Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
File:                     326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa (raw, json)
Hash identifier:          3qIsch0fDujABFVvnKH/+Yu272mxbZJ7Okv/dntcyvI=
Subject key identifier:   30:70:B9:B4:FD:E9:03:B6:8E:B4:83:3E:15:7E:CC:AD:5F:5B:4D:75
Certificate issuer:       /CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
Certificate serial:       7527CA36061D87A2BD7D0365DEBC0E72C9B0C689
Authority key identifier: BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
Signing time:             Fri 05 Jun 2026 16:08:20 +0000
ROA not before:           Fri 05 Jun 2026 16:03:20 +0000
ROA not after:            Fri 04 Jun 2027 16:08:20 +0000
asID:                     52210
IP address blocks:        2a0a:6040:c500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 16:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:27:ca:36:06:1d:87:a2:bd:7d:03:65:de:bc:0e:72:c9:b0:c6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
        Validity
            Not Before: Jun  5 16:03:20 2026 GMT
            Not After : Jun  4 16:08:20 2027 GMT
        Subject: CN=3070B9B4FDE903B68EB4833E157ECCAD5F5B4D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:72:da:27:c4:38:84:f2:8f:3f:d6:57:fb:
                    a7:77:b0:80:70:f6:cf:2f:55:66:99:39:f8:42:3f:
                    65:b5:fc:6e:14:db:42:90:91:07:e0:5c:43:fa:82:
                    98:64:2a:82:af:95:5f:54:73:bd:35:d6:82:f3:70:
                    40:f8:9f:00:e0:c1:b8:07:ab:af:2b:9f:ab:25:76:
                    7a:f0:e4:b8:0a:61:50:3e:a3:84:ac:c7:0f:be:72:
                    de:e3:d0:6f:36:82:b4:aa:de:cf:d6:45:a8:cc:89:
                    92:17:b4:dd:48:22:bb:13:db:80:bb:67:1f:f8:06:
                    4d:41:ae:72:7e:c9:de:22:fe:db:62:7d:e1:bb:fc:
                    c2:4a:bd:e9:2d:9c:85:81:4a:02:e6:43:aa:af:f1:
                    b6:67:ab:14:d1:74:a6:a8:17:70:34:87:1f:73:8f:
                    04:30:94:cf:7f:8f:4c:3b:59:5c:9a:e8:02:88:a4:
                    9b:40:47:60:36:91:8a:14:c2:cc:e7:94:7d:29:e3:
                    ea:68:40:fe:7d:fd:8a:ab:29:74:68:77:d1:48:d1:
                    e5:79:d7:87:a2:69:2b:bc:6b:8c:a2:2a:f5:a7:73:
                    bf:8a:20:6a:3b:9b:0f:91:6d:4f:19:d1:a4:6d:bc:
                    dd:ea:cc:c8:44:93:34:e2:eb:49:c5:2a:38:04:f0:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:70:B9:B4:FD:E9:03:B6:8E:B4:83:3E:15:7E:CC:AD:5F:5B:4D:75
            X509v3 Authority Key Identifier:
                keyid:BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:a2:21:27:c5:d0:9d:10:2b:05:65:0c:c3:7e:28:34:1e:a2:
         03:ec:8b:2d:44:74:a8:59:2a:24:68:37:d6:4c:96:9b:f3:66:
         a3:44:5d:13:4b:d8:aa:da:13:a5:cb:0d:db:48:da:96:ed:67:
         0a:74:18:84:b5:39:d3:5f:65:cf:ab:f4:49:c3:ab:88:3f:23:
         c5:2c:ac:5c:81:bc:96:82:c7:4c:0c:31:da:fb:00:5a:70:94:
         99:1c:ec:97:97:a5:a8:70:db:f3:8a:51:ed:45:e6:10:e6:47:
         92:dd:09:0b:65:57:14:7b:54:47:ff:f9:21:d0:85:96:a1:1f:
         71:ee:c5:2c:62:c9:5e:72:d6:68:84:3f:f9:81:03:3d:93:cf:
         66:13:f3:24:55:f6:a2:5f:09:cf:b1:c9:a3:90:0b:03:cc:15:
         9f:9a:70:6a:87:1a:4d:a5:e2:4d:23:86:92:4e:e5:05:32:6a:
         a6:a8:68:20:cc:94:2e:20:0d:06:74:8a:0e:65:b6:54:a6:d7:
         6d:c4:69:38:72:ac:76:61:c2:e0:5f:f0:04:79:29:a7:4f:31:
         b0:cd:58:bc:54:de:32:79:64:e5:02:a6:55:55:fa:1e:2d:2e:
         2d:f4:a9:e2:d6:f0:7e:d0:16:40:70:4d:93:be:9f:7a:87:af:
         8e:bf:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:38:38 2026 by rpki-client