Route Origin Authorization

$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32663a3a2f34382d3438203d3e203631353735.roa
File:                     323830343a323639633a32663a3a2f34382d3438203d3e203631353735.roa (raw, json)
Hash identifier:          140Ez26X7LEsIBNLftsS0sSgK2pmRO4wnVbkjt6+u6g=
Subject key identifier:   35:17:06:5A:3D:8F:86:EB:F5:85:76:17:9C:E8:15:E1:D0:7A:A3:EF
Certificate issuer:       /CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Certificate serial:       7BE398C82127C8572F4285C6A40704ACF6D7456A
Authority key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject info access:      rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32663a3a2f34382d3438203d3e203631353735.roa
Signing time:             Wed 15 Apr 2026 04:01:33 +0000
ROA not before:           Wed 15 Apr 2026 03:56:33 +0000
ROA not after:            Wed 14 Apr 2027 04:01:33 +0000
asID:                     61575
IP address blocks:        2804:269c:2f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl
                          rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e3:98:c8:21:27:c8:57:2f:42:85:c6:a4:07:04:ac:f6:d7:45:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
        Validity
            Not Before: Apr 15 03:56:33 2026 GMT
            Not After : Apr 14 04:01:33 2027 GMT
        Subject: CN=3517065A3D8F86EBF58576179CE815E1D07AA3EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:9e:72:13:be:4e:39:23:28:b6:eb:77:91:
                    fe:08:fe:e3:5b:27:4d:12:70:7e:95:22:25:b4:9e:
                    b1:58:4a:52:f0:79:24:1c:7a:91:87:fb:01:92:d1:
                    24:18:c7:aa:60:cf:ab:80:06:ab:b6:75:d4:75:f3:
                    a9:bc:a4:5b:42:cf:ae:51:16:e8:17:40:a5:5e:de:
                    a4:9a:87:21:8d:dd:0a:37:b2:77:f1:ed:c2:ca:1a:
                    3f:fe:60:3e:9b:f4:a8:14:7f:98:f6:5c:78:cb:d5:
                    40:e1:83:81:91:1f:2d:43:76:a4:b2:e1:2b:56:01:
                    4d:0b:ac:f2:ee:a0:95:3b:17:db:b0:b1:3b:81:d9:
                    db:71:b2:38:8d:50:47:28:7d:04:95:29:23:93:c0:
                    15:d6:9a:d4:0c:92:48:9c:67:af:58:2d:2a:e4:9b:
                    a1:5b:40:c1:62:8c:b5:29:40:4f:4d:b4:13:d4:c7:
                    c0:17:04:ac:4a:9b:cb:39:b4:50:04:d9:98:57:b8:
                    73:59:c1:5c:7e:12:b2:0c:31:b7:8e:e0:f1:7c:ba:
                    7f:7d:28:fe:bc:9d:fa:09:8a:32:22:b0:13:0e:5a:
                    64:29:9d:9f:64:7d:0a:86:4a:91:27:38:61:2c:2b:
                    c6:f7:43:66:49:04:9b:43:ff:10:ea:10:c1:c6:ba:
                    45:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:17:06:5A:3D:8F:86:EB:F5:85:76:17:9C:E8:15:E1:D0:7A:A3:EF
            X509v3 Authority Key Identifier:
                keyid:16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32663a3a2f34382d3438203d3e203631353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:269c:2f::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:a5:ee:65:01:80:c8:41:b8:db:5c:11:a5:95:d1:c2:f3:6c:
         4c:16:18:ea:17:35:f8:dd:cc:f6:a4:23:1e:09:fc:0c:ec:8b:
         73:42:b3:e8:d8:90:68:ed:86:57:0a:d7:fa:a8:b8:97:15:4c:
         8c:66:f8:1b:a5:3f:5d:0d:14:15:45:6e:9c:24:0f:3d:10:d9:
         9d:8b:87:a2:46:73:0b:60:e0:f9:71:b6:44:95:7f:72:9c:dc:
         4e:96:75:82:bd:8f:98:7a:7e:ac:fe:c7:70:fb:d6:c5:db:38:
         5e:d7:90:1a:00:08:2f:5c:03:ea:66:cb:c4:0a:0a:0d:87:7f:
         63:51:c8:11:ca:46:2b:92:05:36:51:f3:46:2d:2f:79:26:6f:
         e8:bb:07:92:bd:94:2c:53:e4:4e:4a:3d:86:84:45:46:1c:2a:
         0f:2c:89:03:96:2b:17:3c:4f:c9:01:60:ab:7e:0a:90:bc:87:
         cc:86:c2:e3:f6:b7:7b:65:b0:4c:46:e0:2a:0f:46:ee:77:3b:
         70:e7:80:92:2c:13:ff:fb:26:ef:54:1b:17:18:ba:4b:7c:16:
         5a:64:f2:10:40:7d:ec:33:9f:71:71:a7:c5:a7:e8:90:17:12:
         e0:f6:9f:47:d2:66:28:29:e3:67:2f:8b:9e:21:92:fe:27:87:
         cf:14:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:13:25 2026 by rpki-client