Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa
File:                     326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa (raw, json)
Hash identifier:          BaRn+VV9Mjv1d3bI1ejWVjhYGt/Z44aYBaRQrdawqUg=
Subject key identifier:   6C:D5:25:A4:AB:BF:54:BD:E6:D5:46:2A:D3:DA:3B:46:17:66:92:C0
Certificate issuer:       /CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
Certificate serial:       0FF7BD13AC0767602D1EDF51DA3A0BC0E7C71F11
Authority key identifier: BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa
Signing time:             Tue 25 Aug 2026 14:18:04 +0000
ROA not before:           Tue 25 Aug 2026 14:13:04 +0000
ROA not after:            Tue 24 Aug 2027 14:18:04 +0000
asID:                     215760
IP address blocks:        2a14:7583:e1ac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f7:bd:13:ac:07:67:60:2d:1e:df:51:da:3a:0b:c0:e7:c7:1f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
        Validity
            Not Before: Aug 25 14:13:04 2026 GMT
            Not After : Aug 24 14:18:04 2027 GMT
        Subject: CN=6CD525A4ABBF54BDE6D5462AD3DA3B46176692C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:54:79:6c:07:43:f8:b3:82:f2:38:e3:a3:
                    51:6c:d5:7e:fa:6d:b9:55:bc:0c:24:9f:e2:17:7c:
                    63:d3:e4:69:6a:29:83:21:2d:24:88:d2:df:81:82:
                    17:03:84:38:6f:01:d5:e2:88:90:36:f9:78:df:c8:
                    dd:a3:ad:00:89:5b:ba:9a:b8:fa:09:12:74:c1:1b:
                    bd:92:34:1b:6f:8b:2a:78:5b:98:84:ca:5c:52:42:
                    b1:69:50:bc:51:19:06:9b:ae:d3:02:03:71:5a:ae:
                    a2:3e:4e:9f:b5:66:aa:d3:c0:06:be:68:bc:b1:98:
                    ee:86:10:eb:1a:bd:6f:57:c9:df:58:5e:44:1f:ce:
                    ee:27:c0:b3:c5:36:34:fc:2f:6d:ae:cd:7a:14:ca:
                    bf:28:f4:39:40:48:a9:64:a1:05:b1:ae:0f:e9:e4:
                    67:ab:b2:bf:54:a0:58:9d:31:b4:26:da:8e:af:13:
                    69:19:ce:40:98:4e:43:27:8e:4b:e0:c9:06:28:f3:
                    09:d5:7c:48:80:36:89:a7:e1:25:38:c5:02:f4:38:
                    fa:7a:40:e3:09:d9:c6:40:ec:00:cb:15:c9:a3:d2:
                    67:58:06:ef:a8:4e:8d:61:60:5f:38:56:59:68:1e:
                    19:eb:e6:fc:39:c7:57:00:62:38:28:08:9b:5e:38:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D5:25:A4:AB:BF:54:BD:E6:D5:46:2A:D3:DA:3B:46:17:66:92:C0
            X509v3 Authority Key Identifier:
                keyid:BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:e1ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:30:2d:de:e9:71:74:a4:b9:90:66:6e:f9:3e:b8:39:c0:90:
         b1:0b:24:3d:bf:a1:df:c7:65:bc:78:e0:e0:26:65:18:03:db:
         55:6c:f3:12:34:de:03:c5:c9:d0:76:ef:93:e2:1f:b0:f6:f5:
         ae:2f:6b:d4:08:e3:55:14:3f:8e:fe:41:1c:c2:7a:58:f9:90:
         3c:fe:7e:60:14:e6:33:d0:a0:c2:94:d0:c6:4a:b1:f1:53:ff:
         72:c8:85:3f:df:22:6e:05:f6:96:e9:06:21:ba:df:60:7e:3e:
         28:99:ad:30:e5:f6:24:3c:30:24:2a:9c:4d:09:c6:6a:da:df:
         75:2c:ea:95:3a:4f:1e:de:50:25:c8:49:9c:3a:05:02:56:52:
         f7:51:95:53:20:d7:4a:32:f8:a7:14:8d:c1:d1:d7:43:c1:34:
         af:7a:1d:27:32:31:78:82:60:6c:75:73:d7:30:3e:c4:a1:35:
         90:25:79:94:ba:28:54:fa:03:98:98:b3:92:04:0e:05:1f:f3:
         6a:b1:77:74:71:6e:3f:01:ef:10:8c:95:5a:59:e5:9b:1b:fe:
         a8:a3:48:25:d8:b0:b8:db:4a:7e:9e:84:97:72:30:cf:13:3a:
         67:03:f1:73:0d:24:ee:e3:96:54:81:93:bf:9d:f7:e7:18:ea:
         7c:2e:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:27:40 2026 by rpki-client