Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313734333a3a2f34382d3438203d3e203630383431.roa
File: 326131343a3763303a313734333a3a2f34382d3438203d3e203630383431.roa (raw, json)
Hash identifier: hRe+a69gMvTJGIyZh87nMCL7Zp19g7i3mwXgllxXwhA=
Subject key identifier: 2F:DF:B4:20:08:72:25:4D:5C:9B:E5:2D:A8:3A:84:D6:99:4C:DB:9E
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 73288A0DF1A47EAD2EF9B43E7B4B03861DE91155
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313734333a3a2f34382d3438203d3e203630383431.roa
Signing time: Wed 22 Oct 2025 20:43:53 +0000
ROA not before: Wed 22 Oct 2025 20:38:53 +0000
ROA not after: Wed 21 Oct 2026 20:43:53 +0000
asID: 60841
IP address blocks: 2a14:7c0:1743::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:28:8a:0d:f1:a4:7e:ad:2e:f9:b4:3e:7b:4b:03:86:1d:e9:11:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Oct 22 20:38:53 2025 GMT
Not After : Oct 21 20:43:53 2026 GMT
Subject: CN=2FDFB4200872254D5C9BE52DA83A84D6994CDB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:ad:ee:dd:e8:ea:4f:3d:10:f8:2f:3f:71:
15:78:b9:c3:b0:fc:ab:31:73:25:24:a4:5b:c9:e8:
97:2a:a1:d5:0f:25:ad:aa:78:ed:96:06:49:2a:9e:
ca:4c:96:56:24:70:bb:04:33:be:d6:da:12:f9:21:
30:49:ce:80:a8:21:76:6f:08:34:a2:34:08:85:b3:
d7:ff:e3:83:3e:57:18:25:a2:6f:a0:16:85:de:85:
53:2b:a6:cb:22:ce:86:92:44:0f:2e:d2:15:94:e3:
83:e0:71:bd:17:dd:e9:4a:6e:05:57:b6:39:52:5c:
6d:44:1a:8d:7a:0f:b7:25:cf:b5:fe:c4:d9:89:41:
63:c8:58:c8:12:62:cc:88:5a:fb:9e:9f:10:f8:2c:
40:24:2e:25:84:e3:f8:5b:a0:59:f9:1d:12:04:7d:
94:67:98:06:e4:8a:7c:65:d6:63:c5:68:10:f5:bd:
fe:90:e3:21:01:36:11:e7:61:ab:13:3a:ae:c7:dc:
d2:56:7d:6d:0b:92:9b:94:ba:45:4f:fa:de:5b:a8:
b0:44:30:10:58:ea:62:87:5e:0c:68:eb:95:d7:42:
e5:9e:cc:cc:8b:2e:26:c8:81:5b:26:92:7d:91:ad:
a9:c7:3f:41:ca:8d:19:54:40:57:c6:0c:e9:3d:9a:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:B4:20:08:72:25:4D:5C:9B:E5:2D:A8:3A:84:D6:99:4C:DB:9E
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313734333a3a2f34382d3438203d3e203630383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1743::/48
Signature Algorithm: sha256WithRSAEncryption
a0:d0:86:38:28:70:51:60:a5:bb:38:f9:91:d2:6f:a6:99:d9:
ea:4b:52:0b:59:c4:d9:06:db:e3:1f:05:55:67:6c:b0:05:99:
80:7c:f0:99:a8:28:00:9d:ab:62:c6:9a:e2:a1:9b:82:3b:34:
87:71:70:3b:b1:39:de:f0:ec:dc:bd:9c:03:53:c8:55:32:c0:
b4:64:aa:e3:c1:39:fc:49:a2:ee:18:f8:4c:50:cd:4d:13:83:
1f:41:44:a1:a4:7e:a5:0c:f4:a5:93:3e:4d:de:63:66:16:d3:
b5:f4:97:a7:da:ab:eb:8e:2d:d2:9b:cd:dd:bd:7c:0d:95:d4:
ee:fa:37:09:74:a3:46:12:95:4f:98:08:e6:69:fe:2b:56:d2:
f9:23:c6:99:db:01:a0:d1:d5:c6:a7:21:13:9b:66:f6:a3:47:
01:ac:5c:5c:d8:a9:1d:9a:0a:3b:1f:67:d1:ac:65:a2:75:60:
83:37:d2:e7:b7:c8:ca:75:29:5c:a3:67:19:50:5f:94:a8:4e:
b9:fb:c6:7c:61:06:ee:b4:e7:37:18:a7:40:b7:fd:41:20:f0:
df:a3:bb:6b:da:dd:a5:a3:e2:83:b3:ed:d2:62:77:ba:90:cd:
a0:ad:4d:97:68:82:68:16:fa:09:46:9d:eb:5d:bc:4b:0e:cb:
e1:89:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:55:30 2025 by rpki-client