$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213641.roa File: AS213641.roa (raw, json) Hash identifier: HPX1ZAZiGieXaCxo1HhR20IuEnslbTZ+fCZI363hW+Y= Subject key identifier: E1:87:CF:17:73:AB:DF:87:DF:44:30:7A:F9:F8:EB:E5:CE:14:A3:F7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0C2B8EF446E91DDD84FE94452B0596620759C713 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213641.roa Signing time: Thu 03 Jul 2025 15:53:01 +0000 ROA not before: Thu 03 Jul 2025 15:48:01 +0000 ROA not after: Thu 02 Jul 2026 15:53:01 +0000 asID: 213641 IP address blocks: 2a05:dfc3:fd50::/44 maxlen: 48 2a05:dfc3:fd50::/48 maxlen: 48 2a05:dfc3:fd51::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2b:8e:f4:46:e9:1d:dd:84:fe:94:45:2b:05:96:62:07:59:c7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:48:01 2025 GMT Not After : Jul 2 15:53:01 2026 GMT Subject: CN=E187CF1773ABDF87DF44307AF9F8EBE5CE14A3F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:46:91:ff:cc:74:e6:9c:fc:f4:74:07:61:4f: c6:a4:af:d7:a6:f4:d9:0d:54:15:f4:a4:8f:73:51: 25:91:60:fd:9c:09:f2:09:41:e5:54:6d:f0:11:d8: 8c:01:a8:f4:2a:3d:e0:88:fe:48:ca:9f:13:89:54: 7b:02:da:a8:c1:9d:a3:8f:40:ea:6e:9d:d0:7e:de: f7:5d:bf:e5:52:ab:92:4d:d4:4c:2b:90:bd:99:1a: 20:78:a4:1c:59:b4:1c:d5:df:ff:4d:c4:2b:31:e2: 8f:fa:4a:fc:84:39:13:ac:36:f0:8a:42:2d:6e:f2: 4b:a0:5e:d5:99:0c:98:7b:f8:fc:9c:a4:ad:84:cb: 02:b3:6a:a9:68:75:c9:12:11:ac:83:c1:0f:33:44: e3:d5:7d:24:43:30:d5:16:42:c3:94:71:ce:58:20: 58:63:c7:0a:13:47:36:73:68:41:fd:e5:87:24:fa: 46:f1:73:a4:6e:71:60:a8:a6:c3:a6:df:ca:44:d9: 79:ef:81:09:cd:b0:59:7e:d5:94:09:c8:ad:d3:9f: 82:84:26:3a:f5:f2:06:ed:01:db:3f:3e:f2:d2:19: f0:2e:14:0d:e2:91:10:5a:1c:de:05:13:ef:d4:09: f0:2e:7c:03:7d:42:9f:85:5d:12:94:0a:b5:3f:79: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:87:CF:17:73:AB:DF:87:DF:44:30:7A:F9:F8:EB:E5:CE:14:A3:F7 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd50::/44 Signature Algorithm: sha256WithRSAEncryption 69:1c:e2:bf:9b:2b:e6:89:02:42:b9:99:30:89:e3:83:31:5a: a1:da:b9:81:a6:ef:a3:61:73:3d:14:e0:d0:fe:a4:ac:b7:09: db:6e:98:e2:11:d9:40:9b:ae:81:35:c3:5f:ee:4e:3b:b3:c2: ae:eb:b7:c9:f8:1b:9c:f7:ff:dc:cc:c1:cc:c4:5f:8a:6b:57: 77:8c:72:82:c3:8c:0e:61:28:b1:28:be:d1:f4:b9:6b:38:d0: 23:01:06:09:3a:af:65:6d:d6:50:49:e7:4d:81:37:ff:07:20: cf:2e:30:77:5a:43:31:5e:99:e1:a5:d0:78:20:f9:4d:56:26: 1e:af:c7:c6:18:31:c7:fc:06:93:ef:1f:89:c0:32:55:26:1a: 24:be:d3:04:7e:e3:3f:78:21:96:a9:bc:e2:e9:c4:7e:82:d5: 11:6b:ce:61:56:5a:0a:4b:5f:ea:a4:34:25:24:eb:dd:00:05: bd:57:96:3f:e0:03:47:b4:b5:ba:f6:bf:72:80:28:f7:35:c9: b7:af:c4:3a:f5:5a:85:fc:84:ce:4a:4a:c0:f1:da:54:6b:2d: 67:2d:72:28:89:5a:f7:42:3b:ca:6d:bb:6a:d6:41:57:de:e9: f4:39:1e:4c:74:22:dc:49:84:e2:10:66:9d:f5:d0:03:10:66: 37:a2:88:1e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUDCuO9EbpHd2E/pRFKwWWYgdZxxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ4MDFaFw0yNjA3MDIxNTUzMDFaMDMxMTAvBgNV BAMTKEUxODdDRjE3NzNBQkRGODdERjQ0MzA3QUY5RjhFQkU1Q0UxNEEzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRpH/zHTmnPz0dAdhT8akr9em 9NkNVBX0pI9zUSWRYP2cCfIJQeVUbfAR2IwBqPQqPeCI/kjKnxOJVHsC2qjBnaOP QOpundB+3vddv+VSq5JN1EwrkL2ZGiB4pBxZtBzV3/9NxCsx4o/6SvyEOROsNvCK Qi1u8kugXtWZDJh7+PycpK2EywKzaqlodckSEayDwQ8zROPVfSRDMNUWQsOUcc5Y IFhjxwoTRzZzaEH95Yck+kbxc6RucWCopsOm38pE2XnvgQnNsFl+1ZQJyK3Tn4KE Jjr18gbtAds/PvLSGfAuFA3ikRBaHN4FE+/UCfAufAN9Qp+FXRKUCrU/easrAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU4YfPF3Or34ffRDB6+fjr5c4Uo/cwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM2NDEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq Bd/D/VAwDQYJKoZIhvcNAQELBQADggEBAGkc4r+bK+aJAkK5mTCJ44MxWqHauYGm 76Nhcz0U4ND+pKy3CdtumOIR2UCbroE1w1/uTjuzwq7rt8n4G5z3/9zMwczEX4pr V3eMcoLDjA5hKLEovtH0uWs40CMBBgk6r2Vt1lBJ502BN/8HIM8uMHdaQzFemeGl 0Hgg+U1WJh6vx8YYMcf8BpPvH4nAMlUmGiS+0wR+4z94IZapvOLpxH6C1RFrzmFW WgpLX+qkNCUk690ABb1Xlj/gA0e0tbr2v3KAKPc1ybevxDr1WoX8hM5KSsDx2lRr LWctciiJWvdCO8ptu2rWQVfe6fQ5Hkx0ItxJhOIQZp310AMQZjeiiB4= -----END CERTIFICATE-----Generated at Sat Jul 5 02:19:01 2025 by rpki-client