Route Origin Authorization

$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa
File:                     323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa (raw, json)
Hash identifier:          JxiztBjas9diXSq/zEeN4O0OCr6uoDsHqtp9NofLcyo=
Subject key identifier:   3C:13:A0:43:5C:26:C5:24:F9:CD:FB:E3:91:66:A9:56:57:82:16:42
Certificate issuer:       /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial:       0B2EAC1C4F5B8CA824F64E37DAB059094651513B
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa
Signing time:             Mon 17 Aug 2026 08:16:52 +0000
ROA not before:           Mon 17 Aug 2026 08:11:52 +0000
ROA not after:            Mon 16 Aug 2027 08:16:52 +0000
asID:                     61575
IP address blocks:        2804:269c:3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 04:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2e:ac:1c:4f:5b:8c:a8:24:f6:4e:37:da:b0:59:09:46:51:51:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
        Validity
            Not Before: Aug 17 08:11:52 2026 GMT
            Not After : Aug 16 08:16:52 2027 GMT
        Subject: CN=3C13A0435C26C524F9CDFBE39166A95657821642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b5:82:bf:15:81:93:f3:d1:6c:5f:98:81:7f:
                    a3:36:54:e1:e0:60:a1:ef:78:ad:a3:96:1f:a2:31:
                    2c:37:6f:92:b6:e9:94:e5:64:5f:9a:f0:40:7a:e0:
                    d0:96:dd:60:c6:f7:4f:96:d5:45:76:47:d7:0c:3e:
                    50:f0:21:85:e4:37:e2:d2:4e:cb:8e:f7:bc:34:2d:
                    6d:c8:29:1e:6e:38:02:b4:c4:1e:8d:e1:d1:58:d1:
                    12:14:a7:0a:e8:32:04:b1:26:e3:86:94:8a:81:30:
                    9a:3f:82:a6:0f:31:e3:f2:00:4a:a5:33:99:93:0a:
                    cb:45:05:dc:da:36:70:1c:20:aa:11:86:68:20:5b:
                    a3:c7:60:81:1d:a5:01:67:30:ad:51:5f:e8:83:ff:
                    af:da:b3:a9:ee:88:5e:94:11:ec:5a:8f:72:0e:59:
                    8e:bb:a8:12:f9:55:95:51:63:d0:2e:90:12:c2:97:
                    0d:4d:8f:6a:a0:44:14:9f:7d:eb:a6:74:a8:56:2c:
                    f0:e1:d3:12:83:a3:c2:70:5e:9a:68:87:aa:ec:cf:
                    ff:20:25:11:3f:30:fd:3c:81:f4:64:e9:e2:2b:89:
                    3e:45:48:1a:2d:68:cc:2f:21:32:ae:8b:3d:c5:67:
                    0e:b6:b5:14:92:c6:14:57:c9:11:13:e1:a0:ae:85:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:13:A0:43:5C:26:C5:24:F9:CD:FB:E3:91:66:A9:56:57:82:16:42
            X509v3 Authority Key Identifier:
                keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:269c:3a::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:63:b2:0f:46:81:ff:0e:f1:04:44:bf:32:a4:81:fe:b7:f6:
         ce:90:e3:95:73:cc:13:01:dd:d7:6d:b0:87:89:79:07:a0:56:
         c8:26:06:70:c6:ad:59:ae:32:9b:a0:88:cc:01:6a:5b:0e:50:
         75:40:00:58:f3:cb:84:dc:d5:4c:6e:8e:ec:8d:ef:3d:7f:1b:
         ba:d0:1d:c1:68:54:51:3b:e0:0c:6f:56:d8:57:58:28:0d:d6:
         8c:50:8d:97:4d:b8:5a:71:c9:db:9e:1a:31:b6:f1:fc:bd:d8:
         c8:0a:47:a6:d4:69:b8:87:f0:9a:be:65:41:b0:d4:b1:a5:77:
         d0:ef:23:7a:b8:99:6d:ce:1c:d7:09:7a:20:b2:66:50:bf:e0:
         c5:6b:c9:09:d6:2e:45:d1:4e:0f:3a:59:2b:ef:ba:a2:7f:c5:
         7d:06:cc:39:3d:5f:74:c3:51:78:0f:c0:2a:11:d1:7b:8f:d7:
         f8:c1:db:2c:be:3b:4b:b6:76:f3:31:cf:af:8f:6d:be:3f:f1:
         00:c4:99:2f:42:ea:00:cc:8d:c0:f8:bc:46:85:5f:61:a7:d8:
         d7:12:bd:77:cb:eb:9f:82:57:5c:0f:2f:f2:b1:7c:99:b7:a6:
         2b:17:67:a8:d0:5c:a8:31:80:d9:dc:3c:78:39:1f:de:28:19:
         96:6f:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:06 2026 by rpki-client