Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/326130623a326630303a3a2f33322d3332203d3e203438313132.roa
File: 326130623a326630303a3a2f33322d3332203d3e203438313132.roa (raw, json)
Hash identifier: 57CW4xp8STDXfYck9c87XtU7ItSmlNQK/Zt9V6rKWQ4=
Subject key identifier: DB:2F:BD:48:FA:D6:9C:73:A9:67:70:11:F9:A0:1D:CB:AB:82:D3:E8
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 1C1AD965B281CC047BDA7F5CA03B3E8FF921EFC9
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630303a3a2f33322d3332203d3e203438313132.roa
Signing time: Thu 06 Mar 2025 19:37:52 +0000
ROA not before: Thu 06 Mar 2025 19:32:52 +0000
ROA not after: Thu 05 Mar 2026 19:37:52 +0000
asID: 48112
IP address blocks: 2a0b:2f00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1a:d9:65:b2:81:cc:04:7b:da:7f:5c:a0:3b:3e:8f:f9:21:ef:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Mar 6 19:32:52 2025 GMT
Not After : Mar 5 19:37:52 2026 GMT
Subject: CN=DB2FBD48FAD69C73A9677011F9A01DCBAB82D3E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:39:42:1b:62:52:f6:20:3d:43:d8:ae:38:
9d:3e:e1:4f:d6:fd:1b:16:65:06:a7:89:b6:1a:6c:
9c:0b:55:3b:eb:85:5a:ec:f9:cc:51:02:8e:39:5d:
e8:14:53:f9:40:58:5c:37:09:0b:a1:d7:96:5b:1d:
27:f5:09:0a:18:96:94:54:e6:0a:92:36:a6:40:16:
9c:0e:97:f4:af:1d:0c:0d:e9:15:2e:5e:95:7d:a2:
9d:52:ba:83:43:16:3e:be:98:70:d7:33:55:90:64:
4f:b8:1e:a2:80:90:53:a5:b7:a3:a3:3a:8e:53:41:
f8:9d:6a:a6:5c:85:6a:0f:8b:b6:ef:43:a3:11:2b:
43:08:1a:24:b2:4c:67:79:b3:7d:a9:04:53:8f:dd:
e3:e3:68:17:7c:cd:0a:20:66:22:7d:fa:a0:5f:77:
2e:29:66:35:85:b6:cc:f5:49:72:31:45:5a:61:ed:
35:94:a6:fa:56:32:e7:d1:a6:a7:66:bf:6f:d9:82:
6c:52:7c:f6:52:a8:97:f4:74:27:7f:87:dd:c6:ce:
1f:c7:e8:36:d5:ec:36:c1:bc:aa:05:bc:c7:46:c5:
ff:ea:3f:53:a2:cc:a7:c2:8a:39:09:8a:47:d7:be:
7b:34:4e:e4:be:db:47:89:0f:cd:de:60:dd:e3:fd:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2F:BD:48:FA:D6:9C:73:A9:67:70:11:F9:A0:1D:CB:AB:82:D3:E8
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630303a3a2f33322d3332203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2f00::/32
Signature Algorithm: sha256WithRSAEncryption
6c:ec:3b:6c:e6:05:7d:65:2c:65:30:26:2b:cd:90:80:95:c7:
6c:37:7e:28:84:7d:2c:a8:da:8e:86:89:00:78:8a:dd:56:82:
4a:44:82:1c:87:3c:86:86:18:16:0b:f8:5e:6c:22:f8:c8:f6:
3c:24:23:8c:aa:38:38:bc:31:ef:d8:27:f0:50:21:74:17:64:
25:5b:0b:0e:5e:49:53:0d:24:1c:0e:fa:0a:41:68:6a:35:0d:
be:24:df:a2:31:64:b4:b0:06:32:c8:52:d0:41:9c:00:d0:ea:
07:c3:39:5c:f2:81:12:ae:9f:38:f7:d0:75:57:28:58:3d:67:
a9:15:50:4c:17:43:66:26:81:2c:7d:71:ec:23:58:c3:e5:75:
87:d2:50:13:21:69:b2:16:2d:88:4d:a6:65:0c:1f:46:ec:4b:
30:3e:75:02:6a:d5:29:61:38:37:37:47:d0:9e:e6:49:00:ff:
60:fb:96:64:d5:72:e9:1c:c8:0f:cd:f0:05:6b:aa:74:dd:fc:
ca:5d:56:ec:ab:95:ae:d0:04:7e:7c:b5:fd:db:ba:f3:08:3f:
4d:16:27:8e:f0:09:93:6e:af:6f:25:ab:d0:c5:26:50:73:95:
9c:f6:30:d6:ad:04:6c:b4:c0:31:b9:e9:c6:a4:70:80:b9:b2:
a0:ef:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:49 2025 by rpki-client