Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/326130623a326630313a3a2f33322d3332203d3e203438313132.roa
File: 326130623a326630313a3a2f33322d3332203d3e203438313132.roa (raw, json)
Hash identifier: 81bYNAYo0aBXOiyEsbtEPZwsWwULke2xk8Z8g55+XaA=
Subject key identifier: 97:3C:CC:77:D2:D2:8A:63:E8:96:CC:91:26:86:C5:83:FE:0E:3F:49
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 4F41024CB615CFD3F7D6E3FE007606A2D392EC76
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630313a3a2f33322d3332203d3e203438313132.roa
Signing time: Thu 04 Apr 2024 18:56:47 +0000
ROA not before: Thu 04 Apr 2024 18:51:47 +0000
ROA not after: Thu 03 Apr 2025 18:56:47 +0000
asID: 48112
IP address blocks: 2a0b:2f01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 21:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:41:02:4c:b6:15:cf:d3:f7:d6:e3:fe:00:76:06:a2:d3:92:ec:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Apr 4 18:51:47 2024 GMT
Not After : Apr 3 18:56:47 2025 GMT
Subject: CN=973CCC77D2D28A63E896CC912686C583FE0E3F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:89:9f:7e:e8:29:0c:96:06:ed:07:d9:4c:
4e:9a:2a:9e:4d:57:4a:dc:6d:a9:95:dc:96:a3:b8:
2f:74:28:ae:a9:56:13:af:41:fa:7d:6a:ed:04:0c:
49:a0:2b:e5:14:cd:af:d6:fd:fe:2b:57:08:c2:ab:
8b:b8:14:3e:03:3d:97:a2:b2:43:9f:0a:b6:a0:89:
37:4c:8c:bb:15:ff:03:93:fe:63:dd:9c:c1:0d:50:
a5:88:e4:b2:76:2c:33:39:3f:ea:37:92:f2:81:db:
17:66:8d:69:54:8c:1c:21:69:f7:4e:a7:3b:64:72:
2e:00:3b:c8:cb:74:56:1c:af:db:48:e2:67:07:99:
30:73:73:73:3c:09:6a:b4:11:08:04:93:c8:62:01:
be:8a:92:25:95:2a:27:0c:e3:25:64:9c:ca:35:e9:
fc:ac:80:c8:98:c2:6a:56:b7:a0:ce:ce:c5:db:ec:
0a:06:53:66:a3:d0:7b:b3:23:b2:09:5b:05:1c:64:
53:42:01:42:c6:53:3e:12:de:94:45:97:a4:db:77:
18:38:de:60:37:a7:c3:8b:eb:91:77:a4:c8:3e:63:
c7:27:1e:bb:6f:04:aa:65:e4:d2:2a:3d:16:c1:7a:
07:03:ad:7f:b6:b1:bd:33:cf:26:de:cd:0d:53:03:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3C:CC:77:D2:D2:8A:63:E8:96:CC:91:26:86:C5:83:FE:0E:3F:49
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630313a3a2f33322d3332203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2f01::/32
Signature Algorithm: sha256WithRSAEncryption
9c:16:de:b6:ea:d1:b3:96:27:6d:d6:99:3e:bb:7d:9f:1b:62:
8f:55:4e:dc:84:48:4a:df:8f:5d:47:71:c3:9d:d1:71:19:13:
05:11:3c:36:7c:95:86:31:6e:33:45:0d:ee:cc:f6:ea:88:3a:
f3:1c:2f:5d:e0:9c:da:cf:05:6a:09:35:02:ab:67:3c:ed:46:
fe:e3:77:ed:5a:f2:1a:23:01:78:c0:a6:a7:75:7f:d1:d9:3a:
27:fe:bd:3a:ca:7a:ff:e3:00:94:e2:b6:f9:85:9c:be:07:db:
5f:2d:9a:e2:b6:48:70:0c:e3:ca:65:d4:cd:2a:78:9d:39:90:
9d:c4:f4:4a:fe:b6:5d:3d:20:02:5b:32:ca:04:39:9a:e0:82:
24:e9:b7:ae:2b:37:80:81:73:5f:83:bf:05:c5:8d:2b:39:a4:
5c:91:7f:43:f5:8b:10:91:5a:80:e5:6b:aa:ab:26:ac:59:a1:
46:8b:bd:15:ec:f6:6f:20:ef:7d:2e:ee:1c:2c:d7:7b:5d:c3:
29:51:97:88:e3:9b:ac:b7:74:52:98:2d:c5:71:74:6a:55:1b:
e2:69:5a:64:a5:fe:f2:2e:11:21:e7:4a:d0:cd:25:22:ef:78:
3c:27:20:43:73:3d:6c:c5:4e:25:3f:f0:ce:6b:33:f8:b0:48:
c2:0a:65:ab
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUT0ECTLYVz9P31uP+AHYGotOS7HYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxODMyODdlYjA4ZWNlMGM2NWZhNDlhM2Y0NTYyMWM2
MTJkZGJkMTAeFw0yNDA0MDQxODUxNDdaFw0yNTA0MDMxODU2NDdaMDMxMTAvBgNV
BAMTKDk3M0NDQzc3RDJEMjhBNjNFODk2Q0M5MTI2ODZDNTgzRkUwRTNGNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwl4mffugpDJYG7QfZTE6aKp5N
V0rcbamV3JajuC90KK6pVhOvQfp9au0EDEmgK+UUza/W/f4rVwjCq4u4FD4DPZei
skOfCragiTdMjLsV/wOT/mPdnMENUKWI5LJ2LDM5P+o3kvKB2xdmjWlUjBwhafdO
pztkci4AO8jLdFYcr9tI4mcHmTBzc3M8CWq0EQgEk8hiAb6KkiWVKicM4yVknMo1
6fysgMiYwmpWt6DOzsXb7AoGU2aj0HuzI7IJWwUcZFNCAULGUz4S3pRFl6Tbdxg4
3mA3p8OL65F3pMg+Y8cnHrtvBKpl5NIqPRbBegcDrX+2sb0zzybezQ1TA0xrAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUlzzMd9LSimPolsyRJobFg/4OP0kwHwYDVR0j
BBgwFoAUYBgyh+sI7ODGX6SaP0ViHGEt29EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS54aW5kaS5ldS9yZXBvL1hJTkRJLzAv
NjAxODMyODdFQjA4RUNFMEM2NUZBNDlBM0Y0NTYyMUM2MTJEREJEMS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL1lCZ3loLXNJN09ER1g2U2FQMFZpSEdFdDI5RS5j
ZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3luYzovL3Jwa2kueGlu
ZGkuZXUvcmVwby9YSU5ESS8wLzMyNjEzMDYyM2EzMjY2MzAzMTNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDM0MzgzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqCy8BMA0GCSqGSIb3
DQEBCwUAA4IBAQCcFt626tGzlidt1pk+u32fG2KPVU7chEhK349dR3HDndFxGRMF
ETw2fJWGMW4zRQ3uzPbqiDrzHC9d4JzazwVqCTUCq2c87Ub+43ftWvIaIwF4wKan
dX/R2Ton/r06ynr/4wCU4rb5hZy+B9tfLZritkhwDOPKZdTNKnidOZCdxPRK/rZd
PSACWzLKBDma4IIk6beuKzeAgXNfg78FxY0rOaRckX9D9YsQkVqA5WuqqyasWaFG
i70V7PZvIO99Lu4cLNd7XcMpUZeI45ust3RSmC3FcXRqVRviaVpkpf7yLhEh50rQ
zSUi73g8JyBDcz1sxU4lP/DOazP4sEjCCmWr
-----END CERTIFICATE-----
Generated at Wed Dec 4 05:40:00 2024 by rpki-client on console-fra.rpki-client.org