Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653162303a3a2f34342d3434203d3e20323135373630.roa
File:                     326131343a373538333a653162303a3a2f34342d3434203d3e20323135373630.roa (raw, json)
Hash identifier:          Sbur0LFeWPNeDmxIDkcbbfwfykhvNRJQKSdXoitfsqA=
Subject key identifier:   D7:28:AE:4B:BA:3D:A5:BC:C4:8F:AF:71:22:6C:5C:9D:D6:24:A4:53
Certificate issuer:       /CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
Certificate serial:       5052B88F8B00A1FD08871A2A7EAE84F58A3BCCD4
Authority key identifier: BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653162303a3a2f34342d3434203d3e20323135373630.roa
Signing time:             Wed 26 Aug 2026 02:45:53 +0000
ROA not before:           Wed 26 Aug 2026 02:40:53 +0000
ROA not after:            Wed 25 Aug 2027 02:45:53 +0000
asID:                     215760
IP address blocks:        2a14:7583:e1b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:52:b8:8f:8b:00:a1:fd:08:87:1a:2a:7e:ae:84:f5:8a:3b:cc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
        Validity
            Not Before: Aug 26 02:40:53 2026 GMT
            Not After : Aug 25 02:45:53 2027 GMT
        Subject: CN=D728AE4BBA3DA5BCC48FAF71226C5C9DD624A453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:d6:b8:a0:93:a4:c7:61:d3:d0:87:09:d6:
                    b3:f1:5d:c1:fd:14:ad:03:db:67:37:3c:d8:ea:cd:
                    75:c9:95:d6:b7:15:79:8a:4b:32:60:25:77:ce:23:
                    47:21:a2:12:56:54:16:c7:c2:81:4e:61:fc:0b:77:
                    df:dd:bf:c9:71:87:5c:90:2a:9e:e0:d7:a7:4f:21:
                    22:6e:bc:83:a0:4c:b6:d7:16:35:7d:ff:c1:08:88:
                    83:ea:ba:b1:3e:32:f0:a2:c2:16:c2:33:75:4a:f2:
                    47:57:36:9c:aa:69:89:7b:32:29:60:e8:6c:61:6e:
                    b6:da:a6:55:4a:6c:90:35:06:60:73:db:8e:77:97:
                    40:c8:06:76:80:81:77:15:20:40:68:7d:c0:70:d4:
                    89:2d:a0:6e:01:8f:ee:b4:0f:22:02:b7:91:e8:83:
                    49:00:26:7c:b8:a3:cf:1c:ba:49:d4:b2:5d:26:45:
                    73:c6:a6:ed:1d:13:74:ba:61:ad:ee:12:96:25:e3:
                    6d:6d:2c:d6:cd:4b:a5:b9:d3:4b:ec:f6:09:c4:4b:
                    c1:c0:1c:9c:8b:52:0d:dd:11:89:db:40:c7:af:d8:
                    7b:f1:2c:e4:a3:0c:6b:64:2d:5c:dc:e0:e5:79:24:
                    fe:8e:90:87:11:c4:11:00:af:01:ab:fe:a6:2f:47:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:28:AE:4B:BA:3D:A5:BC:C4:8F:AF:71:22:6C:5C:9D:D6:24:A4:53
            X509v3 Authority Key Identifier:
                keyid:BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653162303a3a2f34342d3434203d3e20323135373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:e1b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:af:a8:96:c3:78:27:ba:f4:0a:f2:76:eb:aa:07:52:f9:84:
         2b:19:9f:cc:4b:38:7c:69:17:a0:c1:3a:96:45:5d:79:6d:01:
         38:69:6e:8f:21:b4:f5:6a:a9:a4:4d:22:ec:c9:1b:3a:e9:ed:
         37:94:b6:86:a3:ff:c3:da:ff:51:85:68:8e:d8:63:4c:a6:34:
         2b:ce:58:ed:e9:81:5a:45:7d:a9:be:32:fa:95:a3:c8:7d:18:
         4b:c1:a2:36:e0:0c:6b:2e:82:a4:8f:6d:5c:4b:c5:de:47:6d:
         4f:26:60:90:e7:a4:53:9e:94:13:bd:0d:14:9e:72:45:c1:08:
         d9:22:5b:0b:1f:ad:a9:61:22:f6:24:a0:6f:60:ec:7c:0a:61:
         99:3f:ad:94:24:d3:08:cc:3d:fd:99:f9:af:0e:85:e7:1f:e0:
         52:91:f5:29:3a:bd:e5:aa:26:d3:98:e7:58:21:ec:f3:a5:b9:
         9f:89:e9:88:00:51:88:15:2f:89:99:4d:3a:c9:6e:df:3a:be:
         24:d1:bb:75:bc:8b:80:2c:9c:bd:c4:18:59:00:4e:09:2d:90:
         d7:0c:d3:f4:b8:0f:d5:39:e9:12:b7:25:71:29:83:5a:ee:24:
         42:1f:82:8e:0c:e9:e0:3d:3f:11:ea:b9:c5:6f:68:e9:66:e5:
         8c:5b:c4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:24 2026 by rpki-client