Route Origin Authorization

$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439363a3a2f34382d3438203d3e20323134373134.roa
File:                     326131313a323963303a336439363a3a2f34382d3438203d3e20323134373134.roa (raw, json)
Hash identifier:          fqD/5+c9POMjurr0VJvX8hf11ieR4HbjMeffjgT4HjM=
Subject key identifier:   DD:FD:AA:8E:5E:EC:4F:62:66:C2:27:7A:B3:F3:8C:E2:98:16:09:FC
Certificate issuer:       /CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
Certificate serial:       3704B09081EAEF6E3E1508B3ACE28EFA70AC08C1
Authority key identifier: 87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
Subject info access:      rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439363a3a2f34382d3438203d3e20323134373134.roa
Signing time:             Sat 02 Aug 2025 00:59:30 +0000
ROA not before:           Sat 02 Aug 2025 00:54:30 +0000
ROA not after:            Sat 01 Aug 2026 00:59:30 +0000
asID:                     214714
IP address blocks:        2a11:29c0:3d96::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.crl
                          rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:04:b0:90:81:ea:ef:6e:3e:15:08:b3:ac:e2:8e:fa:70:ac:08:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
        Validity
            Not Before: Aug  2 00:54:30 2025 GMT
            Not After : Aug  1 00:59:30 2026 GMT
        Subject: CN=DDFDAA8E5EEC4F6266C2277AB3F38CE2981609FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:59:16:0c:9c:ba:de:0b:45:f6:83:b4:09:
                    d9:96:12:fe:ad:b5:61:a8:64:d7:35:ae:04:ff:9d:
                    13:ac:26:7d:57:9e:f6:39:cb:0d:6a:0d:db:b1:e0:
                    f0:7a:91:f7:59:b5:d0:65:15:70:a0:38:3d:6c:29:
                    61:d8:02:10:2b:6c:32:07:e7:9e:bf:03:93:80:0f:
                    39:41:48:3a:59:96:04:de:58:cc:c0:42:72:1c:11:
                    1e:c6:9e:09:ac:31:09:a8:6b:20:01:4f:10:60:8c:
                    4c:8f:e4:9d:52:e8:59:f0:17:c8:39:dd:13:9f:4b:
                    58:55:d5:76:f0:f1:35:db:51:8b:d3:49:e4:01:e3:
                    ed:8d:ab:2e:b7:84:bd:28:22:72:25:70:ba:99:55:
                    ee:ec:dc:20:15:1a:da:de:36:75:98:65:01:66:c8:
                    a2:2c:08:95:62:27:72:01:8f:95:cf:b8:0b:49:f0:
                    51:8a:2f:4a:a8:78:25:7c:4c:17:a4:5b:4a:5e:c3:
                    bd:87:0e:93:74:2e:6a:fe:93:b6:9f:85:f3:60:65:
                    cf:2c:49:ec:84:92:86:0c:37:9b:30:d9:7e:e0:da:
                    64:d0:37:27:3b:f0:73:c0:5f:f9:a1:54:6e:cf:06:
                    61:29:67:cc:e1:f3:68:32:9c:76:0e:a3:fa:78:58:
                    28:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FD:AA:8E:5E:EC:4F:62:66:C2:27:7A:B3:F3:8C:E2:98:16:09:FC
            X509v3 Authority Key Identifier:
                keyid:87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439363a3a2f34382d3438203d3e20323134373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d96::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:c4:88:ac:6d:b7:ac:d2:ac:54:13:7e:a9:76:ab:49:66:f1:
         de:86:8d:5d:48:fa:94:d1:ec:e0:95:ff:dc:6b:8c:c7:68:e6:
         40:e7:9b:64:c1:90:fd:07:57:67:d8:f9:64:30:55:35:8f:d9:
         90:29:b6:dc:7a:05:12:08:84:1c:50:4b:2a:fd:17:2c:6c:b9:
         8e:53:02:48:32:92:4d:49:aa:7c:01:b2:1c:f6:13:0f:a8:6b:
         4e:2b:98:f8:12:23:7b:15:d7:f0:38:fa:ea:cd:aa:fc:4e:81:
         b9:12:8c:ff:a6:a4:47:e3:9c:cb:8d:ae:64:ae:d5:a9:f1:73:
         bb:ee:55:79:05:bf:78:3b:a1:49:d0:62:8a:0e:25:f8:10:58:
         e8:8a:2b:63:69:7c:1b:58:09:41:e5:f1:ba:0e:33:05:78:fb:
         f6:49:e8:d4:f8:39:fa:77:79:b6:16:4d:2b:71:61:a4:31:f9:
         9f:53:bc:f1:ae:fd:53:a9:4a:26:b3:0b:f7:f7:c3:95:59:d9:
         c0:b9:76:dc:49:ae:71:c6:d9:b5:ee:ed:7f:6d:1d:e6:35:03:
         c6:86:b7:da:71:40:2e:e4:1f:f3:53:18:79:17:f2:35:92:bc:
         11:02:bf:dc:60:87:5c:cb:23:3f:4f:51:9e:9a:a1:43:36:b2:
         c6:17:a0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:15:59 2025 by rpki-client