Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: +7J0Mw2UyTzuWWzsOZplwzmIWsxh17vBD3Wo0Jo/rbg=
Subject key identifier: 05:A5:A5:C3:23:27:45:3C:B4:A7:14:7D:60:48:31:48:C0:32:DC:5A
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 12C0F5DD58106E86DD61ABAC111915782A4AAD34
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
Signing time: Wed 19 Aug 2026 06:00:02 +0000
ROA not before: Wed 19 Aug 2026 05:55:02 +0000
ROA not after: Wed 18 Aug 2027 06:00:02 +0000
asID: 0
IP address blocks: 2a06:1281:a0::/44 maxlen: 48
2a0a:6044:a800::/40 maxlen: 48
2a0f:6282:210c::/48 maxlen: 48
2a0f:6284::/48 maxlen: 48
2a0f:6284:7::/48 maxlen: 48
2a0f:6284:d::/48 maxlen: 48
2a0f:6284:4212::/48 maxlen: 48
2a0f:6284:4216::/48 maxlen: 48
2a0f:6284:4218::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 13:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c0:f5:dd:58:10:6e:86:dd:61:ab:ac:11:19:15:78:2a:4a:ad:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Aug 19 05:55:02 2026 GMT
Not After : Aug 18 06:00:02 2027 GMT
Subject: CN=05A5A5C32327453CB4A7147D60483148C032DC5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:cd:5a:68:c5:7a:43:bb:30:05:a6:24:7d:
54:6e:7c:76:ec:4f:fa:38:75:e4:2f:69:49:b2:9c:
86:c6:bf:f2:e6:45:b7:4f:d7:5f:cb:62:9e:44:7c:
e2:83:29:17:7d:50:09:e3:9a:33:a6:32:b0:9d:45:
d6:47:a2:10:de:a9:b4:7c:72:fd:08:e6:cd:33:9e:
f6:77:1b:7f:b4:7c:38:00:00:e9:05:da:76:ae:44:
77:7a:9b:1d:03:90:10:41:85:fa:47:4e:32:65:07:
59:67:4d:19:32:17:b2:43:65:ff:57:ec:ab:71:54:
c2:dd:da:20:9e:d7:3c:4c:73:1c:b6:d9:fe:32:0b:
f9:e8:95:a0:05:6e:3d:5f:3d:ce:f0:c7:70:8e:bd:
b8:38:a1:d0:9c:b1:bd:dc:3e:7b:2b:f6:ab:e7:a0:
80:49:30:ce:80:4d:60:2d:a4:71:02:b5:6d:d4:5f:
48:de:d3:11:1d:4c:d8:13:ed:6b:79:5d:ae:4d:35:
75:bb:f6:3f:59:c5:f7:df:e8:b2:1b:79:7a:4d:dc:
fc:de:1f:be:67:6a:02:c2:83:a0:db:95:a3:ad:5c:
51:79:2b:a6:54:cb:9b:e9:2c:79:06:4a:f1:e8:ff:
a1:07:a3:b7:13:94:6a:fd:1a:7d:aa:cd:5f:11:59:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A5:A5:C3:23:27:45:3C:B4:A7:14:7D:60:48:31:48:C0:32:DC:5A
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:a0::/44
2a0a:6044:a800::/40
2a0f:6282:210c::/48
2a0f:6284::/48
2a0f:6284:7::/48
2a0f:6284:d::/48
2a0f:6284:4212::/48
2a0f:6284:4216::/48
2a0f:6284:4218::/48
Signature Algorithm: sha256WithRSAEncryption
59:00:01:ff:87:64:72:bf:73:07:2e:c1:31:94:78:e1:a6:d8:
bf:f4:65:f8:4c:b6:95:a2:e4:d4:b1:6e:8d:32:ac:46:35:0f:
45:03:c6:b0:28:a3:c3:4d:4d:3e:ae:0a:5b:41:7a:ad:10:17:
fa:85:dc:06:6a:65:6c:9b:dd:a9:7b:16:92:74:9f:b7:7b:4e:
57:a6:21:6f:e7:06:05:40:f9:ec:99:27:38:09:ba:49:cd:fa:
5e:c6:98:e8:c2:f1:c4:60:1b:ad:16:6e:69:10:7a:ca:35:72:
6a:b6:18:60:10:b1:02:8f:82:0a:4d:88:89:c4:ca:5b:22:73:
ae:b9:df:e8:eb:ff:77:b1:49:00:22:b3:a0:f6:5a:5d:14:d1:
0b:1a:49:1d:fe:1e:2a:94:e0:86:c3:21:17:89:2f:50:79:fc:
5c:d2:c1:30:b7:58:c8:21:e6:c4:40:c4:29:77:cb:59:53:33:
7f:6d:ec:1a:70:3b:94:04:9b:dc:cd:d2:eb:d2:40:8c:31:4f:
5e:ff:f3:d0:ef:0d:b4:94:bb:e7:be:e1:1d:ec:70:4d:e1:4e:
67:4a:ed:81:e5:b9:fc:cc:9e:bb:b5:76:1d:f1:37:c4:72:35:
6a:ef:0f:a8:15:d9:2c:c4:04:e0:73:4e:58:1f:fb:a8:32:ff:
ca:bf:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:37:14 2026 by rpki-client