Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213036.roa
File: AS213036.roa (raw, json)
Hash identifier: kz89i/iOeusZqYfoIF410XCGX1qicWPU7NtWJlMXDUY=
Subject key identifier: FB:A5:2B:2E:D2:91:E3:D3:74:41:E8:9C:28:4D:CF:D2:89:F1:33:31
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 3B04386DDFF6A9ACC10D5806335E415451613F87
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213036.roa
Signing time: Sun 12 Oct 2025 14:28:09 +0000
ROA not before: Sun 12 Oct 2025 14:23:09 +0000
ROA not after: Sun 11 Oct 2026 14:28:09 +0000
asID: 213036
IP address blocks: 2a06:1281:60::/44 maxlen: 48
2a06:1281:60::/48 maxlen: 48
2a06:1281:61::/48 maxlen: 48
2a06:1281:62::/48 maxlen: 48
2a06:1281:63::/48 maxlen: 48
2a06:1281:64::/48 maxlen: 48
2a06:1281:65::/48 maxlen: 48
2a06:1281:66::/48 maxlen: 48
2a06:1281:67::/48 maxlen: 48
2a06:1281:68::/48 maxlen: 48
2a06:1281:69::/48 maxlen: 48
2a06:1281:6a::/48 maxlen: 48
2a06:1281:6b::/48 maxlen: 48
2a06:1281:6c::/48 maxlen: 48
2a06:1281:6d::/48 maxlen: 48
2a06:1281:6e::/48 maxlen: 48
2a06:1281:6f::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:04:38:6d:df:f6:a9:ac:c1:0d:58:06:33:5e:41:54:51:61:3f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Oct 12 14:23:09 2025 GMT
Not After : Oct 11 14:28:09 2026 GMT
Subject: CN=FBA52B2ED291E3D37441E89C284DCFD289F13331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:cb:9f:ed:f3:90:d8:2f:be:8d:59:19:63:
e3:d1:e0:75:61:b4:7e:0d:66:44:1d:23:9f:d7:14:
a9:51:6a:e2:22:e7:52:bb:80:8d:c5:f2:d0:4b:98:
13:63:46:4e:20:d8:47:63:53:90:7a:2c:63:4e:10:
28:ce:51:ff:f3:e1:ff:de:5d:fa:9f:c5:8c:ac:25:
da:eb:f9:87:17:bf:1f:cf:b0:ef:57:b1:19:ea:b5:
d3:f6:2c:14:ce:27:53:65:c9:c1:38:25:f6:31:4b:
72:f4:44:c9:1e:5b:aa:4e:83:17:83:42:c6:14:2d:
6d:61:4f:e5:68:2f:06:a8:40:e1:25:0b:eb:7c:88:
0d:e3:9a:45:4e:c9:82:ab:20:6b:5a:f3:fc:56:19:
3f:2d:2b:cf:c2:65:83:24:dc:ed:e3:0b:46:23:69:
fb:95:ff:c4:3f:b7:dd:09:1a:d1:c5:be:72:e8:4f:
75:e0:b5:4b:9c:31:47:54:61:e5:23:2a:6b:7c:17:
61:b5:9a:67:1a:88:e6:50:5e:cd:12:49:b7:81:58:
23:b4:3d:74:f6:3b:ce:ea:7b:85:af:84:5d:b4:0b:
55:57:b8:6c:bd:ec:90:d1:7c:b8:ab:0d:c8:58:65:
20:b3:a9:64:f2:97:f5:86:f5:09:c9:21:62:4b:36:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A5:2B:2E:D2:91:E3:D3:74:41:E8:9C:28:4D:CF:D2:89:F1:33:31
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:60::/44
Signature Algorithm: sha256WithRSAEncryption
1f:48:c4:cd:1f:51:d9:7c:09:1b:f1:b6:b3:0e:b8:bc:99:3c:
db:34:c9:c3:70:34:c8:fa:25:bf:2d:c8:13:9a:2e:e7:5a:35:
97:f4:88:0a:67:bf:5b:de:4e:7f:1b:60:c9:bd:35:38:5a:93:
b0:55:ec:6e:a5:78:6b:1a:49:5e:4e:e6:06:96:f4:d5:a9:45:
99:31:90:2e:f6:90:a2:b7:38:5c:49:5d:50:82:3f:b4:9e:09:
3b:af:4a:be:62:83:ab:3a:1f:41:62:0f:c5:26:bd:20:b5:ea:
3f:c3:e0:7e:70:27:86:cf:11:6f:a2:e1:ee:47:ae:2c:9e:51:
31:7e:33:80:d3:d3:a8:81:22:64:9a:17:ea:9d:b4:41:8e:31:
43:76:2c:1f:81:23:a3:16:9f:7b:a5:dc:7a:d5:9a:b5:0c:50:
82:da:82:f7:70:fc:4d:53:32:8b:e5:9a:fe:d2:b9:93:e0:c4:
26:07:2a:7e:25:09:c9:89:59:15:0f:2a:ea:9e:a1:81:8a:f2:
ab:ad:86:6f:98:5d:ec:b8:f3:e8:1a:5e:14:de:0a:93:e5:22:
a1:55:ec:95:49:f7:3d:ce:ea:34:bf:63:04:35:ed:76:b7:31:
ad:19:86:72:02:1d:10:e8:76:77:0c:97:e0:fd:8c:06:0a:2d:
4d:e7:70:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:56 2025 by rpki-client