Route Origin Authorization

$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439333a3a2f34382d3438203d3e20323134343032.roa
File:                     326131313a323963303a336439333a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier:          IKRcdsG8OD6QxGA6HtU6tRYVNNj+5D+KM4iY+mArt5o=
Subject key identifier:   C5:01:2C:F3:4C:A0:6D:52:E6:FC:90:71:EA:D7:3B:C4:68:1A:94:D4
Certificate issuer:       /CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
Certificate serial:       5AF3A8030BEAB49041F4B6877EF494A4125CDB0C
Authority key identifier: 87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
Subject info access:      rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439333a3a2f34382d3438203d3e20323134343032.roa
Signing time:             Sat 02 Aug 2025 00:59:30 +0000
ROA not before:           Sat 02 Aug 2025 00:54:30 +0000
ROA not after:            Sat 01 Aug 2026 00:59:30 +0000
asID:                     214402
IP address blocks:        2a11:29c0:3d93::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.crl
                          rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f3:a8:03:0b:ea:b4:90:41:f4:b6:87:7e:f4:94:a4:12:5c:db:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
        Validity
            Not Before: Aug  2 00:54:30 2025 GMT
            Not After : Aug  1 00:59:30 2026 GMT
        Subject: CN=C5012CF34CA06D52E6FC9071EAD73BC4681A94D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a6:09:8c:61:a3:5f:9d:40:f4:a7:01:a1:8c:
                    2d:e5:bd:b9:91:63:b1:7f:d1:ce:b3:07:e3:66:ae:
                    26:12:5e:2e:27:72:d2:2e:a9:60:25:5a:d6:1c:45:
                    65:23:a6:ef:e6:2f:e3:91:6f:14:a2:b5:ef:11:1a:
                    f1:4a:46:94:13:ce:e4:29:a6:e0:2e:a9:48:63:68:
                    d4:cc:5c:80:50:84:95:d4:3c:05:56:85:e9:eb:d7:
                    91:a9:4a:b4:84:23:d3:f9:71:b6:f3:14:20:61:6f:
                    df:39:95:be:34:f1:2e:63:a6:46:97:58:89:01:13:
                    85:dd:00:7a:1c:b5:6e:b2:a2:ec:b7:d7:8e:44:93:
                    2f:76:01:73:ed:ce:ab:42:a2:be:1c:07:23:9c:78:
                    b4:91:2d:f3:5c:9f:60:31:7e:91:02:48:bf:ee:62:
                    d8:ec:e6:fe:a4:72:31:dd:c7:98:51:e3:fd:96:b5:
                    e5:30:f0:fc:9f:93:54:90:75:1c:87:e4:96:41:4a:
                    81:e0:c5:2c:9b:f7:7d:bb:a6:c2:16:93:8f:ea:c6:
                    32:db:55:3b:a0:ef:72:13:fa:e8:f5:12:40:59:15:
                    55:b8:ee:b8:9f:3c:94:aa:f2:7c:88:04:b1:0b:ef:
                    00:63:33:20:93:00:a8:30:5a:7b:a5:7a:51:f4:3a:
                    1e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:01:2C:F3:4C:A0:6D:52:E6:FC:90:71:EA:D7:3B:C4:68:1A:94:D4
            X509v3 Authority Key Identifier:
                keyid:87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439333a3a2f34382d3438203d3e20323134343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d93::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:2c:6c:8b:38:63:ac:86:a5:8f:9c:25:13:a9:20:c0:53:7d:
         98:e2:29:1a:cf:1c:a9:e0:17:9c:73:21:1e:ea:40:f8:47:41:
         76:b7:02:d8:0c:49:d9:6b:1f:d0:38:a7:9c:5b:52:9d:6c:8a:
         3c:17:9c:24:50:73:36:79:5a:a6:78:4e:55:d7:9d:b9:16:f4:
         5c:eb:a4:84:3d:7c:02:e5:b9:d7:06:6a:b1:4f:e4:fb:43:23:
         2f:fc:31:4f:07:9a:56:ff:1b:bf:c2:e0:b7:70:bc:57:03:f0:
         ef:c7:1f:9d:ea:7c:c3:a2:bd:b4:e0:b1:bf:a2:36:4e:6f:18:
         f0:40:55:88:2f:8b:6d:52:40:4a:6f:e6:bd:d3:ab:07:02:53:
         c8:48:b4:bf:18:bf:16:9d:7a:3d:4d:35:91:b1:c6:79:ee:b7:
         57:90:f9:a8:8b:1b:c6:91:ea:da:50:d7:58:f0:5a:36:c0:61:
         8b:37:0e:52:51:48:9f:2f:e0:9e:f6:c2:15:81:81:79:e9:2c:
         27:cb:43:47:f6:68:21:1c:39:5c:9f:35:ef:f5:00:c0:92:91:
         85:91:37:60:0b:75:e9:4e:08:23:51:d0:47:f4:17:12:38:87:
         c8:41:d3:6c:32:0b:d5:92:ba:fa:fa:6a:f7:53:50:c4:bb:f2:
         1a:86:f7:0f
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUWvOoAwvqtJBB9LaHfvSUpBJc2wwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc3MDE4OEY3RjBEMThBODY2MzdFRjBFRTc1RUUyQjcw
RDgxMEE3QzAeFw0yNTA4MDIwMDU0MzBaFw0yNjA4MDEwMDU5MzBaMDMxMTAvBgNV
BAMTKEM1MDEyQ0YzNENBMDZENTJFNkZDOTA3MUVBRDczQkM0NjgxQTk0RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjpgmMYaNfnUD0pwGhjC3lvbmR
Y7F/0c6zB+NmriYSXi4nctIuqWAlWtYcRWUjpu/mL+ORbxSite8RGvFKRpQTzuQp
puAuqUhjaNTMXIBQhJXUPAVWhenr15GpSrSEI9P5cbbzFCBhb985lb408S5jpkaX
WIkBE4XdAHoctW6youy3145Eky92AXPtzqtCor4cByOceLSRLfNcn2AxfpECSL/u
Ytjs5v6kcjHdx5hR4/2WteUw8Pyfk1SQdRyH5JZBSoHgxSyb9327psIWk4/qxjLb
VTug73IT+uj1EkBZFVW47rifPJSq8nyIBLEL7wBjMyCTAKgwWnulelH0Oh4BAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUxQEs80ygbVLm/JBx6tc7xGgalNQwHwYDVR0j
BBgwFoAUh3AYj38NGKhmN+8O517itw2BCnwwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8va3JpbGwuc2lnbmFseC5jbG91ZC9yZXBvL3Np
Z25hbHgtcnBraS8zLzg3NzAxODhGN0YwRDE4QTg2NjM3RUYwRUU3NUVFMkI3MEQ4
MTBBN0MuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvODc3MDE4OEY3RjBEMThBODY2
MzdFRjBFRTc1RUUyQjcwRDgxMEE3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA
BggrBgEFBQcwC4Z0cnN5bmM6Ly9rcmlsbC5zaWduYWx4LmNsb3VkL3JlcG8vc2ln
bmFseC1ycGtpLzMvMzI2MTMxMzEzYTMyMzk2MzMwM2EzMzY0MzkzMzNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDM0MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoRKcA9kzAN
BgkqhkiG9w0BAQsFAAOCAQEAjyxsizhjrIalj5wlE6kgwFN9mOIpGs8cqeAXnHMh
HupA+EdBdrcC2AxJ2Wsf0DinnFtSnWyKPBecJFBzNnlapnhOVdeduRb0XOukhD18
AuW51wZqsU/k+0MjL/wxTweaVv8bv8Lgt3C8VwPw78cfnep8w6K9tOCxv6I2Tm8Y
8EBViC+LbVJASm/mvdOrBwJTyEi0vxi/Fp16PU01kbHGee63V5D5qIsbxpHq2lDX
WPBaNsBhizcOUlFIny/gnvbCFYGBeeksJ8tDR/ZoIRw5XJ817/UAwJKRhZE3YAt1
6U4II1HQR/QXEjiHyEHTbDIL1ZK6+vpq91NQxLvyGob3Dw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:31 2025 by rpki-client