Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/39312e3230382e3137392e302f32342d3234203d3e203339303032.roa
File: 39312e3230382e3137392e302f32342d3234203d3e203339303032.roa (raw, json)
Hash identifier: ILTeOsOlof1ixvEufZA9hjiO7/Gwvo8Q+3QCtH7z6x8=
Subject key identifier: A2:75:21:79:C3:79:A7:75:D9:6B:DF:09:1E:65:F4:C6:F8:ED:52:3A
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 578268C09DAAA3CCCE9FC2E6144B1FB73BB9D51B
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230382e3137392e302f32342d3234203d3e203339303032.roa
Signing time: Wed 07 Aug 2024 12:52:05 +0000
ROA not before: Wed 07 Aug 2024 12:47:05 +0000
ROA not after: Wed 06 Aug 2025 12:52:05 +0000
asID: 39002
IP address blocks: 91.208.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 21:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:82:68:c0:9d:aa:a3:cc:ce:9f:c2:e6:14:4b:1f:b7:3b:b9:d5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Aug 7 12:47:05 2024 GMT
Not After : Aug 6 12:52:05 2025 GMT
Subject: CN=A2752179C379A775D96BDF091E65F4C6F8ED523A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:d9:f7:94:cf:7b:e3:f4:75:c4:e0:c1:b0:
98:0d:76:11:a1:62:17:c3:0d:51:ea:87:67:c7:0f:
1c:e2:3d:f6:ea:33:7e:a4:b9:38:4f:c7:f6:32:a2:
6a:24:6a:0a:ad:be:dc:09:27:fe:eb:bf:6f:4a:83:
52:d7:b3:13:87:58:21:ef:f9:08:27:c2:f8:f1:b0:
ad:e2:f9:c3:e2:6f:fa:ec:db:fe:99:e4:25:6b:94:
b6:42:e7:d6:d1:ea:ff:07:f9:e5:29:45:79:82:fe:
97:7d:b2:69:76:af:0f:74:80:58:c4:23:8e:b1:cc:
e0:28:26:b3:c9:9e:74:ff:b8:27:30:70:cb:71:e8:
eb:ae:d7:b2:d7:ff:cb:24:92:c9:35:41:55:f3:79:
e5:d3:07:d5:e2:c7:b0:8b:16:fb:bb:a0:10:98:56:
50:8d:54:9b:3c:9d:73:74:d2:09:a6:54:4f:16:ed:
06:1b:b3:84:6f:7b:e0:55:07:d2:e1:d5:eb:a9:e5:
c6:a2:a7:31:c9:d4:fc:50:d9:b1:b3:31:84:54:52:
02:24:76:34:d1:10:97:c7:9d:20:de:ac:eb:a3:58:
b9:50:ca:7e:78:5c:80:5f:b6:3b:5c:79:10:45:0e:
a4:af:6b:c1:c9:f7:19:e2:eb:1c:06:7a:10:58:52:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:21:79:C3:79:A7:75:D9:6B:DF:09:1E:65:F4:C6:F8:ED:52:3A
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230382e3137392e302f32342d3234203d3e203339303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.179.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:90:93:2c:ca:61:60:f3:ae:cd:e6:ec:27:39:14:78:41:92:
7c:80:f6:e4:e5:c7:d0:ab:1b:fb:7e:f7:91:a6:37:5e:20:44:
1a:2a:6f:19:65:ad:55:95:51:50:cf:fe:d1:17:2c:25:e6:64:
21:92:a0:36:f1:cd:4d:07:77:05:84:2e:9e:41:2b:fa:b9:31:
0e:02:f5:8a:ff:6a:f7:d4:c2:ba:e3:c4:3f:84:79:85:3d:fb:
4b:ab:9d:26:e9:bf:07:78:36:ec:22:f8:b4:c7:13:f6:f3:9e:
bc:e4:23:50:10:3a:8c:cd:14:92:da:61:9c:3b:d6:38:09:bc:
97:fd:f6:60:e5:af:f0:71:04:15:f8:80:78:b2:fd:77:71:bc:
3a:37:7b:bf:8a:00:4f:76:d0:39:2b:67:25:01:05:af:8b:8f:
33:e6:12:ac:f8:4f:f0:81:be:7e:50:d0:09:76:82:9d:3a:6d:
e7:5c:e3:9c:b3:96:4a:eb:84:33:ff:57:e4:c4:49:6c:c2:a8:
4f:c9:33:f3:5a:18:2b:be:b3:e1:6b:5d:1d:b8:eb:69:84:c2:
30:4d:2b:56:fe:9f:d9:32:7d:fb:60:e8:92:c3:73:f7:1c:36:
f3:6e:b0:d6:93:8c:b3:2b:01:30:c1:21:95:1e:fa:19:47:88:
0d:c2:67:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 05:40:00 2024 by rpki-client on console-fra.rpki-client.org