Route Origin Authorization

$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439343a3a2f34382d3438203d3e20323036373838.roa
File:                     326131313a323963303a336439343a3a2f34382d3438203d3e20323036373838.roa (raw, json)
Hash identifier:          Rsq2GCvcnL0X9b9/NhFAc7K6VzUgwW4E1ojebKonpuw=
Subject key identifier:   26:81:5B:A2:90:BC:D0:80:52:95:46:81:A6:6C:85:CD:97:5F:E0:BF
Certificate issuer:       /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial:       769C0B578276B9E14AAB4E4622839CEA9F826FF2
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access:      rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439343a3a2f34382d3438203d3e20323036373838.roa
Signing time:             Fri 27 Jun 2025 11:28:51 +0000
ROA not before:           Fri 27 Jun 2025 11:23:51 +0000
ROA not after:            Fri 26 Jun 2026 11:28:51 +0000
asID:                     206788
IP address blocks:        2a11:29c0:3d94::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl
                          rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9c:0b:57:82:76:b9:e1:4a:ab:4e:46:22:83:9c:ea:9f:82:6f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
        Validity
            Not Before: Jun 27 11:23:51 2025 GMT
            Not After : Jun 26 11:28:51 2026 GMT
        Subject: CN=26815BA290BCD08052954681A66C85CD975FE0BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:c8:85:4c:02:bf:6e:b8:b9:8e:44:b0:56:
                    b2:26:08:60:2a:c6:87:85:c8:a9:26:7e:06:21:47:
                    74:ba:85:f7:bd:42:e7:88:70:09:f3:ff:cd:7e:3e:
                    d9:f2:07:0e:ca:af:5f:a7:03:f4:70:4a:d6:0b:d0:
                    80:ab:39:c5:55:f5:89:e6:0e:91:bb:a0:93:08:30:
                    07:1b:53:7e:27:c4:ba:af:78:e6:6a:70:62:af:70:
                    39:12:e2:57:9e:d8:f1:e0:35:21:d2:fa:4a:99:40:
                    cd:be:9d:29:0e:84:f1:92:32:fe:48:75:13:57:78:
                    2e:a8:9f:f8:9e:df:3c:f1:2a:f9:b4:ca:b9:3b:c5:
                    e4:20:8a:62:4e:34:9d:2d:2c:11:26:1c:52:04:b3:
                    13:f1:bd:9c:fd:9e:21:12:77:f0:10:1f:53:31:c2:
                    ab:68:d4:70:d7:b5:29:7e:a1:f2:d3:9e:ce:46:79:
                    84:fb:25:26:42:44:62:a5:5e:b4:84:b8:26:b1:3e:
                    ea:63:c8:0a:bd:81:5a:2c:a6:23:48:15:02:3b:4e:
                    1a:a8:c2:af:23:52:4e:43:35:03:08:cf:08:5f:d1:
                    42:33:d4:c2:40:bc:df:93:e0:5d:be:b5:40:a1:a0:
                    f1:7d:1b:f9:3e:34:1f:8b:32:ac:08:29:10:b4:b7:
                    53:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:81:5B:A2:90:BC:D0:80:52:95:46:81:A6:6C:85:CD:97:5F:E0:BF
            X509v3 Authority Key Identifier:
                keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439343a3a2f34382d3438203d3e20323036373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d94::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:8e:6a:8d:e5:b1:41:b6:0a:13:95:62:2c:d6:9d:3e:f7:bf:
         1e:6b:20:ff:68:23:d0:de:34:35:35:40:04:87:d3:fd:eb:55:
         a6:ed:94:ac:ee:0a:16:36:4f:36:bb:9f:67:4f:57:dc:0e:90:
         bf:ec:c9:1d:9c:5e:7e:5c:f6:94:cf:61:a9:b8:1c:f9:cc:d6:
         23:c5:8d:4c:47:59:16:a7:e2:00:d5:4e:8d:a6:5a:84:f9:38:
         6c:eb:5b:71:e9:88:b3:fa:db:f7:ae:ad:3d:df:cc:bf:f0:aa:
         6b:70:42:25:f3:0c:ab:30:b8:de:19:88:0b:fd:cf:88:02:1d:
         ab:ae:af:ff:b2:26:5c:2a:cf:d4:46:ec:80:f9:de:bc:cd:7d:
         09:c3:9d:05:f7:85:3e:a7:2d:b2:33:ae:e0:96:8a:ab:30:05:
         63:a8:d5:c7:ab:98:27:de:80:a4:ea:be:1c:fc:16:1b:7d:47:
         9f:ac:16:5e:5e:48:a5:c2:76:97:b5:00:ff:8c:8b:d9:63:4a:
         06:d9:eb:84:48:24:32:48:2b:0e:82:46:28:5a:a6:ad:6d:7a:
         2d:cd:21:d2:56:b4:3e:3b:35:63:0d:2c:58:3d:69:78:bd:90:
         88:29:1d:72:75:aa:65:0b:1e:83:6b:fe:cd:da:4b:43:f2:17:
         ed:31:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:04:59 2025 by rpki-client