Route Origin Authorization

$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa
File:                     326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier:          gIroUeQkmH2DtJIj8L7vw6lkMIAMeqfHmGnOxDlNyYk=
Subject key identifier:   0A:81:1B:47:F5:E6:8A:BD:F5:13:65:20:67:B8:C0:57:30:56:DF:3C
Certificate issuer:       /CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
Certificate serial:       2ACF44032D3D2484EB6F4CBA41D59E11CAF50F61
Authority key identifier: 87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
Subject info access:      rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa
Signing time:             Sat 02 Aug 2025 00:59:29 +0000
ROA not before:           Sat 02 Aug 2025 00:54:29 +0000
ROA not after:            Sat 01 Aug 2026 00:59:29 +0000
asID:                     214402
IP address blocks:        2a11:29c0:3d95::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.crl
                          rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cf:44:03:2d:3d:24:84:eb:6f:4c:ba:41:d5:9e:11:ca:f5:0f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
        Validity
            Not Before: Aug  2 00:54:29 2025 GMT
            Not After : Aug  1 00:59:29 2026 GMT
        Subject: CN=0A811B47F5E68ABDF513652067B8C0573056DF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:99:30:a1:6b:97:24:c7:1b:b4:85:d6:c1:
                    d8:64:82:0e:f6:f0:ae:5d:a4:00:6a:0d:b9:a1:a1:
                    9f:e0:78:b7:aa:2b:1f:a9:b6:e7:24:7e:ec:34:6c:
                    63:58:5f:ec:b2:bb:c4:c8:e8:c5:b6:46:7b:ed:86:
                    2e:48:12:1d:20:fe:e5:fa:86:21:91:41:45:44:fe:
                    73:ef:12:17:a3:1c:e6:67:8b:3d:c4:2a:dd:65:8c:
                    ba:2e:37:18:6c:4d:92:c8:52:7b:92:fc:9c:77:17:
                    ca:c4:13:81:e8:15:95:c2:38:7c:42:63:e5:34:4e:
                    94:bf:95:4f:6c:2f:fd:8e:cf:f0:bd:4e:60:db:a0:
                    a2:29:c9:2e:49:65:63:30:47:fc:1e:3e:60:09:d2:
                    35:f1:14:15:d3:8b:2c:c7:21:39:f5:69:92:61:ba:
                    93:7d:c2:77:e2:9e:c9:70:85:69:fd:cd:73:b4:0f:
                    6e:6c:a3:bf:ef:84:c8:9b:23:b4:43:4d:59:37:40:
                    bb:d3:98:07:2c:ba:09:66:ae:c4:49:e6:7a:08:11:
                    fe:da:1a:1e:06:af:b3:bf:09:cc:45:a8:ca:66:a0:
                    6a:d1:d9:b7:c5:74:1b:34:92:22:5b:9b:da:4f:a6:
                    17:d6:1d:62:42:44:30:02:1e:cb:7d:b1:6f:4a:83:
                    4f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:81:1B:47:F5:E6:8A:BD:F5:13:65:20:67:B8:C0:57:30:56:DF:3C
            X509v3 Authority Key Identifier:
                keyid:87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d95::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:56:9a:29:3e:c5:ff:64:34:65:85:a0:cc:c9:22:31:13:f1:
         2b:38:c2:e2:69:68:4f:4c:57:de:63:a3:d5:da:0f:8c:b5:fa:
         98:79:b5:e5:55:b7:b5:c7:9f:54:bf:9a:56:cb:a2:5e:0d:68:
         03:9e:e1:29:42:8c:5f:0a:dd:1d:6b:29:07:1c:54:00:a7:02:
         f8:f4:88:d5:bf:5e:07:9e:5d:18:1b:b7:fa:84:99:54:bc:e1:
         77:a7:08:6f:76:a9:d2:ac:b3:7b:dd:78:00:1d:4c:ac:f1:6f:
         a3:80:55:3f:34:c4:cd:36:c0:e8:fb:11:70:69:2d:cd:46:c6:
         c2:ef:8d:2a:cd:e2:cc:f0:f0:c5:12:68:c4:9d:ba:83:f6:3d:
         fd:c8:42:3a:7d:ce:66:6e:d4:23:15:ba:ee:41:0d:b9:3a:e3:
         03:bc:67:7d:4d:7c:5d:1b:27:c9:2d:09:3b:91:be:f1:45:6d:
         34:4e:4f:26:1a:23:af:9e:e5:5f:5d:10:4f:be:6f:bc:9d:7f:
         df:b1:09:9e:52:aa:00:85:22:4a:b5:4a:cf:c7:76:cf:35:43:
         15:81:7a:16:98:36:74:42:84:58:a6:2a:21:b2:28:c6:27:e3:
         b1:f4:18:50:5c:b7:9e:4b:26:c1:4b:3d:9a:66:5c:75:74:1c:
         83:78:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:08 2025 by rpki-client