Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212234.roa
File:                     AS212234.roa (raw, json)
Hash identifier:          HblJdTcVy4/xa7KZrwL8YlNO4SwJjReNpjPuD+KdUlI=
Subject key identifier:   AF:49:80:33:15:2D:D1:33:70:AC:5A:01:2D:7C:7F:10:E7:DD:06:4D
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       6FB2B46AD2E258234E504AA13CA982EEFFAE5D29
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS212234.roa
Signing time:             Fri 13 Feb 2026 21:10:34 +0000
ROA not before:           Fri 13 Feb 2026 21:05:34 +0000
ROA not after:            Fri 12 Feb 2027 21:10:34 +0000
asID:                     212234
IP address blocks:        2a0f:6284:5::/48 maxlen: 48
                          2a0f:6284:10::/44 maxlen: 44
                          2a0f:6284:d00::/40 maxlen: 48
                          2a0f:6284:3200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 19:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b2:b4:6a:d2:e2:58:23:4e:50:4a:a1:3c:a9:82:ee:ff:ae:5d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Feb 13 21:05:34 2026 GMT
            Not After : Feb 12 21:10:34 2027 GMT
        Subject: CN=AF498033152DD13370AC5A012D7C7F10E7DD064D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:8a:e0:1d:6f:9c:10:84:54:85:b9:3b:57:
                    fd:6b:78:8f:fc:21:9c:86:2d:a5:84:2a:f6:ab:38:
                    54:8c:77:ee:67:83:46:e7:3a:b9:85:bd:a6:a6:e4:
                    3f:bd:38:f6:b0:5c:a1:f4:3a:d1:15:8a:1e:42:63:
                    67:5d:62:c0:39:20:ec:04:47:43:53:15:43:2d:b9:
                    67:50:fe:d3:f9:ff:aa:97:b9:50:58:bc:7a:0f:21:
                    b3:ed:7e:59:5f:59:86:01:d4:8d:da:92:dc:f0:7c:
                    db:5b:ae:aa:3b:ce:4a:16:35:92:de:bf:29:6f:85:
                    0e:14:cb:59:60:75:1d:ec:a7:32:30:e4:6d:20:b6:
                    fe:e3:49:42:9b:f2:9a:e3:d9:aa:3b:76:22:8e:4f:
                    b8:cb:58:ad:51:04:a8:66:e6:18:31:02:20:03:98:
                    dc:66:8f:6b:2c:f5:c0:6e:f3:14:f6:4d:39:db:20:
                    25:86:f5:7d:c1:36:5f:a1:21:2e:a8:ab:53:34:ac:
                    c9:b6:2e:a9:b6:13:82:4c:d8:cd:b8:6a:d3:89:ea:
                    e0:f8:18:5a:1b:db:ac:4c:e7:a7:1b:95:32:b8:b0:
                    ac:5c:bb:12:33:95:23:90:fb:a3:8e:0a:c8:19:a2:
                    ef:3a:5b:d9:8b:2f:20:cb:63:06:87:f3:12:16:95:
                    c7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:49:80:33:15:2D:D1:33:70:AC:5A:01:2D:7C:7F:10:E7:DD:06:4D
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:5::/48
                  2a0f:6284:10::/44
                  2a0f:6284:d00::/40
                  2a0f:6284:3200::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:b8:1f:8f:50:08:ba:9b:7f:bd:67:07:c5:99:2c:9b:c4:74:
         87:bc:2a:39:67:55:c4:c2:41:35:8c:51:09:ac:ca:5e:13:37:
         24:65:5b:5d:81:16:9e:a9:99:18:61:ed:fc:e5:2d:c0:62:e9:
         e5:5d:a0:3c:da:d3:77:d2:e0:42:01:34:46:a3:3f:09:b7:8c:
         bf:38:d1:a1:1b:43:24:97:74:e4:73:b6:d6:b7:38:96:f8:e6:
         26:2e:6f:0e:69:7c:2a:5f:f8:f9:ce:36:77:c4:ce:95:ea:c8:
         ae:4f:3d:da:13:b7:d4:46:e1:2b:0b:13:d5:e1:be:52:31:43:
         3b:f6:62:0f:d2:a8:61:00:ce:9e:8f:9e:a7:54:dd:6b:58:af:
         48:2b:74:73:76:02:d7:fc:bb:a5:93:c6:0b:cd:1c:01:60:72:
         77:4c:f2:8e:0f:37:e8:e2:43:01:39:ae:6b:a6:1e:73:5b:6c:
         c5:60:75:ae:ad:99:b3:c1:db:34:5f:75:91:ea:10:fa:b5:68:
         93:24:93:ca:6e:f9:65:15:0b:ca:7a:dc:a0:22:1e:89:bc:c9:
         3a:f5:53:7c:10:d8:60:82:60:6c:ad:95:2a:2c:9e:1c:cd:09:
         ac:e7:58:4e:73:36:61:df:af:07:41:ba:44:79:3f:f7:9b:ec:
         0c:e0:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:26:57 2026 by rpki-client