Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS209554.roa
File: AS209554.roa (raw, json)
Hash identifier: vH8CixpRX5W/eyATBSu1zCPxhWkev49w1RVvACFkOV4=
Subject key identifier: AE:D5:B7:54:19:8A:4D:5F:63:78:8F:99:B2:C1:2D:CE:0B:56:4F:51
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 2CE78F88FFCD3C166276BAB8E24D667A8677341D
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS209554.roa
Signing time: Mon 11 Aug 2025 18:51:19 +0000
ROA not before: Mon 11 Aug 2025 18:46:19 +0000
ROA not after: Mon 10 Aug 2026 18:51:19 +0000
asID: 209554
IP address blocks: 2a0f:6284:4400::/40 maxlen: 40
2a0f:6284:4400::/44 maxlen: 48
2a0f:6284:4410::/44 maxlen: 48
2a0f:6284:4420::/44 maxlen: 48
2a0f:6284:4430::/44 maxlen: 48
2a0f:6284:4440::/44 maxlen: 48
2a0f:6284:4450::/44 maxlen: 48
2a0f:6284:4460::/44 maxlen: 48
2a0f:6284:4470::/44 maxlen: 48
2a0f:6284:4480::/44 maxlen: 48
2a0f:6284:4490::/44 maxlen: 48
2a0f:6284:44a0::/44 maxlen: 48
2a0f:6284:44b0::/44 maxlen: 48
2a0f:6284:44c0::/44 maxlen: 48
2a0f:6284:44d0::/44 maxlen: 48
2a0f:6284:44e0::/44 maxlen: 48
2a0f:6284:44f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 20:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e7:8f:88:ff:cd:3c:16:62:76:ba:b8:e2:4d:66:7a:86:77:34:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Aug 11 18:46:19 2025 GMT
Not After : Aug 10 18:51:19 2026 GMT
Subject: CN=AED5B754198A4D5F63788F99B2C12DCE0B564F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:16:f1:a5:8e:60:42:93:09:13:b1:f9:e9:
09:36:3d:30:53:0e:31:85:8e:ce:bf:ec:68:19:97:
13:cb:f2:86:1e:b0:43:db:ae:d7:2d:bf:27:62:53:
2a:a0:f9:76:35:88:33:42:c6:24:ce:78:02:6b:26:
90:6d:64:05:2e:a3:f6:01:5c:21:b4:5f:ba:d8:4f:
31:7d:6e:e3:95:14:32:77:e4:df:1a:b5:56:92:69:
ea:1b:6f:f9:76:f6:70:1d:e4:3a:e0:2e:74:08:57:
16:85:c5:9e:bc:e1:37:ed:7e:5b:7b:a2:b9:00:bf:
25:1d:6f:a4:c2:31:63:04:3c:c7:f0:ec:7d:7a:0f:
b9:dd:f6:f6:c6:f2:40:97:d8:70:90:65:47:70:b0:
cd:ed:24:3b:1e:fd:41:8e:7f:9c:6c:53:4c:1c:6f:
f0:b0:a5:c9:d1:5c:7b:6f:1b:34:eb:ca:42:73:bb:
86:b8:5d:61:1c:ff:db:3c:2a:a3:e1:92:3b:03:7b:
d2:bc:9f:58:aa:3c:5b:c9:9d:e8:80:f5:20:22:13:
30:72:65:2d:3e:f1:66:d0:8d:0b:f5:1b:e0:85:c2:
66:94:c3:d0:6a:8f:8f:f1:c0:a0:48:22:98:d8:1f:
fb:4e:02:f6:4c:02:4b:a4:ff:cc:0f:a1:51:63:47:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D5:B7:54:19:8A:4D:5F:63:78:8F:99:B2:C1:2D:CE:0B:56:4F:51
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209554.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:4400::/40
Signature Algorithm: sha256WithRSAEncryption
88:0b:5e:6a:fd:1f:26:c2:e0:0c:26:52:b5:b4:38:26:1c:8e:
40:d5:26:e9:04:d5:ba:39:f0:aa:26:7e:81:fc:5e:ec:47:9c:
3a:41:1c:ba:33:58:31:e9:e3:2c:9f:01:ed:2d:9b:6c:21:d8:
38:2a:ed:07:b6:92:a5:1d:5e:50:e6:3d:0f:8c:0b:63:80:ad:
b4:d9:bf:cb:80:2a:7e:60:34:be:e8:92:e4:c2:10:0c:32:1f:
80:9b:9a:dd:6f:da:a9:c1:86:60:68:02:9f:76:cb:3a:46:92:
aa:65:71:a8:01:17:49:5c:88:ae:64:ed:fb:a8:09:5b:81:a4:
8e:ca:18:f6:a5:eb:9e:77:ad:f0:e9:5e:92:26:c8:19:6a:4d:
f1:af:e2:b5:0b:ca:07:b4:4e:07:8e:0f:83:52:cf:1c:09:bf:
48:1a:b9:44:03:32:27:1a:9d:3a:a3:71:13:a9:35:2b:a7:77:
96:06:5d:cc:11:46:45:d0:2b:4b:9b:36:f1:e1:a9:2b:62:8f:
7c:7a:4a:92:ce:50:ae:f1:ae:e9:5c:2e:32:c5:7d:be:7d:21:
40:8d:dd:09:3e:a5:c1:51:cf:63:45:95:43:9e:81:f5:5e:32:
a7:eb:9c:a2:c3:68:eb:dd:d1:b5:2b:b3:c1:61:18:2c:8b:df:
a9:b2:0e:38
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIULOePiP/NPBZidrq44k1meoZ3NB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNTA4MTExODQ2MTlaFw0yNjA4MTAxODUxMTlaMDMxMTAvBgNV
BAMTKEFFRDVCNzU0MTk4QTRENUY2Mzc4OEY5OUIyQzEyRENFMEI1NjRGNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhqRbxpY5gQpMJE7H56Qk2PTBT
DjGFjs6/7GgZlxPL8oYesEPbrtctvydiUyqg+XY1iDNCxiTOeAJrJpBtZAUuo/YB
XCG0X7rYTzF9buOVFDJ35N8atVaSaeobb/l29nAd5DrgLnQIVxaFxZ684Tftflt7
orkAvyUdb6TCMWMEPMfw7H16D7nd9vbG8kCX2HCQZUdwsM3tJDse/UGOf5xsU0wc
b/CwpcnRXHtvGzTrykJzu4a4XWEc/9s8KqPhkjsDe9K8n1iqPFvJneiA9SAiEzBy
ZS0+8WbQjQv1G+CFwmaUw9Bqj4/xwKBIIpjYH/tOAvZMAkuk/8wPoVFjR2YvAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQUrtW3VBmKTV9jeI+ZssEtzgtWT1EwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDk1NTQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq
D2KERDANBgkqhkiG9w0BAQsFAAOCAQEAiAteav0fJsLgDCZStbQ4JhyOQNUm6QTV
ujnwqiZ+gfxe7EecOkEcujNYMenjLJ8B7S2bbCHYOCrtB7aSpR1eUOY9D4wLY4Ct
tNm/y4AqfmA0vuiS5MIQDDIfgJua3W/aqcGGYGgCn3bLOkaSqmVxqAEXSVyIrmTt
+6gJW4GkjsoY9qXrnnet8OlekibIGWpN8a/itQvKB7ROB44Pg1LPHAm/SBq5RAMy
JxqdOqNxE6k1K6d3lgZdzBFGRdArS5s28eGpK2KPfHpKks5QrvGu6VwuMsV9vn0h
QI3dCT6lwVHPY0WVQ56B9V4yp+ucosNo693RtSuzwWEYLIvfqbIOOA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:24 2025 by rpki-client