Route Origin Authorization

$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439333a3a2f34382d3438203d3e20323134343032.roa
File:                     326131313a323963303a336439333a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier:          UudhC0DQIjCaxJcAKI51/sFHG0qMenjBxkB/VpkPsXg=
Subject key identifier:   3C:17:71:2A:AB:2A:8C:18:D3:97:05:B3:BC:A1:13:A4:9A:E0:EE:BA
Certificate issuer:       /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial:       6F3D2ECC9BD4D63102831CCDBFB9847ABBE638AC
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access:      rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439333a3a2f34382d3438203d3e20323134343032.roa
Signing time:             Fri 20 Jun 2025 15:55:54 +0000
ROA not before:           Fri 20 Jun 2025 15:50:54 +0000
ROA not after:            Fri 19 Jun 2026 15:55:54 +0000
asID:                     214402
IP address blocks:        2a11:29c0:3d93::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl
                          rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 06:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3d:2e:cc:9b:d4:d6:31:02:83:1c:cd:bf:b9:84:7a:bb:e6:38:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
        Validity
            Not Before: Jun 20 15:50:54 2025 GMT
            Not After : Jun 19 15:55:54 2026 GMT
        Subject: CN=3C17712AAB2A8C18D39705B3BCA113A49AE0EEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:8e:8c:5f:ea:9d:a3:2f:92:53:05:3a:04:
                    7c:fa:25:61:87:10:9d:ed:49:07:e2:ab:d5:d6:7a:
                    81:2d:34:7a:00:c0:90:16:5e:e4:51:52:78:b5:c3:
                    50:88:26:26:4e:6a:63:36:88:65:77:cf:02:47:3d:
                    e8:ea:5a:ad:cf:e7:bd:94:30:f8:71:ee:a8:42:66:
                    93:55:63:3e:61:cb:4b:6a:1d:64:45:7f:52:a6:e1:
                    12:c6:82:ec:01:c1:bc:e9:c3:0d:09:f3:b4:35:e0:
                    cb:6a:6e:34:64:74:86:a6:78:ed:89:dd:05:a4:c4:
                    55:94:20:80:b9:4c:85:3b:24:cc:e3:d0:8e:aa:d0:
                    5a:ec:02:4a:b4:39:22:8c:06:01:53:83:c0:1d:f1:
                    8a:14:ac:8e:37:9d:f4:c7:43:ab:2e:c6:ef:3b:c4:
                    dd:ce:c4:0d:fe:6a:5e:bd:1b:35:96:da:72:ee:21:
                    56:54:ab:da:78:e0:1e:a6:09:69:be:21:6c:2f:57:
                    29:bb:55:b2:23:f9:69:5b:a2:25:9d:6d:60:76:6f:
                    46:6a:18:c2:89:42:10:86:9e:7c:a4:59:7a:9d:cd:
                    55:47:08:d8:c5:e4:75:0b:d9:59:43:ae:e2:46:c6:
                    2a:83:09:2f:fa:db:d2:d4:b5:8a:b9:12:e3:7c:fb:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:17:71:2A:AB:2A:8C:18:D3:97:05:B3:BC:A1:13:A4:9A:E0:EE:BA
            X509v3 Authority Key Identifier:
                keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439333a3a2f34382d3438203d3e20323134343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d93::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:c5:70:3c:11:ad:65:bd:da:2e:cd:39:d9:7b:55:24:16:22:
         36:a1:75:60:6c:ec:d8:d2:f3:05:db:5f:8b:a5:46:55:ad:7c:
         d6:32:73:dc:06:10:00:69:00:b2:a9:a9:98:04:45:5d:8a:24:
         10:6f:73:1b:5d:e5:f4:2e:3d:e7:8a:ca:db:2f:81:3d:a0:66:
         66:af:59:28:fe:61:99:8b:b3:26:9d:ce:db:49:17:cc:49:d9:
         22:4a:c8:05:96:7e:cf:eb:52:11:bc:5e:4c:e5:87:80:08:d3:
         cd:ab:d6:ad:81:ac:b8:dd:41:0e:f6:a3:22:bb:b7:52:8f:5e:
         0c:84:85:e6:2a:25:af:33:2a:fd:3f:fc:06:ae:f5:18:63:90:
         c7:5b:3f:31:16:eb:e3:b8:c8:7b:f8:6f:52:58:f3:83:e8:7b:
         69:3f:76:96:00:4f:25:74:2a:b2:55:f3:3e:7d:77:92:77:65:
         62:0b:59:11:0c:66:af:54:e4:ba:c8:1c:7e:1c:57:25:28:20:
         33:64:3c:fb:94:89:1d:78:ee:1f:72:df:cd:9a:9b:cd:a4:a5:
         38:2c:33:82:04:3c:4f:3f:28:41:66:de:42:7d:a9:6e:d0:2a:
         aa:65:a2:ba:1c:b7:fe:b8:fa:c7:69:f8:41:c1:e7:50:51:ca:
         30:07:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:47:29 2025 by rpki-client