Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS206098.roa
File:                     AS206098.roa (raw, json)
Hash identifier:          fZIjjX0r04IfI+GKNgCKprbsQ02krj3pyfY9/WO2cNg=
Subject key identifier:   DE:BC:BE:FC:F3:92:03:7A:13:19:91:33:79:91:22:76:A6:7D:1C:9D
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       2135DC7A9E3EDC8A8B5CAD51C886A3D3FD4689A7
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS206098.roa
Signing time:             Fri 02 Oct 2026 16:34:46 +0000
ROA not before:           Fri 02 Oct 2026 16:29:46 +0000
ROA not after:            Fri 01 Oct 2027 16:34:46 +0000
asID:                     206098
IP address blocks:        2a0f:6280:1008::/48 maxlen: 48
                          2a0f:6280:100d::/48 maxlen: 48
                          2a0f:6280:1071::/48 maxlen: 48
                          2a0f:6280:1072::/48 maxlen: 48
                          2a0f:6280:1073::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:35:dc:7a:9e:3e:dc:8a:8b:5c:ad:51:c8:86:a3:d3:fd:46:89:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Oct  2 16:29:46 2026 GMT
            Not After : Oct  1 16:34:46 2027 GMT
        Subject: CN=DEBCBEFCF392037A1319913379912276A67D1C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:23:f1:be:71:c3:f6:54:7b:c2:71:43:8c:
                    59:89:ca:cd:49:35:c7:1c:56:13:81:58:b5:bd:2c:
                    41:34:56:ec:80:84:ea:64:d9:ad:91:33:91:72:46:
                    ca:26:a4:ea:d8:be:06:ee:f3:cf:17:72:b7:e8:ff:
                    79:3c:27:8a:07:07:e2:e2:81:20:71:dc:d3:ce:c8:
                    27:22:b1:fe:1a:2e:3e:d4:44:c6:66:c1:eb:a1:a4:
                    e2:fb:3d:34:5e:57:b4:77:62:6e:bb:60:01:c5:3d:
                    88:9d:98:df:23:3a:7b:7f:0f:be:95:6e:87:91:bf:
                    b4:fa:a9:6a:25:4f:c0:f5:bc:02:7a:ac:53:83:bc:
                    b2:d7:36:79:4c:5f:c4:e9:4d:9f:f0:64:f7:a3:e6:
                    60:85:22:ae:bd:39:3d:a5:ce:ef:63:b7:27:2a:39:
                    f2:52:52:6e:ad:31:0a:43:65:5c:fa:ba:6e:2c:6c:
                    12:1f:ee:44:9b:b8:73:31:55:cc:94:5d:58:54:40:
                    e2:ad:da:00:2d:4c:e3:b3:c8:ac:ab:08:c2:c0:d5:
                    44:11:f5:04:9c:1d:20:34:d6:5c:cb:29:2f:c7:16:
                    b0:aa:65:03:45:2d:13:7d:bd:f2:67:23:8a:b6:4b:
                    f8:92:f1:5f:ab:88:30:23:3b:56:b6:44:48:bb:28:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BC:BE:FC:F3:92:03:7A:13:19:91:33:79:91:22:76:A6:7D:1C:9D
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS206098.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280:1008::/48
                  2a0f:6280:100d::/48
                  2a0f:6280:1071::-2a0f:6280:1073:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         10:2c:e9:8a:93:d0:a3:b3:22:4a:1f:9e:bb:f5:5f:f2:99:2d:
         f0:66:a6:b6:c5:0e:25:c0:11:c2:77:ea:41:44:6a:70:c2:ca:
         67:e1:c1:93:13:19:da:47:e8:6a:e3:d4:4a:2b:9c:a6:f0:53:
         70:4a:24:56:a7:b0:e3:59:d0:b3:56:2d:70:50:23:e2:b8:8d:
         65:e6:06:1b:71:97:77:0c:ab:f6:a5:86:1e:0d:38:0d:2c:0b:
         31:c9:ec:1d:25:63:64:12:b8:7a:55:41:2e:f2:e1:9f:70:3f:
         52:2a:af:6d:c5:ff:a3:f4:08:cd:cd:96:2f:eb:17:19:70:c3:
         54:7c:48:cc:6c:a4:9b:0d:ef:34:1a:6d:7a:21:08:4a:59:b3:
         36:c0:fa:fc:39:6b:bb:25:51:92:ee:7a:da:67:ae:92:e9:10:
         d7:9f:2e:f7:71:70:55:47:0b:33:a3:e2:92:df:53:f4:e7:df:
         cc:12:42:0f:6d:84:a9:41:a0:84:95:8c:c6:9b:4b:c3:3d:b9:
         f4:93:a1:25:e3:4d:ae:94:56:09:99:6a:fa:be:ff:26:8a:03:
         0d:92:ea:61:c1:21:b0:0a:51:10:d0:47:54:f5:a2:c0:cf:b4:
         ee:7a:a7:87:00:71:66:80:f9:4f:f5:e8:78:e3:aa:ee:e9:ca:
         82:69:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:44:07 2026 by rpki-client