Route Origin Authorization

$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439313a3a2f34382d3438203d3e20323037363735.roa
File:                     326131313a323963303a336439313a3a2f34382d3438203d3e20323037363735.roa (raw, json)
Hash identifier:          Hvut4IVaY0LlDwVXxqgoLOnzSIbii0cQ+JU3hABGrF4=
Subject key identifier:   87:38:64:24:E7:D1:D3:48:5C:5A:A1:27:FA:FB:D3:3D:C5:AF:78:1E
Certificate issuer:       /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial:       2E9B6472E259E567836ADF0CFC7F27D51195A01B
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access:      rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439313a3a2f34382d3438203d3e20323037363735.roa
Signing time:             Wed 18 Jun 2025 18:02:47 +0000
ROA not before:           Wed 18 Jun 2025 17:57:47 +0000
ROA not after:            Wed 17 Jun 2026 18:02:47 +0000
asID:                     207675
IP address blocks:        2a11:29c0:3d91::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl
                          rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9b:64:72:e2:59:e5:67:83:6a:df:0c:fc:7f:27:d5:11:95:a0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
        Validity
            Not Before: Jun 18 17:57:47 2025 GMT
            Not After : Jun 17 18:02:47 2026 GMT
        Subject: CN=87386424E7D1D3485C5AA127FAFBD33DC5AF781E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ee:cb:85:22:03:0a:f8:b7:d9:95:6e:67:e1:
                    ed:64:3a:8a:80:bd:07:16:a1:e8:77:2a:ae:57:43:
                    49:6f:81:47:20:4e:3a:91:48:7b:0f:30:ff:59:da:
                    84:73:96:be:99:0f:22:45:b8:ad:8d:d7:76:1b:00:
                    d5:f0:62:9e:5f:07:18:6c:d3:02:da:a8:d2:5a:49:
                    2b:46:59:e3:25:5e:ec:cd:ed:88:16:47:9f:2e:9e:
                    28:db:4a:ee:59:23:f9:4b:32:73:d2:02:3d:c4:04:
                    c7:6d:cb:27:81:17:16:63:82:4e:b0:d6:e3:11:9e:
                    f1:2f:f2:ff:bf:e2:42:38:ca:9a:77:05:17:03:e9:
                    0d:0d:1c:03:f2:c9:89:9c:db:b2:f6:a5:a0:74:17:
                    89:e7:a5:89:e3:3f:c7:d4:5f:f4:4f:5d:f2:05:b0:
                    09:5e:f9:e9:22:e7:9b:f1:fd:21:31:c6:df:11:bb:
                    be:a5:2f:d4:e3:31:09:85:16:57:91:be:73:74:b6:
                    44:fc:6b:b7:ff:44:52:cf:64:8b:81:0f:c1:85:33:
                    e2:98:13:9e:98:b8:56:55:e1:97:af:36:2a:ce:26:
                    07:02:34:b7:16:8e:f1:38:fc:e3:f8:f6:a1:50:fc:
                    b4:ac:ca:83:e9:13:38:cf:f7:9b:1e:8e:44:02:e4:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:38:64:24:E7:D1:D3:48:5C:5A:A1:27:FA:FB:D3:3D:C5:AF:78:1E
            X509v3 Authority Key Identifier:
                keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439313a3a2f34382d3438203d3e20323037363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d91::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:54:5a:9d:5d:f4:a0:8e:c0:ec:e2:bf:7c:8c:aa:3b:a6:1e:
         f8:bc:23:a2:6a:59:5c:bd:52:88:26:b4:4e:5c:49:b0:22:b5:
         7e:5c:ca:2a:70:44:fb:db:73:e0:6f:3d:c9:3c:d5:8f:0e:bd:
         61:69:3d:43:61:53:12:2e:86:26:fb:fb:c1:a6:39:48:b2:7b:
         bd:48:90:c2:d1:0d:f5:3a:78:6f:af:79:50:18:9b:32:c3:1c:
         a0:43:d6:68:5d:fc:ae:37:3d:15:80:4c:ac:22:7c:39:ce:28:
         79:f2:f2:81:12:f6:6f:6c:a0:99:99:b4:a1:32:9d:19:c6:fa:
         c3:61:30:50:de:01:28:41:e8:bc:ac:74:cb:14:d9:12:33:da:
         27:44:67:d1:eb:09:90:7a:e1:54:a4:22:f7:06:35:68:08:b3:
         d0:04:a5:77:b5:24:9c:10:e3:99:b4:c3:97:20:81:e4:67:61:
         a9:d0:56:b4:96:1a:f6:83:4c:b1:94:88:10:6e:65:30:ac:78:
         86:3d:a2:9a:79:2e:17:22:cb:13:9c:4d:bb:f0:6b:81:69:8d:
         45:8f:b4:10:32:86:f3:66:6e:69:f9:b9:51:ed:99:5f:7a:e7:
         7e:07:e3:f4:e3:7c:50:56:2a:49:ec:80:8e:8a:09:38:2f:a1:
         af:a9:31:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:06:24 2025 by rpki-client