Route Origin Authorization
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238303a3a2f33302d3330203d3e20323134343032.roa
File: 326130623a346238303a3a2f33302d3330203d3e20323134343032.roa (raw, json)
Hash identifier: 2Fmmf+uFYrXoEMAEJkFsoFWRXBfUY9SUG2jP5PJE6vs=
Subject key identifier: 11:F5:DA:14:FD:68:97:99:6D:9D:A6:63:A0:00:23:E1:4E:91:19:88
Certificate issuer: /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial: 7C2589395083A139E9B4CAACE7E0E2F35A769851
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238303a3a2f33302d3330203d3e20323134343032.roa
Signing time: Fri 08 Aug 2025 19:00:55 +0000
ROA not before: Fri 08 Aug 2025 18:55:55 +0000
ROA not after: Fri 07 Aug 2026 19:00:55 +0000
asID: 214402
IP address blocks: 2a0b:4b80::/30 maxlen: 30
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:25:89:39:50:83:a1:39:e9:b4:ca:ac:e7:e0:e2:f3:5a:76:98:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
Validity
Not Before: Aug 8 18:55:55 2025 GMT
Not After : Aug 7 19:00:55 2026 GMT
Subject: CN=11F5DA14FD6897996D9DA663A00023E14E911988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:74:88:a8:fa:fc:73:e6:19:3d:6f:ff:38:
93:f2:06:fd:71:ca:0b:82:5d:bd:6a:72:63:7b:cf:
23:26:80:fd:ba:cb:b8:38:d7:b9:22:4b:8b:40:a2:
4c:1c:85:47:d5:a9:8b:71:53:e0:cc:00:3a:90:34:
0f:11:0e:ef:6c:7d:68:d2:5f:34:c5:35:45:a5:12:
d0:a9:a6:d8:83:4a:0b:89:81:de:a0:41:ae:c6:d6:
7b:30:73:d6:a4:f9:b3:6e:ad:43:d1:2a:b7:1f:d2:
9c:83:2f:ce:7a:82:b4:fd:c9:97:8b:e7:0a:53:e1:
52:6a:01:30:17:69:2c:1a:10:8b:33:09:8c:37:50:
e8:aa:92:91:f4:0d:fe:f6:d5:20:d3:a0:65:2f:45:
ce:ca:b1:19:e4:76:1a:8b:31:7a:ea:07:48:73:5a:
a6:d3:a9:b8:75:0c:1b:99:60:01:47:f9:b2:02:13:
53:02:08:ce:5f:91:3f:83:dc:c9:20:99:3f:16:6f:
a7:d9:76:5a:72:59:b9:61:9c:86:5e:c5:60:02:b7:
b1:2d:5a:80:dd:bd:d8:9a:a6:44:04:be:b5:7b:d6:
06:7d:f4:a7:21:ec:c1:30:b2:5a:16:dd:cc:90:c8:
11:83:2b:b6:34:63:9c:90:2f:b3:51:4b:94:f6:20:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F5:DA:14:FD:68:97:99:6D:9D:A6:63:A0:00:23:E1:4E:91:19:88
X509v3 Authority Key Identifier:
keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238303a3a2f33302d3330203d3e20323134343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4b80::/30
Signature Algorithm: sha256WithRSAEncryption
5a:64:7e:83:a7:80:7b:62:b3:7b:b9:e4:6e:46:59:a7:b5:f8:
f2:03:18:e2:4d:e3:a5:b7:fd:26:59:71:ff:ca:ae:f0:85:1f:
4c:55:a7:71:b3:7b:39:81:65:7c:6c:7d:b7:46:d3:bb:e6:25:
1d:42:18:96:1e:26:b4:20:4e:a5:e8:e3:99:60:c3:a2:45:b5:
bd:d0:05:ad:8e:85:34:d9:36:6f:ae:83:b4:db:bc:bf:be:22:
33:ca:23:d2:85:29:db:33:46:b5:04:5a:60:2b:0b:fe:74:4d:
b8:a8:74:9d:f8:71:6a:d8:3b:f2:d0:d8:18:0a:1f:4c:a3:ab:
12:5b:d2:13:f6:47:91:fa:cb:99:6b:fd:8f:d1:ff:4b:99:13:
c3:2e:f4:c8:28:3e:43:59:5b:69:cd:3e:7d:85:1c:f1:75:ca:
9f:55:eb:a0:b9:1b:db:51:fc:e4:17:a5:80:62:12:08:a4:be:
05:ce:f6:8e:36:1c:a5:c9:da:98:36:7d:57:8e:4d:56:3e:1c:
be:20:d8:e5:32:d5:13:df:7e:71:2c:90:96:b9:35:c3:ed:c3:
e1:be:02:51:49:93:4d:16:4b:44:a2:3d:9c:43:f4:fa:21:1e:
9a:18:66:da:fe:ee:e8:f8:17:16:bb:7e:32:4e:d3:13:24:86:
04:d4:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:09:50 2025 by rpki-client