Route Origin Authorization
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030363a3a2f34382d3438203d3e20323136303931.roa
File: 326130623a346238313a313030363a3a2f34382d3438203d3e20323136303931.roa (raw, json)
Hash identifier: MSQ9WMRKe2lhoJdRc0FEbYv7CvxLFEDfMzOUsuv39FI=
Subject key identifier: A7:23:2B:C4:16:2B:58:18:CF:BF:F1:52:36:9D:FE:90:56:2D:F7:11
Certificate issuer: /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial: 53212324403CF28DEFED59149DE7D035FF213AC2
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030363a3a2f34382d3438203d3e20323136303931.roa
Signing time: Wed 03 Sep 2025 10:41:20 +0000
ROA not before: Wed 03 Sep 2025 10:36:20 +0000
ROA not after: Wed 02 Sep 2026 10:41:20 +0000
asID: 216091
IP address blocks: 2a0b:4b81:1006::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 17:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:21:23:24:40:3c:f2:8d:ef:ed:59:14:9d:e7:d0:35:ff:21:3a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
Validity
Not Before: Sep 3 10:36:20 2025 GMT
Not After : Sep 2 10:41:20 2026 GMT
Subject: CN=A7232BC4162B5818CFBFF152369DFE90562DF711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:01:4b:a5:02:e2:02:9c:e7:a9:45:db:fa:
f5:92:a1:e0:30:6d:63:67:17:63:1c:7f:c6:13:bc:
17:8d:0f:14:f9:b7:8a:d2:a6:f4:85:e3:54:b7:02:
d8:39:4e:3e:87:23:29:eb:a7:fa:ee:dd:0c:15:45:
46:08:f7:28:58:6c:95:3e:d2:10:d8:7e:76:15:22:
10:bf:f1:30:f3:d2:76:f2:cb:7c:cc:6c:10:ae:cc:
17:ea:54:07:66:70:19:9b:0f:c4:11:06:24:05:3d:
80:38:f6:da:a8:4a:67:8e:8d:d5:46:cf:7c:04:c3:
de:f8:6f:37:c0:e3:69:11:32:ae:3e:bc:46:f5:2e:
f5:da:4e:9b:be:88:c6:5c:c9:b1:9e:7b:5d:ae:42:
fa:fc:41:b7:a3:3a:2d:4a:3a:ff:92:71:77:6b:f3:
b4:6c:74:db:0c:b6:06:d4:e9:df:b2:55:fd:fe:06:
4f:24:ad:0d:20:1b:1e:7d:3f:2e:39:ef:7e:6d:2f:
03:3f:b9:dc:a8:6b:ab:38:53:cc:c2:65:59:dd:74:
c1:f0:90:59:dc:06:bc:9e:22:6f:c4:09:3b:41:da:
1b:c7:3d:00:ca:bb:41:fd:4a:87:8c:60:59:34:d7:
54:b9:db:14:31:f6:42:9a:d5:22:20:bd:1b:0e:96:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:23:2B:C4:16:2B:58:18:CF:BF:F1:52:36:9D:FE:90:56:2D:F7:11
X509v3 Authority Key Identifier:
keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030363a3a2f34382d3438203d3e20323136303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4b81:1006::/48
Signature Algorithm: sha256WithRSAEncryption
90:46:ce:80:d0:88:97:23:be:01:2e:9d:e2:e0:4a:48:a8:00:
8a:b5:e3:bc:e3:f2:e3:f6:39:55:3c:fb:68:a4:9f:25:25:c6:
f4:4b:3e:49:c0:ad:87:b0:2e:bd:2c:df:00:24:c2:23:47:df:
df:f5:d3:a6:67:c5:a7:78:57:9b:e1:53:d9:76:61:6a:15:2a:
75:63:c8:4d:e6:23:8f:02:31:70:ab:ab:d3:60:e9:86:36:e4:
bc:e9:a5:5c:f6:c0:10:c2:c3:e8:cf:0d:92:20:20:00:c5:c1:
16:19:a9:8d:11:3a:7b:18:5f:bf:ad:c5:34:b4:e7:86:bd:ed:
23:7d:60:b2:13:34:79:37:89:89:23:3b:cb:a9:3a:74:5c:61:
db:1e:0c:eb:10:5d:22:09:14:bd:f8:4d:0b:34:02:2e:be:42:
20:b3:35:b1:50:e6:9d:9a:ee:6e:d7:6a:b8:4d:59:c6:b4:30:
3a:f3:4e:2f:a7:fb:76:78:11:c9:5a:9f:0f:95:36:1a:66:81:
c1:9e:03:b5:65:7d:81:d8:3f:a7:06:36:34:b6:83:2e:13:47:
43:26:1e:05:4f:d0:f1:e3:fe:9d:3e:3b:01:ea:0b:1f:69:b3:
ee:b9:b9:f5:36:e1:c2:81:1f:68:f6:13:61:bb:6f:8e:e3:fd:
17:45:55:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:59:59 2025 by rpki-client