Route Origin Authorization
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030343a3a2f34382d3438203d3e20323133353938.roa
File: 326130623a346238313a313030343a3a2f34382d3438203d3e20323133353938.roa (raw, json)
Hash identifier: ZHIA9xafUnCffPvNkSKqb73VAW2qkAjwUVw9xxt1CI8=
Subject key identifier: 74:F6:EA:63:E6:F7:21:FE:CF:D9:38:29:C7:A4:E1:C7:0F:93:56:9D
Certificate issuer: /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial: 65984A5282894387D3F72FEA6556C3F39423EF0C
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030343a3a2f34382d3438203d3e20323133353938.roa
Signing time: Thu 28 Aug 2025 15:52:23 +0000
ROA not before: Thu 28 Aug 2025 15:47:23 +0000
ROA not after: Thu 27 Aug 2026 15:52:23 +0000
asID: 213598
IP address blocks: 2a0b:4b81:1004::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:98:4a:52:82:89:43:87:d3:f7:2f:ea:65:56:c3:f3:94:23:ef:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
Validity
Not Before: Aug 28 15:47:23 2025 GMT
Not After : Aug 27 15:52:23 2026 GMT
Subject: CN=74F6EA63E6F721FECFD93829C7A4E1C70F93569D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cc:b1:4b:fa:c6:1f:4c:e5:7a:11:49:a3:61:
cc:ba:6c:51:62:ff:69:56:6f:d3:7a:a2:fb:ae:74:
c0:42:09:8d:d9:c4:e8:e6:53:f9:3e:8e:80:f5:dc:
85:f1:9f:33:d1:62:96:53:35:df:4d:07:78:8b:c1:
57:46:71:6a:21:40:b4:80:98:a8:af:4e:77:b3:a1:
d5:34:0a:82:4d:58:75:18:46:0a:0b:fb:ca:e6:2c:
69:af:6e:68:4a:c3:a9:45:ba:9e:92:03:65:18:02:
2d:16:5c:72:d0:09:78:3a:35:a6:ec:00:75:a1:a0:
08:59:61:f7:8b:db:cc:bc:d1:51:f0:b3:44:cc:d7:
96:55:e0:7f:00:23:df:0a:69:9a:70:e5:00:6e:ea:
8e:9f:dc:05:6e:ee:7e:5f:a5:98:cf:24:d3:2f:cb:
7d:85:6d:ed:61:59:6c:ac:52:df:47:53:e7:86:0d:
b0:76:c9:52:e3:97:5e:da:dc:5a:51:d9:c5:96:99:
88:6f:dd:35:70:48:ae:2e:6c:9e:45:c7:55:6b:f5:
a9:37:ba:4e:ef:0c:a7:b3:2b:51:68:56:86:9a:82:
ef:49:bc:a6:fa:61:84:93:d2:c4:58:8e:b5:32:8d:
d9:3c:e5:d4:c2:f9:3e:91:92:e6:9d:30:16:00:32:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F6:EA:63:E6:F7:21:FE:CF:D9:38:29:C7:A4:E1:C7:0F:93:56:9D
X509v3 Authority Key Identifier:
keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030343a3a2f34382d3438203d3e20323133353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4b81:1004::/48
Signature Algorithm: sha256WithRSAEncryption
61:f5:54:be:b9:d9:ba:43:0c:45:8d:f5:5f:a2:d8:50:69:85:
8b:9d:f8:1f:39:67:dc:cc:a4:75:33:e4:e3:08:75:af:72:51:
3e:cb:1f:3e:8c:07:e4:45:83:a0:4f:ff:86:0f:fe:a7:70:21:
ba:cf:5e:48:bb:54:ff:db:59:5e:b1:d9:bc:d5:76:96:10:96:
e7:54:51:a7:fc:cb:88:b5:e8:52:87:85:a5:a6:1f:f1:9c:b1:
24:9d:5b:6e:0f:97:5c:21:84:e9:10:e3:d7:a4:de:94:0a:ec:
3b:4b:ab:d9:eb:2f:78:df:2f:46:0e:9a:3d:e2:e5:b2:de:b5:
df:76:88:58:cf:45:67:ab:7c:c4:34:08:e4:92:e0:38:38:83:
06:94:55:cc:11:64:68:b0:15:34:1c:50:1f:80:c6:12:ec:0c:
37:7e:8b:ca:75:e0:b3:6d:0b:17:db:d5:3d:b3:af:b9:1d:70:
e0:a7:c3:6c:c1:8e:98:cf:6f:25:1b:6f:06:07:59:00:69:24:
74:5b:ae:7e:a2:01:98:bb:71:96:82:c8:0c:02:0f:de:c8:52:
e2:00:0f:16:45:9e:d6:c3:e6:cd:bf:fe:a7:54:0d:15:51:81:
2c:0e:e5:a6:46:1f:4b:3d:b1:df:b0:4a:ad:a3:fa:b4:44:0a:
b9:61:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 09:44:08 2025 by rpki-client