58:25:10:0c:43:e9:9f:
                    d9:2e:f0:8a:ac:d0:b1:7d:dc:e1:99:de:6f:c2:43:
                    93:cd:cf:a0:08:dc:a9:a4:01:94:ee:63:97:cc:47:
                    de:e1:70:93:0d:5b:c0:7c:9f:85:92:39:5e:90:4c:
                    69:27:b6:b5:b3:82:47:e1:97:d1:65:0e:be:d6:c5:
                    a6:67:74:56:c9:b1:40:34:25:18:ee:a3:19:67:f5:
                    fb:c2:00:75:27:d3:98:e4:11:3f:04:89:a1:3c:3c:
                    28:7f:97:44:e1:31:6a:45:3c:5c:8f:4b:19:0f:75:
                    3d:95:fd:c0:30:ca:9f:81:a7:a9:44:9d:ec:58:36:
                    d4:db:0b:84:16:b5:83:1d:4a:95:bc:69:89:87:9f:
                    af:1d:51:b2:71:32:2c:24:ab:23:d8:19:97:f6:9d:
                    6a:5d:66:ea:ab:2b:c7:7a:f8:46:63:4f:c9:ea:ba:
                    45:0f:6f:8b:51:5b:87:1c:72:a4:fe:07:7f:b0:15:
                    e5:50:10:74:1c:42:9f:ec:a4:9c:ac:7c:ba:33:34:
                    58:e4:ce:60:83:9a:3e:b7:e0:bd:74:2d:28:59:3c:
                    e5:77:b5:23:84:a1:9c:1c:ce:ab:d1:ba:fa:7e:9e:
                    59:83:dc:ea:7f:80:5f:de:8d:f3:a2:78:cd:6b:1c:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E7:C8:7C:FB:D0:26:55:CA:04:27:F8:DA:04:AB:1A:92:DE:EB:5C
            X509v3 Authority Key Identifier:
                keyid:DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         4d:8d:87:3b:40:a3:fd:e1:96:3a:00:c3:c9:ac:39:9b:81:bf:
         7e:77:16:e3:34:f3:fb:cb:cf:03:01:27:63:ac:75:6c:ed:f3:
         ff:d2:60:4d:f2:bc:2c:9a:af:e6:c8:71:8b:9d:16:d0:bd:3f:
         38:fb:23:10:83:53:6e:af:90:2c:25:cd:d8:3a:18:6d:6e:29:
         fb:7a:1c:e0:ea:05:fe:fb:19:1a:de:23:18:31:24:16:14:35:
         72:a2:5f:cc:ce:3d:60:19:c4:a1:95:21:3c:25:29:15:c3:85:
         19:f5:65:87:3d:7c:c3:27:06:9c:20:2a:ec:15:53:68:26:36:
         68:a4:90:60:c6:ee:ee:73:fa:5d:87:0e:cb:9c:10:c1:9b:2c:
         1d:e9:40:45:c4:13:d8:95:c5:c8:7e:47:4c:ff:07:68:a4:25:
         c3:05:a7:9d:da:e2:84:cd:83:46:07:b7:52:fe:24:e8:52:f7:
         d6:42:da:a2:6d:47:f3:0f:f0:6b:ab:31:ea:22:3f:16:f7:2c:
         ab:65:4b:9d:f7:f0:ab:27:9b:75:e7:5e:cc:a3:40:d2:05:fa:
         d8:56:61:88:62:08:06:2a:b9:41:88:1a:14:28:36:e7:af:85:
         2b:5b:fe:d4:c5:61:75:7f:9d:09:25:80:da:c6:a7:87:31:4c:
         c1:69:f0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:15 2024 by rpki-client on console-fra.rpki-client.org