Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363630303a3a2f34302d3430203d3e20323133393933.roa
File: 326131343a3763303a363630303a3a2f34302d3430203d3e20323133393933.roa (raw, json)
Hash identifier: H5rsHiDQMlEwb4yxTlbRioLfgrGffl41oK8RIrCd4Yw=
Subject key identifier: 4F:B2:5E:D4:34:22:CC:29:F8:5D:C9:FD:90:84:8E:85:EF:05:3F:25
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 76477D112DC864BF633EA764B4D47C7C1A32DF8A
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363630303a3a2f34302d3430203d3e20323133393933.roa
Signing time: Thu 30 Oct 2025 21:43:55 +0000
ROA not before: Thu 30 Oct 2025 21:38:55 +0000
ROA not after: Thu 29 Oct 2026 21:43:55 +0000
asID: 213993
IP address blocks: 2a14:7c0:6600::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:47:7d:11:2d:c8:64:bf:63:3e:a7:64:b4:d4:7c:7c:1a:32:df:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Oct 30 21:38:55 2025 GMT
Not After : Oct 29 21:43:55 2026 GMT
Subject: CN=4FB25ED43422CC29F85DC9FD90848E85EF053F25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:c9:2d:dd:22:91:0e:81:2f:1f:46:e9:fb:
85:7a:fc:c6:cc:0d:62:db:e1:b2:28:22:01:be:61:
e8:87:28:47:48:68:03:80:b3:9b:39:4f:da:17:41:
62:01:66:4c:3a:85:e6:ab:b5:be:5d:fb:b5:b9:64:
fc:4b:1d:fe:26:4d:21:5d:6a:e7:4a:58:a1:e4:16:
94:f6:66:90:1b:04:57:9f:6f:f9:f1:6a:0c:6b:90:
d1:5e:bf:e4:7d:09:c5:de:30:59:bc:fe:28:16:6d:
f0:71:c8:fa:aa:9d:73:d3:96:eb:9c:19:e6:64:cf:
20:2a:ab:3f:33:e8:8b:d7:a7:20:3f:98:3c:34:7f:
2c:f9:2a:40:ce:7a:74:d9:4f:4d:b1:cf:4c:71:ff:
2b:d5:11:11:23:04:2e:5d:59:08:38:56:b5:97:e0:
0c:e1:55:43:10:fe:23:02:a5:22:90:5e:82:9b:a2:
d2:55:9f:98:98:76:ff:ed:48:c3:9a:f3:a5:42:24:
3c:eb:1b:6e:b6:62:0b:71:5d:a4:09:01:0d:7e:a6:
e3:01:07:11:1e:64:8b:a4:54:b4:0b:23:ea:eb:53:
ac:cb:6f:96:ef:c5:07:bd:76:b6:87:5d:de:06:03:
58:a7:07:88:87:45:39:42:e0:aa:ae:fc:6c:16:38:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B2:5E:D4:34:22:CC:29:F8:5D:C9:FD:90:84:8E:85:EF:05:3F:25
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363630303a3a2f34302d3430203d3e20323133393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:6600::/40
Signature Algorithm: sha256WithRSAEncryption
21:f8:6b:76:f7:ab:d2:d2:53:6f:02:60:01:9c:91:44:eb:43:
79:f5:e3:bb:2b:9b:10:75:9d:eb:0e:75:7b:a6:80:da:cc:22:
07:63:6e:0c:b2:41:70:b7:04:10:a5:28:c7:38:30:73:5c:75:
44:4d:d9:0f:0b:ac:d6:c9:93:49:05:e0:ac:ea:91:24:01:23:
83:d3:41:5d:d3:94:84:45:f8:7d:62:a0:68:0e:94:47:12:23:
c6:75:b2:09:36:cf:3f:48:27:e4:ec:4c:30:ca:18:77:b5:3e:
03:31:8f:68:78:3b:91:90:01:04:2f:be:9b:2f:f4:4a:2c:a7:
11:e4:53:8d:15:d8:05:97:c4:99:4a:c4:de:d4:9a:c1:6e:b5:
69:aa:23:d2:75:39:ac:35:80:af:1a:68:f1:37:53:58:99:9a:
e3:40:b4:51:d8:78:8f:61:c3:e4:eb:6f:fa:4d:99:c0:24:fe:
ce:eb:27:d6:3c:6d:8b:8d:7e:d1:c2:4b:97:07:07:79:e4:4e:
3c:e7:f9:0c:df:f7:69:28:fb:30:cf:ab:b2:a5:ff:bd:cf:0d:
67:ec:49:66:5b:b6:4e:b9:17:db:11:39:71:7d:08:58:2d:07:
39:27:a1:51:d7:ce:90:53:cd:7e:5c:c7:69:99:6c:f7:10:36:
4a:88:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:17:44 2025 by rpki-client