Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a633135633a3a2f34382d3438203d3e20323034303835.roa
File:                     326130363a613030323a633135633a3a2f34382d3438203d3e20323034303835.roa (raw, json)
Hash identifier:          3+WTf3N6D0ykKzTeZHpG9oAgKTJrV6JkHjMHXnH2hzA=
Subject key identifier:   B1:B0:0A:26:35:7F:4F:32:AE:42:FC:A4:58:5F:16:03:C3:12:FF:C0
Certificate issuer:       /CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
Certificate serial:       54DC4F8DB1136CB454DB96BC4B12CC1A96605601
Authority key identifier: 82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a633135633a3a2f34382d3438203d3e20323034303835.roa
Signing time:             Tue 25 Aug 2026 14:18:04 +0000
ROA not before:           Tue 25 Aug 2026 14:13:04 +0000
ROA not after:            Tue 24 Aug 2027 14:18:04 +0000
asID:                     204085
IP address blocks:        2a06:a002:c15c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:dc:4f:8d:b1:13:6c:b4:54:db:96:bc:4b:12:cc:1a:96:60:56:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
        Validity
            Not Before: Aug 25 14:13:04 2026 GMT
            Not After : Aug 24 14:18:04 2027 GMT
        Subject: CN=B1B00A26357F4F32AE42FCA4585F1603C312FFC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:47:ab:87:90:04:f0:44:cb:84:04:ee:2e:a8:
                    c6:ed:0d:3f:15:a0:73:fa:b2:93:fe:47:bd:3f:1d:
                    dc:eb:91:e9:a0:93:ae:ad:4a:95:c1:e9:d7:7e:8f:
                    b9:e9:ef:9a:3a:57:bf:a5:d0:e7:2a:e2:18:12:ce:
                    63:db:e3:79:98:f7:60:17:fb:a7:bf:24:9f:99:3b:
                    19:5f:2f:7a:88:4d:e4:d0:15:8d:c6:12:24:6a:9d:
                    bb:80:e1:dc:83:46:04:09:de:0e:a0:53:aa:9a:62:
                    c1:81:69:00:f7:b9:66:55:10:8c:5f:20:87:5a:71:
                    ff:de:f1:f5:77:86:d5:be:ed:ef:3f:de:db:9e:02:
                    e8:9d:a7:01:9b:e9:80:ad:5d:5c:9e:9a:d6:06:b8:
                    36:ba:d3:7b:b9:89:ac:e6:c9:8d:f2:36:ff:29:18:
                    50:80:7b:c6:a2:90:9d:ee:a1:a0:a5:cb:80:59:be:
                    61:26:61:b6:f3:7d:8c:6f:fb:73:5f:2d:9c:ff:82:
                    8c:7b:b4:d8:88:a1:5a:a4:8e:cc:32:af:29:21:be:
                    87:de:f7:bc:02:30:6d:9a:82:0a:0d:e5:56:e4:43:
                    b5:43:1b:ec:87:82:48:31:70:07:29:13:f8:e5:a7:
                    d1:5a:3f:14:45:db:7e:05:8e:dc:9a:f4:7f:d1:8c:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B0:0A:26:35:7F:4F:32:AE:42:FC:A4:58:5F:16:03:C3:12:FF:C0
            X509v3 Authority Key Identifier:
                keyid:82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a633135633a3a2f34382d3438203d3e20323034303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:c15c::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:12:98:b6:a1:0e:8c:4f:44:19:b9:44:f7:67:d2:11:a3:07:
         91:31:eb:c6:a0:17:24:7c:64:a4:b5:c7:1e:d6:f9:0a:77:50:
         7f:28:7d:e7:1d:af:38:91:e0:59:d5:f6:1d:0e:5b:35:0a:eb:
         0f:e9:5f:f1:86:6b:d0:06:2c:a3:f1:28:8a:95:03:ce:3e:05:
         48:38:d8:50:f5:d6:c8:b5:b3:6a:07:84:84:bc:a2:4f:4a:b1:
         b4:99:4b:94:cc:f7:92:1b:dc:90:24:a7:b2:14:10:4f:97:64:
         e6:0c:92:d8:75:53:e0:9d:28:b1:6d:4e:3d:9d:a5:6c:9c:93:
         b1:fd:e5:01:7e:fe:16:6c:72:79:cb:6b:72:66:fa:e7:6a:66:
         ae:b4:cc:54:42:cd:f2:71:59:66:fd:63:b6:d3:38:0b:bb:ed:
         d7:8d:c1:b6:55:ba:c1:b9:8f:b3:13:e8:b4:a2:8a:f9:bf:44:
         c8:d4:c4:9e:3b:7f:1a:cf:64:26:7e:7e:93:e4:ef:dc:b5:2f:
         e7:08:be:99:6b:55:74:60:99:78:55:35:7e:81:96:01:8a:07:
         4f:4e:7f:36:48:e1:16:4c:ad:a0:06:d5:21:79:2c:a6:9c:2f:
         00:e9:70:ee:9a:66:c7:8e:e6:67:fa:36:7a:4d:e2:8e:bc:d6:
         40:35:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:54:36 2026 by rpki-client