Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663130303a3a2f34302d3430203d3e203634343537.roa
File: 326131343a3763303a663130303a3a2f34302d3430203d3e203634343537.roa (raw, json)
Hash identifier: ghBox+3KVtZNbWm7fFBVnHsAEHQ4Fm64hM+uuHRu7yQ=
Subject key identifier: 33:15:DF:22:AE:A9:E6:A5:C0:86:77:DC:75:49:33:9A:42:33:9D:4A
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 31EDB6A78256A7D846E65B42877CACBA375293EC
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663130303a3a2f34302d3430203d3e203634343537.roa
Signing time: Wed 22 Oct 2025 19:43:52 +0000
ROA not before: Wed 22 Oct 2025 19:38:52 +0000
ROA not after: Wed 21 Oct 2026 19:43:52 +0000
asID: 64457
IP address blocks: 2a14:7c0:f100::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ed:b6:a7:82:56:a7:d8:46:e6:5b:42:87:7c:ac:ba:37:52:93:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Oct 22 19:38:52 2025 GMT
Not After : Oct 21 19:43:52 2026 GMT
Subject: CN=3315DF22AEA9E6A5C08677DC7549339A42339D4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:47:b2:f7:ab:4b:8d:7f:7d:af:f8:ca:43:
67:c1:7e:0e:d6:c5:52:f6:ed:54:f7:22:87:d6:56:
de:2a:9d:86:6b:fe:2f:e0:0c:98:51:4d:5f:d7:84:
1d:99:0a:3c:15:fc:da:b9:25:d7:83:a4:39:bf:18:
33:05:cc:9b:35:c9:dd:16:39:d2:0b:69:89:2c:42:
88:a5:d9:a1:86:e6:3a:da:3a:3b:84:3c:70:40:96:
78:f3:fb:53:e1:e3:9a:01:68:31:97:52:f9:55:ba:
75:d5:40:74:bb:1c:5f:78:0e:4d:e0:ee:89:07:ea:
41:15:45:68:59:3a:ad:77:4f:62:90:6a:c8:71:8a:
fc:7e:3a:2e:33:e1:dc:14:14:9d:77:d5:c0:96:e4:
01:e4:9a:73:8a:6b:41:15:f1:4f:46:c4:5a:0d:80:
5b:d8:d2:3d:d6:a9:68:5e:18:6d:7f:12:d1:0d:65:
de:0b:c8:95:12:95:55:6f:25:f7:53:1c:71:61:27:
9c:20:71:b4:66:43:ab:d9:51:b1:09:ee:df:e4:8a:
ed:87:ea:a5:a2:4a:21:22:41:71:5b:cb:1c:f2:85:
9a:a8:23:7d:7e:5d:d5:8b:20:27:60:ba:23:1f:82:
cf:11:1d:bf:53:7c:c8:77:f6:33:d6:d0:0d:62:dc:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:15:DF:22:AE:A9:E6:A5:C0:86:77:DC:75:49:33:9A:42:33:9D:4A
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663130303a3a2f34302d3430203d3e203634343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:f100::/40
Signature Algorithm: sha256WithRSAEncryption
11:93:97:27:7e:ac:3c:1f:5c:d0:ec:94:02:f0:fa:0c:e6:96:
c0:c2:a2:18:4c:8c:0a:33:1a:c5:ec:96:26:a9:2c:fb:26:3b:
18:df:d3:00:6d:e6:2c:a3:2c:16:b7:be:d9:a2:a6:c1:f5:f1:
fb:b1:ec:69:06:23:e7:4b:f3:95:95:26:4d:39:06:bd:1b:ec:
a7:f1:63:23:28:e3:e1:57:6b:ef:ce:b2:94:d0:55:76:74:a9:
0f:5b:08:04:b7:91:df:ef:fd:d9:31:1a:cc:ac:f9:d4:e8:c2:
4d:b9:17:56:e8:71:ab:6d:b0:c9:ba:eb:3e:b7:32:ed:78:af:
9f:f8:80:c6:8b:59:0c:8d:fe:e8:1e:f6:f5:e7:b0:54:1e:0e:
cf:8a:4d:b9:04:f3:06:da:49:32:f4:8d:cc:ee:bd:6f:6a:b3:
e1:0d:46:ed:b4:c9:a8:08:e7:16:ce:ba:c0:51:41:2c:c1:41:
69:49:6b:54:a7:77:0a:e1:7e:83:c9:5a:7a:f2:e7:be:cf:be:
ff:21:3b:ed:47:7b:9a:57:8c:de:32:42:e9:2e:4c:d0:5d:16:
7e:bc:0c:f9:76:6c:0f:e1:35:a8:b1:0b:e9:ef:b9:39:2e:d0:
7b:f5:eb:78:6e:e5:ae:b0:61:73:44:9f:35:e3:7e:56:a4:71:
8a:97:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:50:17 2025 by rpki-client