Route Origin Authorization

$ rpki-client -vvf krill.ipgua.com/repo/pongery/4/326130613a363034353a636130303a3a2f34302d3438203d3e20323030313630.roa
File:                     326130613a363034353a636130303a3a2f34302d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          UIdyyXR0S2bMgGEjmuwln+NkXK9hjAR8o+mH7WTeK74=
Subject key identifier:   6A:A1:36:51:11:29:8E:98:05:C4:54:1C:94:A3:4B:43:ED:C6:12:3E
Certificate issuer:       /CN=953F58832273DFD14187910ADCB3972B70B9BD3A
Certificate serial:       69FDF2AE1A2A56DD7F0598BBBBF8E95403136D43
Authority key identifier: 95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer
Subject info access:      rsync://krill.ipgua.com/repo/pongery/4/326130613a363034353a636130303a3a2f34302d3438203d3e20323030313630.roa
Signing time:             Sat 07 Mar 2026 07:58:18 +0000
ROA not before:           Sat 07 Mar 2026 07:53:18 +0000
ROA not after:            Sat 06 Mar 2027 07:58:18 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ca00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.crl
                          rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft
                          rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer
                          rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl
                          rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 17:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fd:f2:ae:1a:2a:56:dd:7f:05:98:bb:bb:f8:e9:54:03:13:6d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953F58832273DFD14187910ADCB3972B70B9BD3A
        Validity
            Not Before: Mar  7 07:53:18 2026 GMT
            Not After : Mar  6 07:58:18 2027 GMT
        Subject: CN=6AA1365111298E9805C4541C94A34B43EDC6123E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6d:59:5f:21:40:dd:d9:76:23:0c:f2:2a:66:
                    15:8f:86:f3:a1:04:3c:0b:84:fe:f2:44:8a:00:49:
                    f1:19:ef:33:82:3a:c9:e2:b6:55:2a:9f:b8:47:0f:
                    47:91:61:06:7e:d9:cb:fd:fb:e6:a8:15:ba:db:bf:
                    3f:3e:c0:b0:b4:90:d1:9d:54:9e:2b:91:0b:1f:c3:
                    60:5e:b1:a7:ca:2f:5c:b0:84:84:24:fc:84:ec:a2:
                    5a:f9:49:0e:aa:1e:34:06:7a:aa:fa:8c:af:b4:6c:
                    9f:6a:9b:ff:7a:19:37:ce:96:8f:e0:a6:cf:dd:b9:
                    00:1a:be:a4:51:30:79:1d:6c:4c:4a:61:1f:8c:c6:
                    ee:f0:a2:0f:bb:cf:0f:49:39:be:41:94:c3:c6:8e:
                    de:7d:e2:eb:72:a5:87:b7:ec:bb:a7:52:79:24:9c:
                    73:5e:21:02:4e:2e:1d:b5:fc:da:db:80:d7:50:9d:
                    dc:8d:47:7a:5e:19:5b:b2:34:5b:93:2c:f7:b0:43:
                    62:ba:fb:83:42:49:d8:e7:0c:c8:23:3d:be:17:60:
                    e3:db:a9:1b:4b:e4:7d:f5:af:e6:7b:b9:57:c3:bd:
                    e9:3e:aa:b6:fe:57:96:5f:05:f7:bb:c9:6c:8a:2b:
                    f8:44:d6:ba:c8:11:7a:4c:22:0a:e3:2c:9f:98:f8:
                    08:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A1:36:51:11:29:8E:98:05:C4:54:1C:94:A3:4B:43:ED:C6:12:3E
            X509v3 Authority Key Identifier:
                keyid:95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.ipgua.com/repo/pongery/4/326130613a363034353a636130303a3a2f34302d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ca00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:92:38:39:3a:59:7f:25:be:5e:ff:4f:d9:11:dd:cd:11:f6:
         95:74:2e:32:be:c5:19:d9:a3:9f:ef:f4:52:74:41:ef:43:92:
         ee:a3:34:a1:05:b5:e9:b4:f1:73:ba:5a:c2:f9:46:5b:3f:53:
         92:10:32:b5:be:79:5d:4b:9d:d5:1e:70:75:79:08:e7:ac:dd:
         e4:00:18:ac:d6:c9:9c:4d:fd:49:cf:80:a6:25:c0:8e:af:cf:
         01:77:c7:e7:31:90:05:1a:e2:10:59:fa:e3:0d:91:ce:83:f3:
         de:5e:c7:40:7b:38:9e:d3:dc:2c:10:79:d9:00:2b:8f:41:ec:
         5f:f2:95:53:54:67:bd:88:a1:a6:f3:d7:61:06:84:2b:f8:74:
         58:56:f7:00:d2:18:76:d6:60:cc:2e:a9:ba:17:14:fa:2d:bd:
         7c:da:b9:49:b0:e6:2d:5b:e6:51:e1:e7:a0:6c:4b:e7:69:28:
         82:72:04:d6:47:c1:44:af:6b:2a:f5:da:f1:10:a4:ab:64:89:
         06:6d:25:ad:0a:0d:c7:6b:56:84:72:7d:42:07:ec:63:f8:83:
         05:35:7a:ff:48:fe:c4:f3:a6:a9:87:02:13:75:8a:42:2f:1b:
         3e:3a:83:6e:b9:4e:3f:9b:3f:ab:f6:74:b7:d7:36:b0:fe:a9:
         ac:70:cd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 04:06:09 2026 by rpki-client