Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/1/326130623a346530373a6330323a3a2f34382d3438203d3e20323135373630.roa
File:                     326130623a346530373a6330323a3a2f34382d3438203d3e20323135373630.roa (raw, json)
Hash identifier:          BsYMjEJ6OEoinRgZZMkoxAtEkN6O+gm0wAE2k7BkoVI=
Subject key identifier:   25:E4:78:20:02:69:85:9A:E7:A9:35:D0:26:22:9B:18:61:7F:D5:4A
Certificate issuer:       /CN=FC794E6B8454C609FB3CCEF0A2682930A71D28F2
Certificate serial:       2297124F952F0FBD7B2375A30BB3C6D6DD2560A6
Authority key identifier: FC:79:4E:6B:84:54:C6:09:FB:3C:CE:F0:A2:68:29:30:A7:1D:28:F2
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/326130623a346530373a6330323a3a2f34382d3438203d3e20323135373630.roa
Signing time:             Tue 25 Aug 2026 14:18:03 +0000
ROA not before:           Tue 25 Aug 2026 14:13:03 +0000
ROA not after:            Tue 24 Aug 2027 14:18:03 +0000
asID:                     215760
IP address blocks:        2a0b:4e07:c02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:97:12:4f:95:2f:0f:bd:7b:23:75:a3:0b:b3:c6:d6:dd:25:60:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC794E6B8454C609FB3CCEF0A2682930A71D28F2
        Validity
            Not Before: Aug 25 14:13:03 2026 GMT
            Not After : Aug 24 14:18:03 2027 GMT
        Subject: CN=25E478200269859AE7A935D026229B18617FD54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:a3:af:6e:c3:75:12:65:3c:ee:7a:79:20:
                    75:db:c2:3b:a1:cf:2f:da:85:31:3d:38:89:4c:f3:
                    02:c9:2e:05:3a:39:45:1d:5e:f8:a5:c1:7e:f3:b0:
                    92:bd:c0:53:81:d5:e0:f5:3f:45:5b:ea:b0:a2:61:
                    48:d2:d3:96:c5:52:46:60:d5:3a:13:44:ef:27:7c:
                    53:63:4a:59:07:39:70:ed:c3:fd:18:35:78:0d:76:
                    45:28:48:00:c7:66:e9:23:12:66:8e:65:8a:a4:0e:
                    6e:ea:c8:1c:42:24:c2:2a:34:cc:c2:d9:9d:33:1f:
                    fc:89:7e:01:1b:f6:37:a0:2b:c9:48:a8:e5:a2:a3:
                    e6:0d:fd:b9:66:e5:9a:39:f3:e8:95:27:d0:38:75:
                    74:29:5a:65:8a:52:1e:2c:6e:9e:10:39:a3:38:c6:
                    f9:99:db:a2:b1:b2:12:9c:7a:5b:e6:70:67:46:54:
                    d0:29:d8:35:c7:72:d0:23:22:24:9f:30:22:c5:a7:
                    d1:63:e0:c7:77:07:4d:79:24:f9:0a:2c:4f:19:99:
                    87:1c:e2:bc:fb:49:43:eb:81:1e:9a:61:84:e8:fe:
                    65:c1:1f:13:db:4a:2f:79:a4:a5:61:87:25:89:3c:
                    73:f4:b0:ea:b8:cf:dd:3d:3a:3e:c5:be:99:52:0b:
                    c2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E4:78:20:02:69:85:9A:E7:A9:35:D0:26:22:9B:18:61:7F:D5:4A
            X509v3 Authority Key Identifier:
                keyid:FC:79:4E:6B:84:54:C6:09:FB:3C:CE:F0:A2:68:29:30:A7:1D:28:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/326130623a346530373a6330323a3a2f34382d3438203d3e20323135373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:c02::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:98:03:49:ed:2d:e7:93:53:7e:80:2e:21:8f:1d:03:14:75:
         86:5a:f8:ab:e4:a2:9f:59:0f:83:a4:8c:36:3a:1a:69:a8:60:
         e9:5b:a7:7b:f7:98:14:6a:f1:9a:40:2e:60:65:ae:ac:39:c8:
         2a:79:74:1a:e8:a0:c7:8c:2d:ce:1c:d2:a0:3a:51:90:70:f7:
         54:6a:8c:15:20:13:b4:73:76:cb:d2:1f:d4:f0:4a:f4:27:38:
         a9:a6:ec:b2:f2:7b:39:8b:bb:e5:c5:ec:c1:d0:f4:93:a2:63:
         59:40:1d:6c:13:71:43:61:ff:07:2a:b3:2c:87:cd:14:d0:c5:
         b8:32:ca:0c:f1:6d:6f:e3:ba:95:ed:68:47:1f:b5:ec:7f:08:
         56:8b:b8:75:99:58:e9:14:14:69:76:3d:05:76:13:20:b8:24:
         5e:6e:54:58:8c:e3:54:a4:9f:e7:4e:72:ae:2f:29:e9:59:45:
         67:2e:4e:20:fd:f7:20:26:97:2d:6c:83:6b:4c:e4:f7:f6:ac:
         31:05:11:de:d2:6d:f0:d2:44:75:41:5d:41:61:c7:af:cd:95:
         8c:2f:9f:7c:e4:00:dd:c5:bc:54:b5:f4:67:a2:e8:ee:a7:4f:
         4e:72:2a:dc:88:c6:64:c3:25:67:b7:64:b6:8a:a7:7b:7d:28:
         db:88:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:54:43 2026 by rpki-client