Route Origin Authorization
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030383a3a2f34382d3438203d3e20323131353835.roa
File: 326130623a346238313a313030383a3a2f34382d3438203d3e20323131353835.roa (raw, json)
Hash identifier: Epp1sDourv8gYLgaPpGfcNI0cfHApzBU4WttOiVlCtg=
Subject key identifier: 1B:41:89:13:B4:7F:9B:7F:C6:65:CE:D2:2C:67:8F:3C:02:8B:81:34
Certificate issuer: /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial: 5C110DCB95713DC35DC74053187B3466A531B7B0
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030383a3a2f34382d3438203d3e20323131353835.roa
Signing time: Tue 09 Sep 2025 07:46:56 +0000
ROA not before: Tue 09 Sep 2025 07:41:56 +0000
ROA not after: Tue 08 Sep 2026 07:46:56 +0000
asID: 211585
IP address blocks: 2a0b:4b81:1008::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 17:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:11:0d:cb:95:71:3d:c3:5d:c7:40:53:18:7b:34:66:a5:31:b7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
Validity
Not Before: Sep 9 07:41:56 2025 GMT
Not After : Sep 8 07:46:56 2026 GMT
Subject: CN=1B418913B47F9B7FC665CED22C678F3C028B8134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:27:b6:60:83:db:79:16:01:3d:52:68:7c:1d:
5f:03:9f:ad:6f:d6:e5:96:82:49:1a:39:33:f1:4b:
18:65:5f:b8:18:9c:9d:3d:11:99:b2:81:d0:43:4b:
7f:6e:59:a3:70:f1:5a:02:90:ec:bf:de:4d:3a:55:
82:8b:ae:4c:06:2e:3c:90:f9:6d:d4:51:96:d4:a0:
88:a5:9c:36:f8:a2:6f:18:e9:89:c7:f9:40:38:a0:
74:a9:3c:97:a2:13:91:36:0d:a4:0a:f6:5b:b4:74:
0b:8f:1a:2c:8f:33:79:f4:e6:4f:a4:5c:73:31:17:
c5:90:cf:12:97:07:4b:d5:1d:51:09:17:0e:f5:a1:
b8:12:6d:2c:e6:27:78:f3:3b:58:70:c3:9c:50:c5:
33:f4:d4:fd:23:23:f3:90:0e:44:96:6e:4f:98:9d:
77:e6:be:1c:30:0a:d0:fc:14:f2:cc:ed:53:38:b4:
f8:ca:e9:f7:5f:e7:23:9b:e4:bf:71:f7:c0:02:76:
73:27:81:13:41:77:46:e8:be:39:e1:17:c9:d0:de:
13:5b:a4:35:d7:71:53:91:6b:b3:69:53:40:f0:97:
75:26:ef:5c:4b:0e:30:f8:dd:8e:78:1a:e3:2b:e2:
bf:b4:eb:12:8b:6a:b1:56:8a:b9:cc:5d:41:6a:68:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:89:13:B4:7F:9B:7F:C6:65:CE:D2:2C:67:8F:3C:02:8B:81:34
X509v3 Authority Key Identifier:
keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030383a3a2f34382d3438203d3e20323131353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4b81:1008::/48
Signature Algorithm: sha256WithRSAEncryption
35:71:dc:ba:1f:42:6d:56:28:85:6e:e1:bb:b3:d8:c8:44:29:
2b:cb:fd:88:f8:1d:d4:0f:16:19:eb:dd:8b:2f:1a:fd:da:33:
b7:e4:a4:11:c3:b3:8d:0f:c0:3b:ca:91:c2:5d:44:c9:2a:3e:
f1:5a:6e:a4:bf:b3:57:33:b5:50:b8:2d:7c:d1:5e:48:00:03:
e0:03:40:cb:bf:29:ea:0f:2e:fa:77:17:6e:2f:61:1d:22:83:
1e:d0:67:6f:f4:cf:1d:f6:fc:d1:15:71:70:5b:38:9b:bc:8f:
c4:d9:23:c8:4d:7f:d8:4a:63:b5:12:c9:c4:7d:0f:9e:a5:6f:
14:ed:81:4d:cb:42:a3:6d:11:72:dd:21:b6:a3:c4:a8:e7:8a:
70:1b:68:b1:49:b3:c5:34:c4:69:fe:e3:c1:58:b8:d7:ec:5f:
18:95:8d:83:63:e9:40:69:47:11:06:1b:29:0a:64:0e:1e:a6:
05:4a:6c:2c:49:c8:9e:0b:c5:92:c3:fe:1d:ab:00:53:ce:9e:
10:d3:d2:25:4f:8d:43:89:f5:0c:d3:a1:d3:e3:6c:96:da:70:
1d:bb:db:4b:14:27:cd:09:46:ab:61:94:0d:e5:00:e8:f1:b2:
53:16:5e:14:72:5e:02:6e:97:07:db:f5:d4:77:11:5d:d6:64:
ad:45:d2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:59:58 2025 by rpki-client