Route Origin Authorization

$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439323a3a2f34382d3438203d3e20323134343032.roa
File:                     326131313a323963303a336439323a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier:          6YjIJmnIBacWvNGdX7VoLl9u6NU8EO3LUN0R1igL1aA=
Subject key identifier:   B5:0A:6B:8B:8D:3C:7C:2B:35:12:D3:44:AB:9C:B1:6C:5D:98:F7:ED
Certificate issuer:       /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial:       239F5662B016B2A95ADACD54F5823977ADE87916
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access:      rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439323a3a2f34382d3438203d3e20323134343032.roa
Signing time:             Fri 20 Jun 2025 13:14:22 +0000
ROA not before:           Fri 20 Jun 2025 13:09:22 +0000
ROA not after:            Fri 19 Jun 2026 13:14:22 +0000
asID:                     214402
IP address blocks:        2a11:29c0:3d92::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl
                          rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 06:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9f:56:62:b0:16:b2:a9:5a:da:cd:54:f5:82:39:77:ad:e8:79:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
        Validity
            Not Before: Jun 20 13:09:22 2025 GMT
            Not After : Jun 19 13:14:22 2026 GMT
        Subject: CN=B50A6B8B8D3C7C2B3512D344AB9CB16C5D98F7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f2:ce:ee:e8:fa:73:87:b8:ca:58:91:0a:27:
                    98:ae:4a:37:de:7a:d5:20:93:b7:ce:f5:1b:d9:c0:
                    8e:8f:ba:c2:8b:5b:06:17:14:23:3e:78:a8:45:c1:
                    86:40:e9:10:1d:81:d6:30:42:27:3a:95:5f:20:f2:
                    54:a2:ae:9e:e7:3a:c6:b2:e9:77:ad:02:81:b4:5e:
                    3e:6d:61:0d:84:31:c4:a7:4e:dc:94:59:32:eb:12:
                    54:48:15:15:2e:7d:3c:97:28:6e:5b:08:13:b8:c0:
                    eb:dd:8a:2c:97:dc:e4:f3:4d:74:c8:86:9f:e5:15:
                    d0:68:5f:db:d4:00:e9:fb:95:f4:58:94:c4:4f:f8:
                    fd:c1:b3:df:b6:9c:00:c9:0c:0a:b9:b7:26:69:b3:
                    0c:ac:b1:da:4f:49:76:63:f2:3c:f8:1e:fd:86:85:
                    ed:dc:28:8c:fa:58:a6:80:fd:14:2e:96:9f:53:31:
                    f9:75:47:aa:13:9b:dd:3c:c8:dc:cb:fa:3f:50:e9:
                    34:37:5d:19:21:44:fc:38:55:36:18:ec:b5:56:5c:
                    27:fc:1c:2f:6f:07:16:d6:61:e2:86:29:eb:70:91:
                    b7:ac:db:6c:68:bb:15:0b:83:34:32:30:bc:bc:a6:
                    5c:77:f6:e8:ce:28:5f:9d:56:8d:e6:a8:86:b0:96:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0A:6B:8B:8D:3C:7C:2B:35:12:D3:44:AB:9C:B1:6C:5D:98:F7:ED
            X509v3 Authority Key Identifier:
                keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439323a3a2f34382d3438203d3e20323134343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d92::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:cc:3c:5c:d3:56:04:7c:35:9e:b1:63:42:18:d0:63:e5:
         53:22:b1:a2:8c:e8:ca:1d:24:0a:07:e1:be:9f:03:35:6b:4f:
         b6:95:ae:5c:6c:2e:3b:b3:23:14:3f:93:a9:9b:93:6b:ea:dd:
         0c:dc:9b:83:e6:3e:2f:98:78:e3:af:42:c7:76:e6:ff:4a:7e:
         87:60:88:59:fc:84:d2:9e:a9:4e:d3:04:2d:c2:ad:cf:5f:23:
         06:f4:00:b6:60:88:04:38:7d:9c:25:ae:bd:45:23:ec:25:eb:
         53:ae:e4:ad:a9:8a:47:11:5f:fe:f3:54:11:13:ff:92:89:6c:
         c4:3f:2c:05:8a:8d:b9:f5:8c:37:05:03:ce:b1:dc:e8:9b:9a:
         37:cd:e4:bd:63:0b:4f:c6:18:0a:a9:ad:e9:20:19:57:35:0b:
         97:b5:88:d8:38:cb:f5:69:7d:df:48:1e:9a:d8:81:f2:bb:bc:
         7d:13:1b:6a:15:ed:26:2f:96:0d:78:73:df:1f:39:d4:5c:b1:
         7d:0d:f7:ab:2a:56:20:fd:a9:17:33:c8:ff:35:cc:29:8c:bd:
         09:15:f9:07:87:2c:50:de:53:41:dc:27:aa:8e:37:47:20:8c:
         e7:9b:bc:c4:b9:23:2e:c5:59:32:0e:61:0c:ff:99:34:40:12:
         eb:df:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:55:47 2025 by rpki-client