Route Origin Authorization
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313031303a3a2f34342d3434203d3e203539343439.roa
File: 326130623a346238313a313031303a3a2f34342d3434203d3e203539343439.roa (raw, json)
Hash identifier: y9QEUTLOCvxE4mUeK87Kf1xEE7IN44R877ZM+6e7628=
Subject key identifier: D6:33:05:E4:2B:1F:9B:F6:6C:54:12:F0:E8:45:5F:9D:86:87:7D:0C
Certificate issuer: /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial: 112EF6F53AA1AD7CBD6D8EF21F08D13DDE7FA061
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313031303a3a2f34342d3434203d3e203539343439.roa
Signing time: Thu 28 Aug 2025 15:56:12 +0000
ROA not before: Thu 28 Aug 2025 15:51:12 +0000
ROA not after: Thu 27 Aug 2026 15:56:12 +0000
asID: 59449
IP address blocks: 2a0b:4b81:1010::/44 maxlen: 44
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2e:f6:f5:3a:a1:ad:7c:bd:6d:8e:f2:1f:08:d1:3d:de:7f:a0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
Validity
Not Before: Aug 28 15:51:12 2025 GMT
Not After : Aug 27 15:56:12 2026 GMT
Subject: CN=D63305E42B1F9BF66C5412F0E8455F9D86877D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:ee:7c:7e:30:df:95:0f:be:76:04:3d:72:
47:ae:ac:12:8e:9e:c0:72:d4:a2:15:de:3b:db:12:
f0:20:8a:a6:f8:bd:09:65:30:17:43:ab:6c:b5:e5:
84:21:2f:c8:f5:d0:7b:af:fd:98:e1:3e:27:88:19:
fe:bf:ac:2f:5d:3b:ac:1e:7a:61:09:33:ae:db:c7:
24:73:b1:2e:c4:73:6a:9b:c8:9a:8a:29:05:ec:e7:
11:9f:f5:59:32:30:0e:58:4e:fd:58:af:75:32:41:
91:21:03:78:55:69:95:10:e4:d7:53:e0:a8:e9:f4:
87:96:7c:51:a8:57:66:e2:25:e7:25:88:04:71:c5:
42:60:11:98:2b:ec:57:ad:e8:73:a0:7f:2e:b3:97:
01:a9:48:01:5a:5d:08:79:43:6c:f6:d1:4c:e8:a8:
a1:5c:9c:25:36:82:f7:4f:e5:a2:f3:f3:10:1c:5c:
23:e8:55:4b:58:25:c4:b0:5d:de:b1:2f:8b:59:74:
a5:7b:df:36:5a:f2:67:d7:25:42:48:a7:cf:a0:98:
0f:79:13:b3:95:28:73:c0:24:13:61:1c:05:04:08:
d3:c8:66:2f:e9:69:cd:56:c0:f5:fc:a3:75:3f:fe:
2d:b7:62:5d:34:ac:28:9b:cc:01:ed:5e:75:56:8e:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:33:05:E4:2B:1F:9B:F6:6C:54:12:F0:E8:45:5F:9D:86:87:7D:0C
X509v3 Authority Key Identifier:
keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313031303a3a2f34342d3434203d3e203539343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4b81:1010::/44
Signature Algorithm: sha256WithRSAEncryption
90:30:e3:e4:a4:11:14:34:99:13:65:3e:10:f4:26:15:8b:1c:
cb:d1:85:68:ff:a8:b6:15:5b:d7:fa:85:16:3f:b4:c3:bb:53:
43:ef:48:27:f0:f4:9f:b5:04:28:24:ba:8d:4a:2c:d8:80:d5:
78:9c:3b:15:0a:95:27:cb:d9:cf:f1:2f:fd:16:8a:fb:4a:ed:
b1:02:f6:81:6a:86:d3:f2:1f:8d:b2:c0:9e:e0:07:76:85:35:
ca:14:b7:22:4a:1d:24:da:39:23:90:e0:14:5c:a9:ef:22:2f:
36:dc:e8:76:24:71:34:b4:49:ed:d3:ef:b3:16:08:94:57:64:
0c:bd:4e:ae:1a:06:9f:f0:60:36:c2:ac:bc:7d:a0:1d:e6:9f:
c9:0b:a0:ff:94:96:c5:7c:17:34:81:4b:3f:ff:01:67:0e:7c:
f7:47:29:0b:ab:4e:a2:65:a0:72:5b:6d:8e:3c:d3:a6:e5:bb:
14:6e:8d:c6:b0:6e:8f:44:a4:52:bb:2f:c7:1f:2f:f1:a4:9c:
b4:06:d8:39:04:e4:99:a7:25:2d:a7:25:20:12:d5:f2:8a:41:
97:03:0f:d6:1c:22:aa:43:05:67:44:46:a5:e5:66:4d:71:70:
a8:eb:c1:82:60:91:80:a8:e6:30:18:6b:68:fc:d8:13:34:32:
4f:77:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 09:44:08 2025 by rpki-client