Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
File: 39312e3230372e3132312e302f32342d3234203d3e203438313132.roa (raw, json)
Hash identifier: 4rWkDGFZwlZnGiY5TGjlIW0R8uQkkzmbz9kWTJR/nwI=
Subject key identifier: 12:A0:6F:F8:F7:4A:17:D7:72:35:33:6A:86:2A:0C:CD:D1:1A:68:6B
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 6BF341D04D9962C094AF186225ABCEE4142D4668
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
Signing time: Wed 28 Aug 2024 12:01:18 +0000
ROA not before: Wed 28 Aug 2024 11:56:18 +0000
ROA not after: Wed 27 Aug 2025 12:01:18 +0000
asID: 48112
IP address blocks: 91.207.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 21:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f3:41:d0:4d:99:62:c0:94:af:18:62:25:ab:ce:e4:14:2d:46:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Aug 28 11:56:18 2024 GMT
Not After : Aug 27 12:01:18 2025 GMT
Subject: CN=12A06FF8F74A17D77235336A862A0CCDD11A686B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:56:2b:3e:0e:a1:38:07:fa:96:00:3b:f3:
35:c9:51:4e:e0:b6:39:e9:75:50:f0:c6:28:92:18:
81:bc:21:78:b1:50:48:72:31:ef:76:1f:1e:49:59:
b3:f2:c5:c0:9d:4b:5c:a6:f2:1a:53:11:59:bc:fa:
df:9a:a7:b2:19:82:5d:db:e2:22:8e:4c:eb:6f:f1:
89:3b:c0:ca:46:db:a4:49:29:20:ac:cc:6b:8a:77:
f4:48:f8:49:3d:20:d2:bd:a4:ee:91:31:0f:98:f9:
7c:1c:f8:a2:04:c0:27:e2:b5:aa:01:ca:1e:77:5b:
09:40:39:9a:26:f2:87:19:68:be:64:76:4f:b8:24:
41:02:61:33:76:a5:65:a8:e6:c9:0b:d5:b1:dc:4c:
e7:ea:87:13:3d:15:d0:6a:57:03:92:a1:d2:7e:94:
47:c2:3c:62:64:50:27:4b:f8:90:d9:4b:b8:bd:0b:
71:7d:d7:36:b8:80:a2:a1:91:86:52:24:d9:df:ae:
39:a2:6e:de:ce:f5:97:90:83:82:86:b8:3e:bf:62:
3d:8c:7a:0d:66:8e:9c:24:9f:64:ca:f3:47:bb:95:
d7:b4:56:1c:aa:f9:a1:b0:d7:77:76:0f:92:92:fc:
5e:26:20:b3:03:32:79:a4:01:6b:74:76:43:0d:5e:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:6F:F8:F7:4A:17:D7:72:35:33:6A:86:2A:0C:CD:D1:1A:68:6B
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.121.0/24
Signature Algorithm: sha256WithRSAEncryption
08:be:2e:0a:b5:ee:bb:82:0a:a3:06:72:2b:70:6f:ae:93:0e:
e9:f0:da:fe:7e:e9:87:5a:16:cb:31:78:98:a2:41:a9:69:9e:
c6:98:f1:01:09:1a:15:b3:ba:d1:27:6e:b4:26:75:ee:b9:4e:
6d:d7:1a:4a:6a:22:e4:5c:c3:54:32:0a:58:de:85:82:87:df:
9d:6c:8e:76:b3:52:11:4d:18:41:3e:38:38:45:1b:d5:78:0c:
8b:e8:fc:a1:a4:de:74:f3:67:65:a1:e6:ab:df:46:d5:70:24:
4d:a6:0b:ce:95:47:28:d7:59:96:8e:e5:8f:c0:9f:e4:1f:b5:
8e:2c:87:db:4a:1d:f9:3c:23:f3:6f:df:2b:82:11:71:0b:40:
e7:6f:87:d6:93:f1:72:c1:28:6d:05:ad:89:a6:59:b0:04:52:
a3:19:a7:6a:92:56:a5:d6:5c:07:d1:8c:bd:ec:43:d9:8a:71:
0e:d3:2b:1c:96:ee:40:0b:cb:95:a5:89:35:6a:22:22:61:e4:
9a:33:05:c0:16:a6:51:b7:f8:ef:b7:33:9f:a0:8a:61:e3:b3:
0c:4f:89:1d:ab:cb:8c:6e:b9:f0:e3:99:18:52:f6:28:8a:62:
d1:b0:a3:e5:ae:5a:87:74:16:13:a3:8b:e2:c0:ff:17:c8:be:
c8:c2:db:53
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUa/NB0E2ZYsCUrxhiJavO5BQtRmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxODMyODdlYjA4ZWNlMGM2NWZhNDlhM2Y0NTYyMWM2
MTJkZGJkMTAeFw0yNDA4MjgxMTU2MThaFw0yNTA4MjcxMjAxMThaMDMxMTAvBgNV
BAMTKDEyQTA2RkY4Rjc0QTE3RDc3MjM1MzM2QTg2MkEwQ0NERDExQTY4NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwmFYrPg6hOAf6lgA78zXJUU7g
tjnpdVDwxiiSGIG8IXixUEhyMe92Hx5JWbPyxcCdS1ym8hpTEVm8+t+ap7IZgl3b
4iKOTOtv8Yk7wMpG26RJKSCszGuKd/RI+Ek9INK9pO6RMQ+Y+Xwc+KIEwCfitaoB
yh53WwlAOZom8ocZaL5kdk+4JEECYTN2pWWo5skL1bHcTOfqhxM9FdBqVwOSodJ+
lEfCPGJkUCdL+JDZS7i9C3F91za4gKKhkYZSJNnfrjmibt7O9ZeQg4KGuD6/Yj2M
eg1mjpwkn2TK80e7lde0Vhyq+aGw13d2D5KS/F4mILMDMnmkAWt0dkMNXhfZAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUEqBv+PdKF9dyNTNqhioMzdEaaGswHwYDVR0j
BBgwFoAUYBgyh+sI7ODGX6SaP0ViHGEt29EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS54aW5kaS5ldS9yZXBvL1hJTkRJLzAv
NjAxODMyODdFQjA4RUNFMEM2NUZBNDlBM0Y0NTYyMUM2MTJEREJEMS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL1lCZ3loLXNJN09ER1g2U2FQMFZpSEdFdDI5RS5j
ZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jwa2kueGlu
ZGkuZXUvcmVwby9YSU5ESS8wLzM5MzEyZTMyMzAzNzJlMzEzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzODMxMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvPeTANBgkqhkiG
9w0BAQsFAAOCAQEACL4uCrXuu4IKowZyK3BvrpMO6fDa/n7ph1oWyzF4mKJBqWme
xpjxAQkaFbO60SdutCZ17rlObdcaSmoi5FzDVDIKWN6FgoffnWyOdrNSEU0YQT44
OEUb1XgMi+j8oaTedPNnZaHmq99G1XAkTaYLzpVHKNdZlo7lj8Cf5B+1jiyH20od
+Twj82/fK4IRcQtA52+H1pPxcsEobQWtiaZZsARSoxmnapJWpdZcB9GMvexD2Ypx
DtMrHJbuQAvLlaWJNWoiImHkmjMFwBamUbf477czn6CKYeOzDE+JHavLjG658OOZ
GFL2KIpi0bCj5a5ah3QWE6OL4sD/F8i+yMLbUw==
-----END CERTIFICATE-----
Generated at Wed Dec 4 03:23:07 2024 by rpki-client on console-ams.rpki-client.org