Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763363a3a2f33322d3332203d3e203439353831.roa
File:                     326131343a3763363a3a2f33322d3332203d3e203439353831.roa (raw, json)
Hash identifier:          C5UqaFRBX5AfDicnOpZFVIgDqJy6HWy6oo/9rCtn4ck=
Subject key identifier:   8B:60:90:54:84:1F:44:4E:92:E0:50:62:99:BB:1E:E5:1B:90:34:AC
Certificate issuer:       /CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
Certificate serial:       7BBFE3D1D619A28C9413C0FFA23047A36718C230
Authority key identifier: DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763363a3a2f33322d3332203d3e203439353831.roa
Signing time:             Tue 28 May 2024 17:42:48 +0000
ROA not before:           Tue 28 May 2024 17:37:48 +0000
ROA not after:            Tue 27 May 2025 17:42:48 +0000
asID:                     49581
IP address blocks:        2a14:7c6::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl
                          rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 06:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bf:e3:d1:d6:19:a2:8c:94:13:c0:ff:a2:30:47:a3:67:18:c2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
        Validity
            Not Before: May 28 17:37:48 2024 GMT
            Not After : May 27 17:42:48 2025 GMT
        Subject: CN=8B609054841F444E92E0506299BB1EE51B9034AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:33:df:9a:fa:47:ec:40:6b:0a:f1:b2:cc:
                    62:96:77:23:a7:da:5f:85:84:b7:08:11:a4:50:ef:
                    1b:eb:dd:79:08:e4:5c:41:0a:80:68:56:01:46:b5:
                    cf:0b:be:5f:00:d6:c1:c3:05:4b:59:33:d4:62:bd:
                    37:1b:b0:dc:b9:69:44:37:37:3a:f4:4f:82:52:36:
                    c8:cf:4c:dd:62:01:c4:46:af:f6:36:1d:a0:a9:3b:
                    31:e5:d5:34:5b:72:df:2b:50:aa:c9:d1:c5:fa:d8:
                    cd:ac:11:99:f1:81:2e:7a:ad:ef:89:14:9f:7d:db:
                    2b:86:06:af:4e:e9:d2:80:98:bd:f0:12:8b:50:7d:
                    6d:c0:43:2b:4a:2f:a8:78:17:74:9a:40:68:9c:0c:
                    b6:d3:a4:37:ed:8c:21:73:fe:1a:b9:05:00:3b:7b:
                    24:a1:ec:ea:c6:68:03:eb:2e:75:23:5b:df:cc:d4:
                    90:2e:19:f3:d6:3f:24:19:8d:7b:26:2d:76:1e:2c:
                    07:8b:16:2d:f9:54:5c:02:95:50:9e:5c:16:71:29:
                    ac:5f:f1:da:3d:9c:90:bf:c1:74:68:d5:e6:ad:6d:
                    da:20:84:7c:14:c0:a0:f3:ff:39:9f:4f:7a:c4:94:
                    64:76:ca:bc:02:f9:6d:30:b5:0f:e4:64:56:fa:33:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:90:54:84:1F:44:4E:92:E0:50:62:99:BB:1E:E5:1B:90:34:AC
            X509v3 Authority Key Identifier:
                keyid:DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763363a3a2f33322d3332203d3e203439353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:4d:a7:24:ed:8a:7e:09:24:6b:9c:1d:c9:ca:9d:94:b9:b6:
         1c:bd:dd:26:7a:bb:f3:22:62:95:40:03:95:90:9a:99:c7:f5:
         76:0e:75:f8:a0:fa:b3:9b:06:48:9b:bd:34:21:c6:36:38:5e:
         13:fe:b9:b3:89:fa:95:74:ef:e5:da:27:e1:e3:f3:1d:e6:48:
         89:c5:b1:40:6e:35:38:59:fd:ff:67:d1:c2:48:51:c5:c6:2b:
         28:7c:65:b8:b3:1c:46:3b:db:28:03:ae:0e:07:5a:7a:c1:11:
         42:e6:cb:b9:8d:76:22:d8:8c:7d:11:3b:8a:72:d1:8d:14:1b:
         92:b4:3c:38:34:a0:91:6e:d6:7f:60:63:fc:76:66:a2:08:4d:
         19:45:60:b6:cd:d4:59:99:3c:17:d0:18:9a:53:b2:2f:06:8b:
         9b:e1:b9:34:61:fd:14:b6:23:96:0d:5c:be:0d:35:aa:85:ac:
         41:6a:a1:70:84:c1:7a:ac:ff:ed:d4:bc:6f:d7:91:b5:a4:4f:
         7f:c4:20:41:ad:63:66:71:e4:f9:67:51:32:58:a6:26:57:b6:
         6e:c7:b0:74:db:1f:48:38:18:e8:dd:7e:92:34:5e:90:d7:4a:
         c9:a8:5a:3d:a7:3b:37:47:11:13:29:ea:b6:54:eb:87:26:64:
         b6:ba:06:9c
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUe7/j0dYZooyUE8D/ojBHo2cYwjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENCRTA0NUJFQTg5N0QyOUNCMTI3OTlEQzM4RUY3NEQw
MzlCMjhFRTAeFw0yNDA1MjgxNzM3NDhaFw0yNTA1MjcxNzQyNDhaMDMxMTAvBgNV
BAMTKDhCNjA5MDU0ODQxRjQ0NEU5MkUwNTA2Mjk5QkIxRUU1MUI5MDM0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/zPfmvpH7EBrCvGyzGKWdyOn
2l+FhLcIEaRQ7xvr3XkI5FxBCoBoVgFGtc8Lvl8A1sHDBUtZM9RivTcbsNy5aUQ3
Nzr0T4JSNsjPTN1iAcRGr/Y2HaCpOzHl1TRbct8rUKrJ0cX62M2sEZnxgS56re+J
FJ992yuGBq9O6dKAmL3wEotQfW3AQytKL6h4F3SaQGicDLbTpDftjCFz/hq5BQA7
eySh7OrGaAPrLnUjW9/M1JAuGfPWPyQZjXsmLXYeLAeLFi35VFwClVCeXBZxKaxf
8do9nJC/wXRo1eatbdoghHwUwKDz/zmfT3rElGR2yrwC+W0wtQ/kZFb6M5MbAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUi2CQVIQfRE6S4FBimbse5RuQNKwwHwYDVR0j
BBgwFoAU3L4EW+qJfSnLEnmdw473TQObKO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vaW5maW5p
cm91dGUtcHJveGlmbGFyZS8xL0RDQkUwNDVCRUE4OTdEMjlDQjEyNzk5REMzOEVG
NzREMDM5QjI4RUUuY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5
bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0RDQkUwNDVC
RUE4OTdEMjlDQjEyNzk5REMzOEVGNzREMDM5QjI4RUUuY2VyMIGIBggrBgEFBQcB
CwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8v
aW5maW5pcm91dGUtcHJveGlmbGFyZS8xLzMyNjEzMTM0M2EzNzYzMzYzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzNDM5MzUzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhQHxjANBgkq
hkiG9w0BAQsFAAOCAQEAf02nJO2Kfgkka5wdycqdlLm2HL3dJnq78yJilUADlZCa
mcf1dg51+KD6s5sGSJu9NCHGNjheE/65s4n6lXTv5don4ePzHeZIicWxQG41OFn9
/2fRwkhRxcYrKHxluLMcRjvbKAOuDgdaesERQubLuY12ItiMfRE7inLRjRQbkrQ8
ODSgkW7Wf2Bj/HZmoghNGUVgts3UWZk8F9AYmlOyLwaLm+G5NGH9FLYjlg1cvg01
qoWsQWqhcITBeqz/7dS8b9eRtaRPf8QgQa1jZnHk+WdRMlimJle2bsewdNsfSDgY
6N1+kjRekNdKyahaPac7N0cREynqtlTrhyZktroGnA==
-----END CERTIFICATE-----
Generated at Mon Jul 1 10:01:37 2024 by rpki-client on console-fra.rpki-client.org