Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/326130623a326630313a3a2f33322d3332203d3e203438313132.roa
File: 326130623a326630313a3a2f33322d3332203d3e203438313132.roa (raw, json)
Hash identifier: juccWl4druAekCdBgUUi3faMtBunmQNpwr83OEUZN7Q=
Subject key identifier: 66:FB:8A:C5:2D:0A:63:3D:79:33:45:9D:AA:19:04:B3:FB:C9:B3:7A
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 69408B38A7FA2469B2EBF2CBA748CF4648B13CE8
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630313a3a2f33322d3332203d3e203438313132.roa
Signing time: Thu 06 Mar 2025 19:37:54 +0000
ROA not before: Thu 06 Mar 2025 19:32:54 +0000
ROA not after: Thu 05 Mar 2026 19:37:54 +0000
asID: 48112
IP address blocks: 2a0b:2f01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:40:8b:38:a7:fa:24:69:b2:eb:f2:cb:a7:48:cf:46:48:b1:3c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Mar 6 19:32:54 2025 GMT
Not After : Mar 5 19:37:54 2026 GMT
Subject: CN=66FB8AC52D0A633D7933459DAA1904B3FBC9B37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:47:8f:5a:33:b6:26:d8:1e:ea:0d:d4:fb:
9a:dd:e6:85:9b:3c:7b:f4:3d:f4:b9:94:62:6f:e5:
58:62:48:3b:15:00:37:89:84:46:f9:51:9e:63:63:
a1:5e:48:69:90:25:f0:bc:f4:0d:a2:63:7b:61:61:
80:09:54:98:40:33:3e:ac:b8:b2:4b:8d:58:ee:17:
de:42:a6:92:54:f1:5d:2d:3e:9f:df:9c:9f:16:1f:
66:23:e1:17:23:c9:df:1e:cf:bd:91:a9:53:8d:5e:
90:74:70:4f:57:6c:81:50:85:cd:f2:53:56:55:44:
05:54:7a:61:1b:d1:c6:a0:04:b0:c5:8f:29:7a:50:
0f:fe:c9:39:61:85:09:54:da:d2:71:33:1c:58:9f:
94:11:2c:f3:d7:bb:e8:eb:bb:4b:bc:1b:c2:55:de:
6a:09:47:74:0e:72:c3:1f:d3:29:4d:d8:8c:43:c1:
d3:f7:e8:5a:83:12:a7:14:60:4c:0f:ce:1d:ac:e5:
af:f8:07:78:05:ee:4e:cf:1d:ca:60:b6:f8:a7:af:
ab:a8:f9:78:eb:09:08:50:fb:c5:a8:42:19:93:e8:
d8:43:0b:58:18:ad:3a:84:e5:9f:62:80:4a:41:b0:
01:da:fa:d1:96:9c:d7:50:70:df:21:03:e8:34:16:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FB:8A:C5:2D:0A:63:3D:79:33:45:9D:AA:19:04:B3:FB:C9:B3:7A
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630313a3a2f33322d3332203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2f01::/32
Signature Algorithm: sha256WithRSAEncryption
a5:46:40:74:f4:17:76:f2:d4:2a:ae:45:58:e6:c9:35:8d:30:
0f:8e:e2:e9:fd:e6:19:39:ac:f6:e7:f3:48:db:80:9c:2f:78:
fc:85:5b:e4:e3:4a:d9:bb:fe:20:ce:25:9a:07:a6:6f:93:88:
6b:4b:66:50:19:4b:5e:4e:45:ef:77:f1:cf:d0:62:a2:c1:c7:
8a:6f:20:61:0c:2a:f3:1a:c9:1e:cd:1c:91:de:3c:31:dd:39:
1a:56:49:36:2a:eb:75:be:e6:72:9d:47:63:e6:26:1d:29:0a:
d6:a2:5a:46:60:69:d5:3c:df:f9:4a:4c:de:0d:ae:80:16:b9:
89:d2:a1:cd:66:c2:5a:1d:8f:52:38:e9:e4:bc:ea:52:9d:c6:
71:5c:3f:7b:d8:9d:ca:30:87:b7:f8:f1:a5:9c:2e:12:b0:1d:
d5:49:8d:5b:de:b7:58:4c:33:73:31:f7:eb:dd:2c:be:7d:96:
37:67:b7:a2:4e:e2:f4:7e:3f:30:94:72:1d:0c:78:6b:63:19:
5d:a8:32:19:5a:bb:0a:49:39:1c:a5:fd:59:4e:f1:45:f7:7d:
f5:99:d3:5c:b4:d8:20:85:5e:33:c1:3d:d4:bf:a8:b9:11:ac:
62:e2:3a:f5:42:ec:f5:7e:46:d5:49:51:b8:2e:0a:60:7c:d2:
48:59:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:09:18 2025 by rpki-client