Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
File: 39312e3230372e3132312e302f32342d3234203d3e203438313132.roa (raw, json)
Hash identifier: qjvHAvWuefpankx+PP1dbh0vsp7/TGRfB6/rd0RcwtQ=
Subject key identifier: 1D:B2:53:A5:AA:6F:47:B6:85:53:44:E9:94:C8:67:6A:FE:FA:E2:BF
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 2766A4F90F9ACA1C4FCAC8153544578501C3B39C
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
Signing time: Wed 27 Sep 2023 11:50:58 +0000
ROA not before: Wed 27 Sep 2023 11:45:58 +0000
ROA not after: Wed 25 Sep 2024 11:50:58 +0000
asID: 48112
IP address blocks: 91.207.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:66:a4:f9:0f:9a:ca:1c:4f:ca:c8:15:35:44:57:85:01:c3:b3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Sep 27 11:45:58 2023 GMT
Not After : Sep 25 11:50:58 2024 GMT
Subject: CN=1DB253A5AA6F47B6855344E994C8676AFEFAE2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:61:11:55:bb:23:f7:ff:37:3a:ee:1a:51:
32:fc:92:b1:30:8c:ca:4c:31:80:48:2c:f1:2a:a8:
29:ca:06:4f:f5:02:20:e1:23:db:31:f3:99:af:4f:
02:3a:c1:c8:7f:f3:5d:ea:96:22:12:1b:fb:1c:1b:
23:28:6b:b9:88:42:f0:e3:a4:90:4c:82:94:7a:9c:
c0:41:dc:88:e9:e5:b0:58:e3:80:a8:5d:39:65:26:
56:71:d6:ce:6f:d5:13:de:83:35:57:8d:64:9c:79:
e2:51:36:a6:3b:4a:2c:ce:cb:94:31:3d:ac:eb:28:
e4:c4:2f:d9:b5:34:60:98:d0:c1:04:31:27:07:47:
09:07:29:b7:e8:3d:e7:d2:4f:57:7d:ae:cb:c2:de:
e0:18:c0:1a:4b:9e:59:32:44:ab:e8:bc:7b:c9:5e:
87:d4:5a:2a:f5:0c:79:0a:7a:6b:75:e4:4e:ff:81:
8c:10:68:3d:4f:f4:cb:7c:1f:95:f4:92:1c:f5:51:
95:97:b2:2a:49:b9:0d:11:d6:4d:ba:44:eb:ee:a8:
c0:56:46:0b:d1:a9:d5:e2:00:87:ac:4f:65:c6:4d:
4e:19:ff:82:af:ae:38:6f:69:33:18:ea:37:46:3b:
d8:2e:a3:68:ce:31:cc:f3:4c:6a:ff:ee:88:fb:3a:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B2:53:A5:AA:6F:47:B6:85:53:44:E9:94:C8:67:6A:FE:FA:E2:BF
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:4b:86:bd:8e:30:c9:c0:83:e3:23:ee:8f:e7:47:74:65:87:
7d:4c:5b:ba:95:f8:f9:a6:15:dc:f5:96:ba:8c:cd:f0:80:ea:
11:9b:34:0c:b0:0d:76:b9:3a:cc:e1:8c:d5:4c:67:be:91:6a:
93:b8:61:22:d3:76:06:73:61:c8:3c:e9:ab:7d:fd:01:11:c1:
58:ab:73:f1:e2:f9:db:4e:c8:cf:09:3b:80:0c:05:c1:04:1d:
c7:b9:5b:2c:9d:d5:c4:20:70:06:13:c8:17:14:44:7c:05:e8:
48:10:f5:b6:f3:25:5a:10:42:02:a5:e9:c1:14:de:63:49:42:
12:b1:f3:5c:00:c5:d7:82:bb:29:56:d5:3f:bd:54:99:19:e5:
3c:bd:b2:f3:91:d2:5a:37:f0:12:8d:f7:6a:0a:06:8e:be:0e:
e0:54:b0:9c:7a:39:12:94:0b:f6:d7:be:12:fb:3d:5a:28:75:
ab:d2:cc:85:4b:59:56:67:3d:3b:3f:66:b6:3c:0f:34:99:71:
42:0a:ff:fc:17:8b:c8:d1:c7:1b:6c:78:a1:95:24:18:2e:5a:
17:53:a5:26:a0:04:80:db:fd:0f:f4:99:03:d1:02:16:ec:85:
7f:99:fd:9a:21:43:98:ff:59:6a:57:0a:15:66:c3:cf:71:84:
87:f0:3a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:45:18 2024 by rpki-client on console-fra.rpki-client.org