Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a613030303a3a2f33362d3336203d3e20323133393933.roa
File: 326131343a3763303a613030303a3a2f33362d3336203d3e20323133393933.roa (raw, json)
Hash identifier: KhieNTBBqRzZrwHHTp8ywr1crHmbK2ZYtU6y/IcnN+8=
Subject key identifier: 23:31:B2:15:E2:1C:64:CE:3C:8F:E4:E6:F6:2C:7F:00:55:3C:C5:F6
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 05D624B9C8E6E16FC6A2B1265FAF838F13D092E1
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a613030303a3a2f33362d3336203d3e20323133393933.roa
Signing time: Thu 30 Oct 2025 21:43:55 +0000
ROA not before: Thu 30 Oct 2025 21:38:55 +0000
ROA not after: Thu 29 Oct 2026 21:43:55 +0000
asID: 213993
IP address blocks: 2a14:7c0:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d6:24:b9:c8:e6:e1:6f:c6:a2:b1:26:5f:af:83:8f:13:d0:92:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Oct 30 21:38:55 2025 GMT
Not After : Oct 29 21:43:55 2026 GMT
Subject: CN=2331B215E21C64CE3C8FE4E6F62C7F00553CC5F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:59:b4:e7:b7:d2:c9:d4:ee:56:7f:e0:d3:
db:ea:32:3c:cb:cd:bb:61:8b:91:55:ce:0c:5b:81:
57:00:dd:86:4c:c9:62:28:bb:5c:38:7d:70:32:00:
2e:61:da:12:d4:70:d3:40:04:25:b1:ff:e6:76:58:
e4:ab:0e:aa:45:f5:cd:f3:73:7b:33:37:d0:ed:4b:
7c:c0:10:7c:dd:b0:5e:c5:71:6b:72:3c:8a:7b:d8:
87:f3:dc:92:31:c6:3c:22:ce:c7:b6:ee:19:ca:6f:
b4:ea:e3:b7:5e:b9:e3:7a:e1:90:73:03:b7:ce:3a:
ef:b6:e8:8a:f3:94:3d:23:5d:b6:71:89:1c:fc:58:
f4:83:76:f0:86:ae:0d:9e:9f:8a:e6:2c:a7:cf:24:
92:e7:90:a2:04:61:f7:c8:bc:55:f9:bb:45:e9:84:
f1:12:97:cd:05:f7:33:93:4d:67:a1:05:12:32:ac:
22:50:8f:d8:ce:d3:eb:56:73:3e:d1:36:63:25:ca:
c2:d4:72:80:0a:71:37:a7:e3:48:f1:24:fa:40:07:
ec:10:63:2b:81:ac:c3:53:7e:87:3f:32:4b:dd:80:
7f:4b:81:4f:0d:f9:36:3e:30:fc:7f:53:84:63:65:
d5:f8:fc:27:d9:f9:a9:4b:ac:20:e9:27:95:40:53:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:31:B2:15:E2:1C:64:CE:3C:8F:E4:E6:F6:2C:7F:00:55:3C:C5:F6
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a613030303a3a2f33362d3336203d3e20323133393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:a000::/36
Signature Algorithm: sha256WithRSAEncryption
80:e1:77:4c:7d:4c:1d:87:8b:12:9d:60:80:7a:7e:98:7a:58:
6e:85:9d:b0:ae:71:75:51:e0:3d:c5:64:3e:9c:0d:6e:c0:e5:
37:a6:fd:52:91:e6:96:b1:41:db:26:d0:48:2d:c6:84:df:d8:
1f:b5:cf:0a:5f:65:34:f0:d0:02:08:0d:5b:ce:9f:1b:6b:18:
f1:05:3b:67:cb:98:0c:2b:76:e1:3a:f7:9f:d5:64:ae:51:a7:
99:18:55:d3:85:e5:fc:37:f8:f6:eb:c1:c2:ba:4d:01:62:51:
20:37:da:62:fe:f8:c4:59:ce:29:8c:ad:71:f5:a6:b9:74:28:
9b:b8:bf:22:97:4d:4f:13:cd:01:35:55:6d:3e:33:ef:8f:57:
4d:fe:13:0d:38:8c:18:be:64:e4:51:be:fe:b8:55:75:0f:5c:
d0:09:35:74:22:91:c6:e5:f4:89:88:af:f2:fe:4e:90:ae:c0:
f4:30:c9:3f:33:6b:5f:14:58:d6:00:fe:c1:17:1a:42:dc:44:
1a:32:3c:4d:fa:c5:4e:37:1d:59:c7:81:2f:dc:83:5a:a6:f6:
58:bc:6f:2c:81:16:fe:79:91:99:0e:3f:70:76:dd:ac:0a:17:
f0:54:6a:92:95:e2:87:93:62:80:50:48:a3:8f:e7:42:d0:1c:
9b:fa:77:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:29:24 2025 by rpki-client