Route Origin Authorization
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238303a313030303a3a2f34382d3438203d3e20323134343032.roa
File: 326130623a346238303a313030303a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier: VligHsPMPCiaW6WNZLEkmH1HewhX4eGgWzeKACEKEok=
Subject key identifier: 0A:19:86:8D:01:48:5E:5D:48:65:6F:69:3B:7C:8A:72:AF:45:2F:85
Certificate issuer: /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial: 41C38C1497030ACA36A81097A8AE0A2E2EF3E8C3
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238303a313030303a3a2f34382d3438203d3e20323134343032.roa
Signing time: Tue 09 Sep 2025 07:50:11 +0000
ROA not before: Tue 09 Sep 2025 07:45:11 +0000
ROA not after: Tue 08 Sep 2026 07:50:11 +0000
asID: 214402
IP address blocks: 2a0b:4b80:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 17:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c3:8c:14:97:03:0a:ca:36:a8:10:97:a8:ae:0a:2e:2e:f3:e8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
Validity
Not Before: Sep 9 07:45:11 2025 GMT
Not After : Sep 8 07:50:11 2026 GMT
Subject: CN=0A19868D01485E5D48656F693B7C8A72AF452F85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:4e:68:f2:ca:25:50:5b:86:be:1e:63:d7:
f6:83:a4:66:47:c8:90:e1:91:54:19:bf:43:d7:ac:
d6:80:9f:47:d3:62:92:5a:76:12:1b:ca:cf:c3:f3:
9d:5d:f3:e2:3f:8d:20:50:ce:62:64:a9:8f:32:e3:
20:15:65:f9:4c:8a:e7:21:f2:05:85:56:0b:16:4f:
15:c6:d1:ae:81:ed:48:13:2e:b9:4f:ba:71:99:be:
d1:ca:1c:3e:c0:c1:fb:0d:65:ca:4b:d0:a5:c1:f2:
09:6c:84:b6:9a:93:51:3d:1b:bd:e9:00:c3:aa:e0:
09:ee:2f:00:9c:be:7a:a5:fe:20:54:4c:01:4f:07:
e3:85:c9:08:4b:89:7f:b5:1e:7b:b7:5f:f1:aa:01:
1a:68:70:bd:bb:05:44:36:f2:fa:5a:5a:01:76:b1:
a3:27:65:e7:73:e7:ee:9e:28:1d:10:41:fa:e2:da:
29:9e:e3:4c:96:02:a5:d5:27:27:ac:d6:37:6e:2f:
25:11:ad:62:fe:76:30:9b:10:97:2c:1f:e6:be:1c:
1a:e2:8d:3e:1c:f6:02:48:a1:53:af:9e:28:28:a7:
7d:ab:6d:40:d3:ba:4a:c0:21:c4:22:3a:28:64:8c:
ad:c3:7a:fa:04:7f:01:a8:1d:0e:b0:78:10:81:67:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:19:86:8D:01:48:5E:5D:48:65:6F:69:3B:7C:8A:72:AF:45:2F:85
X509v3 Authority Key Identifier:
keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238303a313030303a3a2f34382d3438203d3e20323134343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4b80:1000::/48
Signature Algorithm: sha256WithRSAEncryption
35:4f:26:64:be:95:7d:2d:1d:1a:93:5e:42:c6:60:bc:a6:44:
97:88:02:c4:25:07:36:ba:37:01:2e:f2:96:76:21:1e:3c:73:
1f:1a:64:54:50:7f:ba:1b:d7:cb:04:11:dd:e3:bc:14:0b:64:
eb:31:40:b8:8b:f9:cd:2a:14:0f:5f:c0:6b:14:73:2c:ea:7e:
c3:35:d0:c3:b9:9f:71:dc:8c:9b:92:49:17:e5:72:4a:28:4d:
00:1d:17:a0:c7:08:74:1a:be:9c:9c:91:1a:78:ce:29:ad:e0:
35:65:f9:68:61:b2:72:fe:5c:d5:ce:43:18:a6:a3:87:81:d0:
39:f9:68:bf:dc:ee:f4:36:b9:a5:3d:5e:bc:42:40:5b:e5:7d:
02:98:af:85:fb:70:d4:6f:13:7a:df:28:87:08:44:b8:95:5b:
67:60:ce:f0:54:71:fb:81:13:43:ac:1d:ff:dc:74:0d:fb:e8:
6e:b4:da:89:72:81:31:f6:e5:9d:78:3c:a5:05:99:50:c1:51:
31:6f:31:7a:09:b0:dd:a9:3f:c8:8a:b3:ec:07:fd:fe:7a:e0:
b1:02:3c:aa:d7:d5:5f:11:5b:36:0c:6c:4a:ac:45:93:9d:1b:
6c:50:24:69:56:39:69:71:30:20:21:10:79:dc:e5:e5:4f:fb:
31:84:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:52:28 2025 by rpki-client