Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763313a3a2f33322d3332203d3e20323135353331.roa
File:                     326131343a3763313a3a2f33322d3332203d3e20323135353331.roa (raw, json)
Hash identifier:          KygIV4p/mAUz0Hmw5+JbPq4v/DUgdXrsvGkCkmLvX40=
Subject key identifier:   85:C1:F9:71:13:8A:3E:A3:0E:24:64:2C:56:2A:25:20:A6:E4:18:6D
Certificate issuer:       /CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
Certificate serial:       5EE05E3A110AA50AB17E55CF72120D991843EF3F
Authority key identifier: DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763313a3a2f33322d3332203d3e20323135353331.roa
Signing time:             Tue 28 May 2024 17:50:47 +0000
ROA not before:           Tue 28 May 2024 17:45:47 +0000
ROA not after:            Tue 27 May 2025 17:50:47 +0000
asID:                     215531
IP address blocks:        2a14:7c1::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl
                          rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 10:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e0:5e:3a:11:0a:a5:0a:b1:7e:55:cf:72:12:0d:99:18:43:ef:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
        Validity
            Not Before: May 28 17:45:47 2024 GMT
            Not After : May 27 17:50:47 2025 GMT
        Subject: CN=85C1F971138A3EA30E24642C562A2520A6E4186D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:9f:3d:e1:0a:ea:a7:9b:d3:e7:c4:71:46:
                    c5:07:ed:0e:cb:17:2e:60:35:3b:19:e5:a4:6a:54:
                    a2:eb:f2:5a:83:a0:75:e4:bb:2c:e9:6b:9d:a0:0a:
                    09:b9:17:db:f0:3c:1e:69:77:38:e5:d5:30:4f:15:
                    df:f2:de:99:da:f3:bc:72:20:10:af:5e:b0:ef:c6:
                    31:ed:7d:2b:76:77:ab:92:1e:63:6a:71:8a:56:ff:
                    7b:b8:0f:3c:1d:0f:74:19:aa:1a:34:fc:d5:2a:d2:
                    03:24:48:20:01:4d:78:b1:db:b3:fa:9d:e2:47:97:
                    17:2b:b3:55:8e:56:e7:6b:4d:d3:7a:fe:79:af:b2:
                    df:e2:75:d2:19:87:36:1d:cc:6f:29:06:2f:91:36:
                    f7:ad:65:a1:01:21:7a:04:a3:8c:cc:78:ce:7a:94:
                    5d:55:19:fb:c3:07:e9:0e:1e:59:57:cd:c3:dc:d5:
                    55:f2:97:d6:48:9d:4c:67:d2:a4:7e:ad:08:3c:81:
                    e6:a1:8f:9c:97:76:90:01:58:05:35:e2:8e:e3:b2:
                    01:14:ec:94:2e:21:29:e0:dd:1d:24:4f:85:27:cd:
                    dd:9a:1f:39:fb:89:b9:76:3f:d0:14:68:56:d7:da:
                    fe:9d:89:f7:70:23:f1:cc:38:b8:be:a7:32:c8:12:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C1:F9:71:13:8A:3E:A3:0E:24:64:2C:56:2A:25:20:A6:E4:18:6D
            X509v3 Authority Key Identifier:
                keyid:DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763313a3a2f33322d3332203d3e20323135353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:be:8c:0a:d4:60:94:18:06:13:b3:1a:a0:75:7c:34:ca:b1:
         ee:85:f8:6b:d3:f9:41:2e:95:6b:30:06:f3:bd:a2:c7:59:01:
         c5:9f:c3:d1:d5:75:0a:a0:c2:ce:33:f4:19:f3:6e:9b:9a:d3:
         37:03:11:e2:f6:c3:a9:15:b3:ca:ab:08:2d:e5:35:e4:cf:6f:
         db:04:68:48:b0:6f:0b:17:09:e5:37:91:60:1c:85:e6:8f:c4:
         d6:7e:a6:db:67:3d:4d:43:07:71:5d:b4:23:83:f4:98:04:6e:
         83:ec:e7:8a:69:74:df:3e:28:17:3b:fe:9d:a5:c7:94:39:e5:
         57:8a:54:1d:0b:94:6e:c5:b7:22:df:da:0d:88:11:27:1e:54:
         92:fa:b3:12:54:a6:db:a0:ad:48:b5:92:18:03:fc:28:8e:96:
         0a:70:18:07:a3:b7:d6:58:36:e3:09:fd:84:00:fe:04:8d:7f:
         bf:b2:d0:cb:d8:41:7d:e1:85:15:9c:96:42:5b:b1:db:4f:ca:
         4f:ed:60:05:9a:4b:48:6b:e8:5f:1a:8e:1a:5e:55:b1:2f:c8:
         16:dc:bd:ba:69:1a:05:c3:9f:86:09:a4:bc:6f:d8:f6:32:0b:
         e3:0f:d6:76:99:6d:87:d7:5e:4f:69:51:36:6c:d4:16:56:dd:
         3e:1c:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:03 2024 by rpki-client on console-ams.rpki-client.org