Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: rCCgxk/rKZG+mhuX5JpGJeCeNYwcjJ4t7Wid0t1y9tY=
Subject key identifier: 25:4E:C7:97:C5:C4:DC:CF:92:AB:24:98:48:59:46:B8:AB:FE:D4:6F
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 5BC530AF81F2BA54C81652587091AFF11D2FF8DC
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
Signing time: Tue 22 Sep 2026 23:10:30 +0000
ROA not before: Tue 22 Sep 2026 23:05:30 +0000
ROA not after: Tue 21 Sep 2027 23:10:30 +0000
asID: 0
IP address blocks: 2a06:1281:a0::/44 maxlen: 48
2a0a:6044:a800::/40 maxlen: 48
2a0f:6280:3000::/36 maxlen: 48
2a0f:6284::/48 maxlen: 48
2a0f:6284:7::/48 maxlen: 48
2a0f:6284:d::/48 maxlen: 48
2a0f:6284:4212::/48 maxlen: 48
2a0f:6284:4216::/48 maxlen: 48
2a0f:6284:4218::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c5:30:af:81:f2:ba:54:c8:16:52:58:70:91:af:f1:1d:2f:f8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Sep 22 23:05:30 2026 GMT
Not After : Sep 21 23:10:30 2027 GMT
Subject: CN=254EC797C5C4DCCF92AB2498485946B8ABFED46F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:2a:17:35:26:59:6a:ae:51:0f:52:d4:68:
fd:2f:e6:4f:41:f4:30:ff:77:9e:0a:3d:1e:82:01:
b1:e9:8c:af:dd:63:e2:68:73:18:24:c2:c5:9b:bd:
04:d7:ea:db:7b:73:ad:e1:60:f6:a9:76:ad:6e:72:
b7:e9:6a:05:31:2b:79:d2:c1:f2:bc:88:9d:b9:7e:
bf:0e:90:8b:d3:8c:05:e6:05:9f:7e:f8:6b:5a:23:
75:bf:64:63:01:6c:fc:49:9c:f2:8f:63:e3:43:23:
2f:61:d1:3b:56:26:10:2d:a7:09:37:10:1f:e3:9f:
13:5d:a2:7a:97:59:a0:c8:ec:b2:f0:f3:b5:42:9d:
69:c4:ea:50:2c:7f:a5:21:25:8f:ab:18:1c:77:96:
9f:1d:3c:40:03:ba:6f:ce:01:57:0d:05:06:91:37:
da:80:00:74:e3:6b:ba:36:7e:15:8f:de:ff:d1:85:
74:0f:71:cb:0c:ac:ac:f2:05:87:d9:36:f8:04:8a:
1e:cb:42:a4:89:02:1a:75:5a:1c:ec:b0:e7:e3:1e:
85:f7:05:3f:a8:06:15:a0:f7:95:0f:89:12:d5:5e:
7a:41:70:6a:db:e8:99:1e:5d:da:d1:9c:6a:85:e7:
e1:09:b0:b0:e8:be:4e:4e:f2:28:7b:61:a0:7b:54:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4E:C7:97:C5:C4:DC:CF:92:AB:24:98:48:59:46:B8:AB:FE:D4:6F
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:a0::/44
2a0a:6044:a800::/40
2a0f:6280:3000::/36
2a0f:6284::/48
2a0f:6284:7::/48
2a0f:6284:d::/48
2a0f:6284:4212::/48
2a0f:6284:4216::/48
2a0f:6284:4218::/48
Signature Algorithm: sha256WithRSAEncryption
85:6d:b4:56:4b:95:1f:f2:a1:a1:7e:c2:a7:1a:11:de:93:7a:
a4:e9:27:43:98:af:b5:6b:c5:2f:f3:1e:79:5a:c5:e0:3c:f7:
e5:f2:5f:2a:15:8e:aa:dc:ba:ca:b5:66:73:e3:3b:8c:82:89:
93:b4:54:84:2e:5d:50:e9:87:8e:f4:8c:74:35:db:b7:62:4e:
22:b3:8e:56:1a:75:bb:6d:87:ee:9d:4e:0f:76:d8:f7:be:6e:
3a:96:02:93:79:b6:b1:5c:2e:4d:79:a6:6e:67:50:7c:0d:dc:
d4:00:cb:49:42:5c:e9:13:01:d3:f3:0b:10:74:d4:2e:62:32:
15:0b:e2:b0:84:84:01:d9:50:3e:ef:06:54:83:02:b6:7a:83:
ec:97:a1:12:5b:fe:5d:ce:7d:ee:41:bc:ca:93:94:76:fd:1d:
f1:9c:28:67:6a:7c:8a:53:75:6c:58:58:d1:1f:f2:df:4d:ad:
52:d9:f1:94:22:02:dc:21:10:65:2d:a8:14:c8:07:f8:17:eb:
25:09:46:2e:89:8c:fa:ef:4e:1b:5e:d8:82:4b:77:46:9e:e9:
d9:02:6e:be:f9:c1:24:19:5f:3e:cd:47:2d:1f:2e:c0:52:55:
78:71:2c:f4:5e:a6:56:a0:f5:99:67:d6:9d:34:39:de:d2:b8:
6f:e1:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:02:47 2026 by rpki-client