Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653130303a3a2f34302d3430203d3e20323135373630.roa
File:                     326131343a373538333a653130303a3a2f34302d3430203d3e20323135373630.roa (raw, json)
Hash identifier:          9iYXqz2uZswuFGmbb3I2IKAg+SWvtdIdDTWgAWdK6sI=
Subject key identifier:   47:B7:A7:7A:F7:AE:22:CE:5B:F6:C7:CF:1E:F6:A2:E8:C6:4A:C3:28
Certificate issuer:       /CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
Certificate serial:       3EF9D5B91AB9E7E8B8EA36D4D86FDE3D64446187
Authority key identifier: BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653130303a3a2f34302d3430203d3e20323135373630.roa
Signing time:             Wed 26 Aug 2026 02:46:06 +0000
ROA not before:           Wed 26 Aug 2026 02:41:06 +0000
ROA not after:            Wed 25 Aug 2027 02:46:06 +0000
asID:                     215760
IP address blocks:        2a14:7583:e100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f9:d5:b9:1a:b9:e7:e8:b8:ea:36:d4:d8:6f:de:3d:64:44:61:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
        Validity
            Not Before: Aug 26 02:41:06 2026 GMT
            Not After : Aug 25 02:46:06 2027 GMT
        Subject: CN=47B7A77AF7AE22CE5BF6C7CF1EF6A2E8C64AC328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:ec:42:88:8b:2c:ea:a0:7b:2a:3e:8c:2e:
                    95:b5:bf:88:9b:db:c8:9b:2d:c4:23:e9:32:f9:a3:
                    7e:08:b5:50:0e:64:e9:6e:e6:e3:21:aa:40:a0:73:
                    16:b0:bb:4f:a8:08:b2:43:e7:0d:4f:93:70:e6:3f:
                    9f:c3:68:2d:26:57:89:fc:5e:a8:94:60:ef:99:d9:
                    4c:94:9d:e1:48:89:2e:27:a8:71:b5:63:7f:26:6a:
                    20:ee:61:89:d5:48:c7:e3:34:d7:8c:f9:fd:df:cc:
                    07:a2:5a:b0:81:78:87:25:94:ad:ef:1c:09:cb:97:
                    c6:d7:59:17:44:b4:6e:8d:3f:3e:72:ed:5a:2c:b9:
                    8d:2b:03:dd:67:27:b9:c5:4f:44:7e:80:34:c2:e1:
                    64:1f:4a:11:7a:db:e0:a4:7b:42:3d:74:e2:1f:ea:
                    68:df:64:82:fc:9d:81:1c:30:68:16:af:2d:15:4a:
                    8e:f7:b9:61:14:ad:bf:fd:b2:c8:18:7e:f2:1c:d3:
                    1a:fc:fd:3f:d0:30:fc:70:98:79:56:88:14:e3:b0:
                    59:cc:d6:7b:f1:0d:ff:45:97:41:ea:c5:49:f1:03:
                    15:d4:6a:78:9a:62:4e:4c:cb:d9:19:23:cf:47:a2:
                    76:e1:f7:20:32:95:5a:b4:a2:6b:3a:e7:f4:c5:b6:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B7:A7:7A:F7:AE:22:CE:5B:F6:C7:CF:1E:F6:A2:E8:C6:4A:C3:28
            X509v3 Authority Key Identifier:
                keyid:BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653130303a3a2f34302d3430203d3e20323135373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:ff:81:e1:3d:d4:6a:f6:a9:d3:49:0a:32:cd:cf:ea:ba:90:
         ad:22:be:33:da:70:a6:86:e4:62:dd:f5:40:fb:f2:34:4c:f1:
         75:ca:d8:c1:cb:d7:0d:eb:27:69:56:dc:c2:e6:fc:26:09:ae:
         3c:e9:1b:01:31:4f:c3:d4:b8:48:95:3e:56:47:bf:5d:2d:53:
         fd:a8:9c:19:a7:4d:80:3e:86:39:7d:9b:b4:52:36:20:22:7b:
         2e:39:57:80:4a:00:6a:aa:7d:e7:63:5d:85:02:5d:c0:84:2c:
         b6:51:84:15:67:12:96:71:fb:ed:6d:aa:11:a0:cd:65:ec:aa:
         ba:51:b3:75:e1:32:d7:a2:1a:d9:b8:0d:3b:bf:17:fc:91:8a:
         30:b1:66:2c:6a:3e:6a:58:7d:40:6d:a0:32:ec:71:4e:94:ac:
         17:75:79:87:e4:1e:88:19:8d:cb:af:b8:9c:0c:b9:3a:1d:0d:
         07:78:2b:cd:8f:91:4f:5e:7c:85:10:2e:64:7d:1b:90:ce:82:
         2e:e4:23:95:e8:12:59:ae:2c:cd:a4:35:11:e4:9e:b2:36:30:
         98:52:83:7c:54:be:a9:ad:ed:e6:6e:4e:78:10:eb:d4:27:fc:
         65:5f:cd:84:b9:f8:59:d0:1a:81:f2:8e:a4:65:b2:f4:30:ee:
         9b:2d:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:54:41 2026 by rpki-client