Route Origin Authorization
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030373a3a2f34382d3438203d3e20343031353735.roa
File: 326130623a346238313a313030373a3a2f34382d3438203d3e20343031353735.roa (raw, json)
Hash identifier: tvmaxljC7c921jT8fijd4iySzH6w3rzTRr1QbSVM0HY=
Subject key identifier: 9A:01:9B:81:D9:74:7C:5E:35:E0:62:B8:C5:14:1F:62:F4:41:FA:A5
Certificate issuer: /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial: 76E4E3C802C0047F767B192033B9ECBFA9CCD9E6
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030373a3a2f34382d3438203d3e20343031353735.roa
Signing time: Wed 03 Sep 2025 15:30:43 +0000
ROA not before: Wed 03 Sep 2025 15:25:43 +0000
ROA not after: Wed 02 Sep 2026 15:30:43 +0000
asID: 401575
IP address blocks: 2a0b:4b81:1007::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e4:e3:c8:02:c0:04:7f:76:7b:19:20:33:b9:ec:bf:a9:cc:d9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
Validity
Not Before: Sep 3 15:25:43 2025 GMT
Not After : Sep 2 15:30:43 2026 GMT
Subject: CN=9A019B81D9747C5E35E062B8C5141F62F441FAA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:80:18:29:71:48:f7:cf:ac:c4:7e:a0:7f:
44:20:dc:88:bd:72:bc:c2:70:ef:07:c9:a2:0a:83:
38:14:3a:89:99:42:2a:45:dd:c1:5b:27:76:a7:f3:
dc:c9:a4:bc:83:77:bc:63:7a:b4:9d:8d:cc:1c:4b:
65:14:6b:92:f0:49:19:15:a8:08:01:d4:e1:f9:9e:
20:21:dd:73:e9:e3:2a:ad:22:68:23:44:05:8d:e4:
f3:de:89:7c:04:be:00:d0:f3:c4:c3:48:e3:ff:44:
5b:7a:72:64:af:59:54:1a:bb:95:6f:c2:5c:55:9e:
43:40:a1:88:95:a7:9b:8f:b0:0c:7e:c3:fc:1e:c6:
2f:69:d2:b6:64:4e:3d:d9:74:2a:c8:64:44:bc:5d:
59:21:b8:13:75:4d:d0:73:70:30:fe:8d:cd:fb:4e:
13:92:96:d7:eb:68:85:14:19:e6:d8:09:41:90:48:
72:9a:a3:90:e0:b9:70:1c:6e:b7:ab:85:76:13:11:
33:6f:8d:c8:b6:07:59:1c:a8:7b:c6:11:07:6e:8a:
63:f9:83:88:82:ce:15:c8:4a:71:28:cb:91:d8:02:
6f:2e:f8:fa:af:8a:60:08:46:e5:f2:30:38:e7:37:
44:92:e1:ec:a3:ca:40:9d:c1:5b:ac:d8:97:fe:4f:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:01:9B:81:D9:74:7C:5E:35:E0:62:B8:C5:14:1F:62:F4:41:FA:A5
X509v3 Authority Key Identifier:
keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030373a3a2f34382d3438203d3e20343031353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4b81:1007::/48
Signature Algorithm: sha256WithRSAEncryption
69:8d:34:95:95:2c:f7:54:77:80:09:05:42:be:f5:4b:ba:3f:
57:68:8d:d5:a2:e7:56:8b:66:47:fd:51:17:51:ef:c3:cf:6f:
a3:43:e2:6a:16:1d:e3:9e:ed:66:5d:7d:03:6f:10:cc:28:82:
88:f2:4d:2f:97:a0:9f:6b:28:41:4b:ca:69:dd:d4:16:06:64:
a9:98:2b:64:27:74:0f:c2:43:3a:06:44:f7:61:ea:5a:b4:b3:
03:9d:75:4c:9c:bf:20:20:34:c3:44:dd:f4:89:9a:16:92:7a:
db:17:ec:73:36:3e:49:28:a9:77:a1:96:dc:f6:cc:3f:86:0a:
91:b2:d2:bf:24:a7:e8:75:d1:76:b3:51:8d:d9:b5:d5:10:aa:
a1:54:c4:30:19:62:d4:66:9a:2d:e1:76:61:0f:b4:96:a2:5a:
de:17:f1:42:a7:4f:47:69:4c:88:e8:da:fd:65:a3:59:8a:04:
73:53:ef:98:09:68:3a:46:22:89:11:ef:9e:22:52:ff:91:65:
95:dc:ec:d7:01:3d:2c:44:d7:34:a8:6c:e1:9a:c8:21:78:6c:
2d:ac:12:15:a3:84:69:36:26:cf:89:1d:ec:69:98:99:c4:82:
ff:0d:ed:67:bf:6a:87:e3:87:10:9e:01:01:94:e0:b4:0c:fb:
af:7e:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 18:43:58 2025 by rpki-client