Route Origin Authorization
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238303a3a2f32392d3239203d3e20323134343032.roa
File: 326130623a346238303a3a2f32392d3239203d3e20323134343032.roa (raw, json)
Hash identifier: KyJ4hTRB6MgjD4XdMFzPoO4qu9Nx0aBOZVfoabKnMws=
Subject key identifier: 7B:A8:3B:3E:0B:97:77:81:34:39:61:91:E6:6A:07:45:E3:22:72:10
Certificate issuer: /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial: 48D0908BE9D652A4D8420565B0746EF9F2FE2037
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238303a3a2f32392d3239203d3e20323134343032.roa
Signing time: Thu 28 Aug 2025 16:11:52 +0000
ROA not before: Thu 28 Aug 2025 16:06:52 +0000
ROA not after: Thu 27 Aug 2026 16:11:52 +0000
asID: 214402
IP address blocks: 2a0b:4b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d0:90:8b:e9:d6:52:a4:d8:42:05:65:b0:74:6e:f9:f2:fe:20:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
Validity
Not Before: Aug 28 16:06:52 2025 GMT
Not After : Aug 27 16:11:52 2026 GMT
Subject: CN=7BA83B3E0B97778134396191E66A0745E3227210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:68:ca:7e:fd:58:48:24:2f:79:3c:20:0a:
71:8e:72:48:56:0e:2f:b0:78:4b:27:ca:9a:c6:89:
e5:d8:c4:6a:3c:ff:bc:be:01:b8:84:a2:4f:5e:3f:
8c:62:e6:89:15:95:e1:35:75:46:47:3c:6b:e3:4a:
60:23:3f:38:2b:44:74:ab:7d:d7:4e:43:d7:71:aa:
29:f4:d8:d4:d6:e8:ca:43:a7:70:de:43:c4:b7:75:
c9:98:6e:b7:c0:3b:b0:e9:06:46:5d:e6:aa:3e:0a:
ec:16:99:ad:a8:5f:d2:47:00:7a:47:83:37:db:46:
e2:b8:6e:56:3a:0c:15:11:ae:9b:9d:43:0b:2d:b4:
d5:5e:38:87:79:33:d8:b3:95:9b:b8:0f:fd:3a:07:
a7:74:c0:63:83:e5:6d:ec:bd:a2:9b:26:44:a9:8d:
b1:38:bf:11:f8:36:1c:7d:a6:81:53:d5:ad:9e:fe:
3d:3c:43:db:e7:27:7a:cd:c5:01:1c:30:39:90:d4:
3f:81:9d:21:c8:bb:b2:cb:5b:66:d6:85:cc:e4:9b:
ab:3e:a4:e5:86:16:1f:e9:7f:8f:da:57:4f:76:64:
df:d1:9d:30:87:52:db:d0:19:9a:0f:26:1e:9e:5f:
0e:b0:19:04:9a:fa:10:d4:50:b8:b8:aa:98:ba:cf:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A8:3B:3E:0B:97:77:81:34:39:61:91:E6:6A:07:45:E3:22:72:10
X509v3 Authority Key Identifier:
keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238303a3a2f32392d3239203d3e20323134343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
43:58:ac:99:3b:a2:01:21:94:e1:a0:74:f8:82:6f:5d:dd:e6:
21:e6:ae:cf:9c:44:66:2e:0e:e0:ea:30:9a:4b:42:38:dc:38:
f2:7f:e7:35:7e:93:31:db:82:22:0b:90:5c:26:7c:86:9c:6b:
8a:a9:1c:18:67:fe:0f:39:cc:d7:bc:eb:89:0b:6e:2d:b3:e7:
94:68:b4:72:54:b3:69:2b:6b:7d:13:8a:21:82:94:f0:d2:53:
36:3f:36:89:81:40:01:54:b8:75:81:45:97:68:61:09:98:94:
72:07:22:d3:df:33:43:d6:7f:2b:72:c4:99:5e:11:e5:ce:ff:
bc:9e:39:12:df:74:24:d0:3f:32:8f:8d:b8:cd:7c:16:fd:44:
15:2a:09:5d:0f:cd:7a:02:4c:1c:96:3a:ee:9d:97:15:44:32:
24:2d:1e:32:c0:5d:99:2c:1a:71:22:6b:65:6e:89:6b:26:dc:
e5:4e:c2:fb:da:2e:05:af:34:62:8d:21:55:55:7a:21:01:1f:
22:92:86:8a:2a:08:69:40:71:27:80:04:78:34:3f:ac:ed:40:
b3:6b:c4:b6:57:37:eb:76:79:96:e8:16:73:6c:83:20:1b:41:
81:ff:58:86:47:10:f6:15:9c:48:e8:fc:de:c8:64:66:54:dc:
6a:cc:6e:3d
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUSNCQi+nWUqTYQgVlsHRu+fL+IDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzMzJjODc1MGNjNzE2MjllNjk0ZmRkYjM2MTVhZTA4
MzU4OTkyMTAeFw0yNTA4MjgxNjA2NTJaFw0yNjA4MjcxNjExNTJaMDMxMTAvBgNV
BAMTKDdCQTgzQjNFMEI5Nzc3ODEzNDM5NjE5MUU2NkEwNzQ1RTMyMjcyMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTmjKfv1YSCQveTwgCnGOckhW
Di+weEsnyprGieXYxGo8/7y+AbiEok9eP4xi5okVleE1dUZHPGvjSmAjPzgrRHSr
fddOQ9dxqin02NTW6MpDp3DeQ8S3dcmYbrfAO7DpBkZd5qo+CuwWma2oX9JHAHpH
gzfbRuK4blY6DBURrpudQwsttNVeOId5M9izlZu4D/06B6d0wGOD5W3svaKbJkSp
jbE4vxH4Nhx9poFT1a2e/j08Q9vnJ3rNxQEcMDmQ1D+BnSHIu7LLW2bWhczkm6s+
pOWGFh/pf4/aV092ZN/RnTCHUtvQGZoPJh6eXw6wGQSa+hDUULi4qpi6z2VHAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUe6g7PguXd4E0OWGR5moHReMichAwHwYDVR0j
BBgwFoAUiDMsh1DMcWKeaU/ds2Fa4INYmSEwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8va3JpbGwuc2lnbmFseC5jbG91ZC9yZXBvL3Np
Z25hbHgtcnBraS82Lzg4MzMyQzg3NTBDQzcxNjI5RTY5NEZEREIzNjE1QUUwODM1
ODk5MjEuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9pRE1zaDFETWNXS2VhVV9k
czJGYTRJTlltU0UuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJz
eW5jOi8va3JpbGwuc2lnbmFseC5jbG91ZC9yZXBvL3NpZ25hbHgtcnBraS82LzMy
NjEzMDYyM2EzNDYyMzgzMDNhM2EyZjMyMzkyZDMyMzkyMDNkM2UyMDMyMzEzNDM0
MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFAyoLS4AwDQYJKoZIhvcNAQELBQADggEBAENYrJk7ogEh
lOGgdPiCb13d5iHmrs+cRGYuDuDqMJpLQjjcOPJ/5zV+kzHbgiILkFwmfIaca4qp
HBhn/g85zNe864kLbi2z55RotHJUs2kra30TiiGClPDSUzY/NomBQAFUuHWBRZdo
YQmYlHIHItPfM0PWfytyxJleEeXO/7yeORLfdCTQPzKPjbjNfBb9RBUqCV0PzXoC
TByWOu6dlxVEMiQtHjLAXZksGnEia2VuiWsm3OVOwvvaLgWvNGKNIVVVeiEBHyKS
hooqCGlAcSeABHg0P6ztQLNrxLZXN+t2eZboFnNsgyAbQYH/WIZHEPYVnEjo/N7I
ZGZU3GrMbj0=
-----END CERTIFICATE-----
Generated at Wed Sep 3 09:47:36 2025 by rpki-client