Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a6330303a3a2f33382d3338203d3e203439353831.roa
File:                     326131343a3763303a6330303a3a2f33382d3338203d3e203439353831.roa (raw, json)
Hash identifier:          GoKVrTVxXo9a4AV5bSvXqSwW5r4EHOxpLylrotujR1k=
Subject key identifier:   68:D8:CE:76:26:5E:BC:5D:69:E2:B7:6A:C5:26:C3:8F:C8:B2:76:07
Certificate issuer:       /CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
Certificate serial:       0185682EA72FE6B0D59BD7A252F45027EF937200
Authority key identifier: DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a6330303a3a2f33382d3338203d3e203439353831.roa
Signing time:             Wed 29 May 2024 13:25:42 +0000
ROA not before:           Wed 29 May 2024 13:20:42 +0000
ROA not after:            Wed 28 May 2025 13:25:42 +0000
asID:                     49581
IP address blocks:        2a14:7c0:c00::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl
                          rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:68:2e:a7:2f:e6:b0:d5:9b:d7:a2:52:f4:50:27:ef:93:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
        Validity
            Not Before: May 29 13:20:42 2024 GMT
            Not After : May 28 13:25:42 2025 GMT
        Subject: CN=68D8CE76265EBC5D69E2B76AC526C38FC8B27607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:29:53:e0:95:c1:66:7c:65:a2:53:f8:ee:dd:
                    9c:1f:d5:32:35:20:e0:02:8e:f7:db:9a:25:38:83:
                    2c:92:92:0b:19:90:7b:e0:06:5f:84:aa:1b:21:d1:
                    3a:02:7a:cf:22:ff:6e:84:3f:fd:a8:81:fc:1c:70:
                    e5:47:58:1d:42:9d:f0:08:e8:a7:19:46:c8:7f:b6:
                    a2:1f:3c:2b:90:42:4a:b6:f0:66:7a:2f:da:2b:b4:
                    c9:c9:23:d3:48:a2:91:32:e8:be:31:54:f6:8d:76:
                    06:57:c8:18:6b:af:ff:11:d1:e3:30:3a:9d:04:8b:
                    fd:73:ac:04:18:6f:c5:f8:ba:f6:46:9c:53:b6:9c:
                    f5:65:e7:a8:d0:21:f8:50:df:22:dc:07:f5:97:53:
                    98:39:29:98:d0:61:28:97:b9:7e:8f:b7:a8:5b:b4:
                    e0:c1:da:e1:bc:ee:d6:3d:d8:ff:01:08:5e:6c:40:
                    44:a0:a3:e1:d3:8d:20:d0:0e:a8:65:00:d4:12:54:
                    ce:f6:2b:1a:94:24:7c:54:58:8e:75:64:2f:54:90:
                    41:b6:2a:de:14:06:81:41:0d:96:cf:51:e9:6d:1e:
                    bc:ab:23:18:1e:12:bc:f3:ea:3a:ab:02:05:b9:95:
                    36:73:ac:6c:bf:13:fa:83:58:10:2c:b6:8c:20:5b:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D8:CE:76:26:5E:BC:5D:69:E2:B7:6A:C5:26:C3:8F:C8:B2:76:07
            X509v3 Authority Key Identifier:
                keyid:DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a6330303a3a2f33382d3338203d3e203439353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         83:4c:00:b3:85:ca:70:a6:b9:6c:d9:11:78:62:4a:0a:cd:a8:
         1c:fc:92:35:55:25:a9:4e:1f:53:b0:6c:75:5f:9a:e9:2d:3a:
         a3:56:75:b0:7e:4a:1d:3a:31:cf:34:f0:a3:22:f2:91:bb:b8:
         70:55:27:82:8c:75:2e:88:03:1c:a0:a1:5a:a0:c6:e8:b8:86:
         32:12:4b:3f:cb:44:f6:1a:30:4b:be:5c:2c:d2:78:50:d6:74:
         15:64:8b:79:83:67:c0:56:81:0c:a2:7b:0c:0b:94:bf:53:88:
         ca:fe:b3:6c:40:61:12:02:5e:c2:29:ec:2c:9a:dc:2e:17:5b:
         59:93:32:40:24:11:a4:6a:e7:be:0a:93:78:2d:d4:5d:93:b1:
         4b:be:38:42:3c:77:c4:a4:66:6f:dd:80:20:42:80:ff:75:10:
         98:c0:83:20:f9:e6:66:61:07:83:c1:9f:8f:ff:1c:2e:d8:17:
         5d:f2:4e:1a:57:94:df:fe:20:b9:87:6c:ef:83:21:f2:ec:4b:
         b7:74:69:1e:15:02:a0:f9:d7:f2:95:a3:c7:76:d9:51:a5:c0:
         42:fd:71:f8:96:b1:07:4d:77:d2:09:32:45:ca:e6:5e:c0:24:
         94:50:80:c1:63:90:7a:d1:68:6b:50:55:4a:3e:2c:00:8f:a0:
         a7:68:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org