Route Origin Authorization

$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a346330303a3a2f34302d3430203d3e20323134343032.roa
File:                     326131313a323963303a346330303a3a2f34302d3430203d3e20323134343032.roa (raw, json)
Hash identifier:          ENwLu67HDL6yOgsihYQA3Ju9+rd0yZONaYp0Anpn8Vg=
Subject key identifier:   D9:C4:7F:BC:7E:EF:14:92:67:EB:AF:6A:B9:D1:49:B9:DB:CB:1A:F8
Certificate issuer:       /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial:       2BCEDBB9BE2FDFAB617194BF78CE881FB4FB75AB
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access:      rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a346330303a3a2f34302d3430203d3e20323134343032.roa
Signing time:             Wed 02 Jul 2025 19:52:52 +0000
ROA not before:           Wed 02 Jul 2025 19:47:52 +0000
ROA not after:            Wed 01 Jul 2026 19:52:52 +0000
asID:                     214402
IP address blocks:        2a11:29c0:4c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl
                          rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ce:db:b9:be:2f:df:ab:61:71:94:bf:78:ce:88:1f:b4:fb:75:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
        Validity
            Not Before: Jul  2 19:47:52 2025 GMT
            Not After : Jul  1 19:52:52 2026 GMT
        Subject: CN=D9C47FBC7EEF149267EBAF6AB9D149B9DBCB1AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:06:0a:e8:7c:3a:93:4e:71:a1:fa:36:c3:
                    10:4a:6a:51:41:95:1c:93:1f:16:68:e5:32:4a:6d:
                    fd:8c:e6:fe:44:fc:ce:b5:1a:f5:c5:91:c3:fe:8c:
                    87:15:da:26:81:85:e8:f4:e6:32:03:39:62:09:5c:
                    72:97:d0:99:80:41:b6:a0:c1:45:f0:8d:89:9e:c7:
                    db:d6:ad:76:00:8e:c6:a9:d0:2a:d0:aa:d9:bc:46:
                    a9:9a:0d:f0:b6:28:55:c3:01:22:dc:96:b9:fd:78:
                    dd:10:15:de:1d:1a:c7:40:94:29:8d:a9:ce:c9:c9:
                    be:2a:66:fc:3c:5c:b0:45:d7:15:0e:8b:09:ad:8b:
                    98:d9:7c:0a:1a:e0:3b:5c:62:c0:c6:02:b8:99:5a:
                    0b:1f:ae:e8:6a:4c:82:ef:7b:e3:42:6e:e9:19:1e:
                    dc:3f:fe:f3:46:da:94:71:a3:d9:96:25:d8:fe:1c:
                    7a:31:59:56:6a:a8:e8:e3:07:27:9f:cd:f0:d4:4e:
                    f4:24:8e:94:de:0f:8b:1b:5c:38:bf:34:31:85:fd:
                    b0:1b:4c:be:7c:f6:fe:f5:c9:0a:17:84:6c:90:b3:
                    4c:61:af:da:31:d1:45:5c:9c:2a:1e:36:68:d9:31:
                    4c:e0:d4:cd:ed:d6:8f:93:29:64:d7:1d:66:01:2a:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C4:7F:BC:7E:EF:14:92:67:EB:AF:6A:B9:D1:49:B9:DB:CB:1A:F8
            X509v3 Authority Key Identifier:
                keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a346330303a3a2f34302d3430203d3e20323134343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:4c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:7d:89:64:1b:13:da:db:7f:91:07:9a:1e:1f:9c:ef:14:4e:
         7b:cf:60:7b:f5:8b:fa:24:7e:50:e5:a7:a8:3e:e9:17:68:58:
         32:aa:ad:e8:b6:cc:db:51:9d:99:0f:3a:42:7f:c9:6a:05:df:
         89:0f:d2:84:02:93:77:a2:06:6f:7b:21:e4:ca:85:e7:7a:ab:
         9d:7f:9a:75:59:4c:7d:96:6d:17:bc:a7:c2:56:cd:fa:ea:30:
         e8:43:15:f8:e4:7c:a2:58:25:0a:6f:9c:56:83:02:c4:2b:08:
         7f:96:f1:c1:ae:36:2d:fb:88:53:5c:6b:ef:65:12:8c:e0:8c:
         1c:77:af:3c:81:7a:d5:f2:ed:f5:a3:f7:2d:8b:53:a6:75:86:
         7b:12:3a:30:4b:e5:9e:2c:f5:b2:6e:0d:1c:f4:66:ed:56:49:
         1a:96:b5:90:61:7d:06:91:53:a2:09:d3:00:ce:6f:94:95:9f:
         04:a4:aa:1b:d9:28:45:28:0b:0b:30:e5:62:62:88:46:86:1b:
         ca:1e:c8:b0:c2:ba:7e:21:ea:b1:74:18:6e:e6:f2:34:eb:32:
         13:02:8c:a6:68:68:db:cd:d4:ec:fb:45:c6:c0:1b:2e:e9:dc:
         58:e1:a7:b3:56:0b:7c:19:e7:69:b6:ba:9c:9f:a0:92:d9:f4:
         d0:6f:29:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:10:12 2025 by rpki-client