Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa
File:                     326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa (raw, json)
Hash identifier:          ES7222aCikjaUVq4Qkj7pCa+sHn/ZP1pBWe0j0numX8=
Subject key identifier:   4A:9A:0A:C6:C2:7D:87:29:98:C8:82:D3:7C:BD:98:BE:B4:B5:91:BC
Certificate issuer:       /CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
Certificate serial:       2EBB8E78CC9BAA45D1C3A81F13EC8ED6AE4901F0
Authority key identifier: BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa
Signing time:             Fri 05 Jun 2026 16:08:20 +0000
ROA not before:           Fri 05 Jun 2026 16:03:20 +0000
ROA not after:            Fri 04 Jun 2027 16:08:20 +0000
asID:                     49975
IP address blocks:        2a0a:6040:6d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 17:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bb:8e:78:cc:9b:aa:45:d1:c3:a8:1f:13:ec:8e:d6:ae:49:01:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
        Validity
            Not Before: Jun  5 16:03:20 2026 GMT
            Not After : Jun  4 16:08:20 2027 GMT
        Subject: CN=4A9A0AC6C27D872998C882D37CBD98BEB4B591BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:41:f9:da:3c:b9:b3:e3:dc:a7:42:aa:8e:
                    cb:70:c9:0c:02:c5:56:db:3e:18:4f:8f:14:56:1a:
                    d1:36:61:a2:7f:9c:3f:16:22:45:b7:89:aa:2a:f2:
                    c4:8f:06:40:6f:2c:04:4a:85:f8:d0:72:2d:b0:c8:
                    34:a4:d3:b8:62:94:fc:2a:15:46:c6:f4:81:d2:fd:
                    50:d3:38:15:2f:a0:70:05:9f:6e:c2:87:6a:0d:d8:
                    ca:16:3d:16:eb:21:ee:37:75:e1:4e:58:c6:94:83:
                    07:98:b3:24:f9:e8:6c:a9:3c:95:50:d7:14:1f:ec:
                    11:8e:81:72:3d:7b:b0:fb:3f:d4:d4:2d:7b:f6:3e:
                    10:66:ae:d7:88:75:ad:2d:5a:5d:b1:9a:ea:a8:15:
                    29:e8:2b:73:cc:be:6e:5d:54:40:fb:81:e8:73:ab:
                    33:ac:85:85:e7:fb:8d:e2:68:0b:7d:da:c3:24:74:
                    75:d8:2a:0c:36:b5:82:d7:25:fd:14:cb:a3:2e:b0:
                    a2:86:fb:88:64:93:74:c3:0a:f5:c6:b5:c8:5c:40:
                    4d:4a:3d:0d:eb:32:10:8e:ba:dd:f2:3b:9a:94:51:
                    fc:08:7a:56:66:eb:50:3d:7e:75:96:84:d7:cc:e4:
                    4a:c0:9f:f4:5f:95:20:b9:01:ef:ba:0c:ed:e8:0a:
                    6d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9A:0A:C6:C2:7D:87:29:98:C8:82:D3:7C:BD:98:BE:B4:B5:91:BC
            X509v3 Authority Key Identifier:
                keyid:BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:bb:2a:5e:12:9a:74:cf:1e:e9:a8:51:17:bc:57:c7:d3:34:
         15:7b:47:f0:09:90:fe:15:76:3c:6e:f6:74:d4:82:3a:10:c6:
         20:41:95:b3:c7:88:a8:08:4d:bc:83:fe:87:f1:79:45:5b:86:
         e7:4b:91:3e:14:da:4e:4c:fa:aa:e0:f9:f2:af:db:bb:a4:b2:
         c4:dd:c9:1f:0b:05:10:f2:6c:b6:10:62:50:77:dc:ba:9a:ea:
         ee:59:14:48:4d:bf:5e:69:e1:82:7a:11:cf:b7:43:b4:aa:42:
         48:84:dd:a1:f0:28:19:21:d9:d0:8f:5f:b3:3e:95:3e:a5:fb:
         f3:02:bc:58:c1:97:af:b4:fe:18:a9:9c:d4:63:bc:17:97:b0:
         b5:dd:78:b5:21:86:32:fb:73:86:5d:7f:cc:68:a2:cf:ef:ed:
         fd:8f:b1:c9:87:f8:f3:d5:a9:c7:08:7a:93:11:e2:e6:8f:5d:
         b0:2b:74:7a:f1:ce:b9:10:4a:0c:01:9e:d3:fd:6d:41:16:d3:
         06:8f:32:e0:15:ac:29:7e:20:4a:3a:c6:bf:28:ff:49:6d:11:
         a8:e2:c6:6a:ea:f8:a7:ec:c7:a9:1d:f8:bc:3b:c6:7a:06:3e:
         42:45:0e:b0:6f:d7:54:85:89:f6:2f:07:da:11:6a:1f:f8:53:
         65:85:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:35:03 2026 by rpki-client