Route Origin Authorization
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030313a3a2f34382d3438203d3e20323130303431.roa
File: 326130623a346238313a313030313a3a2f34382d3438203d3e20323130303431.roa (raw, json)
Hash identifier: qi7WbXf/3QSpMq9ps0r6CahGGK7jqrbESmGomORXO8M=
Subject key identifier: 04:E8:C3:A6:A6:02:E7:9C:6F:A6:85:10:61:A6:43:12:06:D5:5E:64
Certificate issuer: /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial: 4A92B313AE6913AFFED22C687386A4075DCCEAD2
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030313a3a2f34382d3438203d3e20323130303431.roa
Signing time: Wed 20 Aug 2025 10:19:47 +0000
ROA not before: Wed 20 Aug 2025 10:14:47 +0000
ROA not after: Wed 19 Aug 2026 10:19:47 +0000
asID: 210041
IP address blocks: 2a0b:4b81:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:92:b3:13:ae:69:13:af:fe:d2:2c:68:73:86:a4:07:5d:cc:ea:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
Validity
Not Before: Aug 20 10:14:47 2025 GMT
Not After : Aug 19 10:19:47 2026 GMT
Subject: CN=04E8C3A6A602E79C6FA6851061A6431206D55E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:1a:9e:36:9a:4a:dd:06:43:0f:5d:7d:36:
8a:7b:be:a7:a4:bf:45:a7:f8:61:32:5d:87:72:a5:
bf:df:b3:22:40:99:c6:00:8e:1d:a0:d1:6e:c1:cf:
e2:bd:18:4a:4c:44:47:44:c8:f5:e5:33:1f:73:de:
af:e0:f0:38:6f:18:2e:88:eb:e8:ef:6a:09:43:b8:
7b:8e:e3:12:91:bf:3b:0d:5d:70:f5:43:64:7c:9d:
bb:19:4c:39:7a:3f:02:95:8c:3f:3b:23:8a:59:0d:
7d:e0:90:70:56:78:51:98:63:f4:d4:a4:6b:07:85:
de:d0:22:e3:da:c0:30:35:96:0a:cd:e5:9a:ac:88:
20:1a:cc:48:7d:f8:db:a5:d3:3b:7e:0e:27:a3:0b:
6a:61:a4:df:bd:68:e2:34:9c:ef:8c:05:ec:ec:bb:
5c:0c:da:a4:01:7e:83:78:d7:a6:a3:d0:6c:8b:05:
5c:3a:72:d1:cf:1f:e8:3e:cd:ef:fa:ee:c7:40:a6:
dc:9e:14:52:82:81:37:5c:ac:be:a9:09:cb:d9:b4:
6d:a3:1d:04:34:67:b4:bd:b7:20:bb:72:e3:47:fd:
92:6d:aa:d3:a0:52:7e:9a:d5:df:c7:b4:81:c8:2f:
8b:44:64:87:5f:45:3f:19:c4:d6:30:e8:b3:5a:92:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E8:C3:A6:A6:02:E7:9C:6F:A6:85:10:61:A6:43:12:06:D5:5E:64
X509v3 Authority Key Identifier:
keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030313a3a2f34382d3438203d3e20323130303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4b81:1001::/48
Signature Algorithm: sha256WithRSAEncryption
5b:ee:15:4d:ca:87:21:43:6c:3e:49:cc:c2:4a:b9:4e:01:9c:
88:69:fe:e7:ed:dd:75:66:68:e7:b7:a3:d4:06:57:f5:e2:aa:
64:e9:cc:53:27:cf:00:60:af:53:eb:66:79:1c:70:b0:f8:60:
e7:ee:55:45:e9:d2:76:a3:dc:20:01:5a:08:e0:b3:55:43:5a:
c0:5c:16:10:47:2d:e4:f8:3f:af:6e:0d:ba:31:de:0e:a6:c2:
c3:60:a3:fd:69:eb:98:e6:96:7b:67:b5:75:86:ad:ce:55:e8:
f3:2f:f0:a8:72:64:80:36:33:bf:be:43:ea:3f:68:f8:ae:10:
58:02:f3:ff:66:4f:e8:e6:04:b0:93:f5:43:83:46:3b:43:c7:
a4:ca:84:68:b9:e2:ec:c3:7d:df:71:f7:d4:33:b0:81:2d:d2:
88:b2:92:b9:e6:b7:c4:ec:3b:0d:3b:65:39:97:cb:45:58:63:
96:34:15:10:ff:93:1c:2e:34:f1:26:b6:df:b5:cb:b5:6b:da:
d9:68:5a:c0:9a:98:dc:1c:ec:3e:8e:fe:bf:52:3a:df:73:3e:
51:0a:24:c3:d0:32:05:03:8b:ad:ba:99:33:11:e3:44:60:a4:
3a:34:c7:c2:c8:7f:74:1a:61:32:75:a5:6c:a6:81:39:2a:1a:
d5:7b:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:31 2025 by rpki-client