Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
File: 39312e3230372e3132312e302f32342d3234203d3e203438313132.roa (raw, json)
Hash identifier: XiDDa/I2L0HP7NVe9MFkDQ0tEJPMss16187raaUT4bM=
Subject key identifier: 72:DB:74:CE:65:0F:B3:48:BB:9D:26:E3:ED:2F:99:1E:DC:1D:26:D7
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 26844D79F0828B699FEB398D796E1F35766AE235
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
Signing time: Wed 30 Jul 2025 12:37:48 +0000
ROA not before: Wed 30 Jul 2025 12:32:48 +0000
ROA not after: Wed 29 Jul 2026 12:37:48 +0000
asID: 48112
IP address blocks: 91.207.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 12:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:84:4d:79:f0:82:8b:69:9f:eb:39:8d:79:6e:1f:35:76:6a:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 30 12:32:48 2025 GMT
Not After : Jul 29 12:37:48 2026 GMT
Subject: CN=72DB74CE650FB348BB9D26E3ED2F991EDC1D26D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:a3:cb:61:11:04:11:76:30:07:13:6d:c9:
13:ce:d0:1d:20:ff:be:9b:26:8d:34:fb:ae:c4:7a:
d2:40:e9:26:29:74:89:f5:ef:d8:dc:a5:97:28:1b:
3f:22:7f:40:5f:82:5b:c0:96:73:78:d1:f2:fd:c3:
f2:d3:8f:56:69:46:79:63:32:4f:16:e7:5e:bc:98:
9e:7e:0d:4f:0e:25:af:45:0c:d7:ad:3d:c7:c6:a4:
04:1b:6c:6c:54:26:84:f0:54:fd:31:43:11:3e:ed:
a7:30:bf:95:2e:f5:76:06:6b:79:02:38:e2:60:40:
67:52:5d:8d:0f:c8:ea:11:2b:4f:9e:50:47:ca:e9:
84:fd:38:f6:5d:78:e0:97:03:b5:4d:20:81:5b:de:
f2:0e:f7:2a:45:71:52:ee:7f:74:b0:f5:4d:4f:03:
38:c6:12:56:10:7b:0e:46:3c:e6:14:33:d1:ff:ae:
df:e1:74:40:1c:13:d6:51:dc:56:6b:e3:2b:4a:2b:
8e:df:60:6e:a7:c7:1a:0f:ce:51:d3:06:71:20:cc:
e4:0e:31:4a:6f:9c:13:15:89:d3:33:21:1a:14:52:
59:e5:a5:83:da:d9:dd:5e:ce:a6:bc:71:58:cb:32:
36:2e:46:ec:cf:2d:e9:f4:1d:f4:c4:36:ab:54:9e:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DB:74:CE:65:0F:B3:48:BB:9D:26:E3:ED:2F:99:1E:DC:1D:26:D7
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.121.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:81:87:43:15:6b:06:84:7c:8f:8d:cd:76:00:48:e0:0c:84:
8f:85:b1:1e:d7:8c:e1:80:6e:c1:b9:1f:8c:57:6a:cf:03:86:
41:87:d4:7b:2b:0e:1e:5a:7b:ac:b4:21:b8:d9:8e:6e:b5:82:
fa:a5:ef:b3:dc:30:ec:53:dc:3d:2a:bb:bd:63:f3:f0:a4:79:
30:fd:ab:4d:75:d4:a5:72:70:70:35:50:60:50:4a:35:b1:c0:
a3:15:9c:94:1c:88:11:54:50:c4:d6:19:39:4f:96:18:1c:d1:
57:12:18:ab:f3:49:26:88:c1:c5:4a:a4:51:ba:da:15:c0:b7:
2b:fd:07:d0:82:c8:78:4a:1f:38:d4:e0:09:c8:9a:03:6d:33:
1e:5d:fb:f3:f9:4b:5a:ae:55:92:b1:ab:87:04:4c:9a:88:03:
e6:62:ad:36:98:0e:f4:52:07:74:a5:d6:1b:5e:34:ba:d9:ee:
18:d0:e8:94:5b:e0:fd:c5:fa:df:a1:81:90:1f:db:7d:6c:dd:
cf:a9:20:df:8f:e8:06:65:2b:a2:da:a2:55:15:89:39:6c:ee:
6c:3d:cf:c4:02:28:5a:ee:df:bd:8d:4f:51:2c:40:10:64:65:
f7:16:9a:f8:2d:77:73:44:35:b5:6e:20:8f:00:f3:7c:38:2d:
d0:66:5c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 17:40:50 2025 by rpki-client