Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/326130623a326630363a3a2f33322d3332203d3e203438313132.roa
File: 326130623a326630363a3a2f33322d3332203d3e203438313132.roa (raw, json)
Hash identifier: md7uFM5p/9W45NXls5uuNZrJh2ilTa904DU4ZbzFaNU=
Subject key identifier: 90:D0:7F:B2:52:37:2F:93:F0:B8:3A:89:BC:11:D9:72:76:B5:95:52
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 771B7FB5393C71056917634278788E65F47F2D14
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630363a3a2f33322d3332203d3e203438313132.roa
Signing time: Thu 06 Mar 2025 19:37:52 +0000
ROA not before: Thu 06 Mar 2025 19:32:52 +0000
ROA not after: Thu 05 Mar 2026 19:37:52 +0000
asID: 48112
IP address blocks: 2a0b:2f06::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1b:7f:b5:39:3c:71:05:69:17:63:42:78:78:8e:65:f4:7f:2d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Mar 6 19:32:52 2025 GMT
Not After : Mar 5 19:37:52 2026 GMT
Subject: CN=90D07FB252372F93F0B83A89BC11D97276B59552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:7a:99:28:9e:ce:db:0f:44:de:59:0d:99:
83:51:40:74:d5:e0:7f:13:34:97:87:58:45:0b:22:
6d:5b:a5:a4:c2:14:f2:60:50:f7:1a:66:4d:8e:2b:
5d:1e:12:d7:e9:b0:06:e5:81:a1:a5:55:d0:5a:07:
43:40:32:e3:ae:bc:ca:f1:4e:54:23:cd:42:20:42:
10:37:69:49:97:15:99:cb:d4:2d:50:c2:20:1d:9b:
11:e3:28:b2:96:e0:f8:4a:6a:d8:97:9e:e4:c9:26:
c5:1a:d5:3b:85:37:75:ec:c2:52:5f:75:34:12:3c:
0f:cc:34:55:b5:53:a2:fd:b5:41:3a:92:a6:88:46:
42:0f:d3:69:81:bf:ed:4a:54:23:f3:75:b7:18:73:
f0:8b:ec:7f:c0:80:76:a2:75:c0:ba:ac:4e:83:51:
44:29:50:04:26:d5:91:06:95:f9:66:0b:2a:8d:4c:
c1:57:0a:1e:e8:b0:83:33:68:87:3a:86:16:d6:04:
7f:4b:85:a9:ba:c9:87:07:34:b0:09:cd:2f:e6:bf:
a1:d6:56:2d:ab:db:2e:4a:37:23:e4:15:2a:d0:9a:
5e:89:d3:ec:ab:cc:53:c4:8e:4e:47:23:46:66:89:
26:0c:97:8f:00:f7:41:83:d1:70:bc:f4:5e:94:42:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:7F:B2:52:37:2F:93:F0:B8:3A:89:BC:11:D9:72:76:B5:95:52
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630363a3a2f33322d3332203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2f06::/32
Signature Algorithm: sha256WithRSAEncryption
4c:44:d7:96:2f:fa:83:d9:6a:c0:92:3c:ce:43:99:31:fb:9a:
da:7c:9d:31:05:87:dd:69:e2:be:76:89:13:6d:07:42:1f:aa:
9f:cf:57:07:87:09:a0:0d:90:89:d3:92:0b:c7:5d:67:81:2c:
bb:e1:4f:d0:2c:2f:55:55:cb:e9:99:d4:74:ee:a8:41:0f:2b:
9f:90:a1:2e:ec:2d:3e:fa:ae:28:c4:9f:42:5a:dd:20:7d:5e:
60:b0:0f:e5:cb:ce:2f:30:1e:b1:2e:4f:d4:52:c1:dc:14:a4:
c9:2b:4e:eb:74:19:95:b5:58:b6:3f:b4:4e:d4:25:39:9b:6b:
20:80:86:1d:f7:f4:d6:10:7e:12:05:4e:29:c6:bf:e0:84:ba:
e7:7b:c9:32:27:c7:5b:1d:de:6b:b3:5d:9e:10:a7:46:63:a2:
3c:a8:77:61:2d:1c:c5:f4:10:8a:18:36:11:9f:11:b6:a3:c6:
eb:6a:ff:47:9c:7e:45:2c:1a:00:f5:d8:e3:e5:c1:22:f0:6c:
d0:88:f7:88:4e:04:34:89:72:f3:66:b4:1d:0f:d2:e6:ba:46:
ff:6a:8d:ab:83:63:31:18:b7:d1:6e:9e:b9:70:ba:d2:25:13:
4d:46:5e:16:b0:ef:28:71:57:f0:d9:81:fa:21:21:40:b8:1c:
62:f1:a7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:11 2025 by rpki-client