Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa
File:                     326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa (raw, json)
Hash identifier:          KCRXXaVguUMBSgzhjp3GW88sRUsfyr/Z//HxQqDtx8g=
Subject key identifier:   5B:3A:75:67:B6:FB:9A:E0:3E:E5:98:EB:A3:F2:12:12:C8:BA:8D:64
Certificate issuer:       /CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
Certificate serial:       052350E305174A75F9CE8E387EE7D6D6FCB58468
Authority key identifier: BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa
Signing time:             Fri 04 Jul 2025 15:28:17 +0000
ROA not before:           Fri 04 Jul 2025 15:23:17 +0000
ROA not after:            Fri 03 Jul 2026 15:28:17 +0000
asID:                     49975
IP address blocks:        2a0a:6040:6d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:23:50:e3:05:17:4a:75:f9:ce:8e:38:7e:e7:d6:d6:fc:b5:84:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
        Validity
            Not Before: Jul  4 15:23:17 2025 GMT
            Not After : Jul  3 15:28:17 2026 GMT
        Subject: CN=5B3A7567B6FB9AE03EE598EBA3F21212C8BA8D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:ae:f7:34:01:8c:e3:a0:7e:c2:91:f4:3f:
                    fe:16:9c:76:09:1d:2e:aa:14:5c:35:85:8e:0e:07:
                    73:fc:3a:8d:78:13:49:9a:ff:bc:a8:db:e1:c8:5c:
                    45:1c:4d:a4:a9:06:b7:a0:93:fc:c3:ae:7e:07:6a:
                    73:4a:72:61:e8:5a:cd:38:a5:42:44:21:4e:f9:69:
                    69:a2:91:b3:d8:4f:91:7b:38:46:87:96:c9:60:f1:
                    e8:cb:f4:0a:2e:c3:e0:ab:59:41:e5:52:8b:b1:f9:
                    f7:3c:2b:ce:1d:05:0e:17:be:a1:c9:94:29:20:19:
                    04:08:67:89:2b:91:d8:7f:80:fe:1b:2c:a4:83:fb:
                    70:f3:b5:8e:0a:dc:95:be:f4:9e:51:e1:84:0f:23:
                    29:54:2a:86:2b:16:55:7f:ad:b1:09:7a:86:17:13:
                    8e:c9:fb:73:63:d6:b0:98:09:54:43:27:cb:3a:73:
                    7b:27:6a:b1:2e:aa:db:a8:15:b4:82:54:30:b3:17:
                    43:fa:d0:e4:4b:17:c8:c4:83:71:84:56:46:dc:e9:
                    e8:b5:86:3d:08:a7:b6:62:a1:05:31:9f:a2:4a:8d:
                    24:c4:e1:6a:d6:10:bd:4e:f4:c9:ba:75:8e:c2:63:
                    b0:a2:92:5a:d0:95:6a:75:b5:fc:a9:84:c5:2a:67:
                    ec:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3A:75:67:B6:FB:9A:E0:3E:E5:98:EB:A3:F2:12:12:C8:BA:8D:64
            X509v3 Authority Key Identifier:
                keyid:BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:e3:49:54:31:ed:d1:d9:3c:0a:31:20:e4:3a:78:d0:0e:a4:
         4d:77:b5:b6:eb:1c:8a:16:07:d8:49:a6:62:2c:3d:5d:ab:24:
         dd:35:36:2c:2f:d3:0f:4c:8f:6e:0e:7a:5a:4c:5b:29:eb:54:
         fd:28:6c:92:9d:16:a0:a5:f6:f9:bb:f8:cc:09:af:eb:d0:17:
         fe:8b:6b:70:de:e5:84:a6:30:80:68:e9:86:31:24:6e:bc:0f:
         90:17:31:87:1a:6d:5a:a6:44:ea:ba:09:1e:43:e2:77:6c:5a:
         6b:ff:69:c2:56:21:c2:71:df:3b:6e:51:79:8e:14:30:18:f4:
         f1:54:64:a8:88:36:93:66:c2:e9:27:14:f1:41:82:ad:da:b5:
         ba:40:8e:7b:cb:bc:31:f6:fd:57:27:5c:c2:e6:d4:2b:a2:26:
         c4:7f:93:4c:6b:61:92:9d:2f:f6:db:3f:7e:43:b8:d2:f0:09:
         2b:43:bb:ca:b8:d6:d1:74:29:6d:81:7f:ef:51:ca:8f:52:21:
         c6:d3:38:4c:88:eb:e8:43:14:2a:11:ca:88:61:ab:58:f9:a7:
         3d:47:d4:66:fc:94:64:8d:7d:07:30:d1:96:a8:18:fb:d1:79:
         d1:e7:ea:ba:8a:b2:ce:b5:b3:96:f8:80:73:95:24:d7:d5:10:
         46:b1:a6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:17:57 2025 by rpki-client