Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214848.roa
File:                     AS214848.roa (raw, json)
Hash identifier:          XLxuyoS2jli3LdkZvPzhwPiWgHXlbsh73r/7KmBxMyk=
Subject key identifier:   46:6C:63:D5:30:B9:24:14:36:B3:AC:7C:25:D2:9D:1C:51:99:74:48
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       0A32D6E6C8E8CD9D5754580E94146796255D5C74
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS214848.roa
Signing time:             Sat 14 Feb 2026 02:03:55 +0000
ROA not before:           Sat 14 Feb 2026 01:58:55 +0000
ROA not after:            Sat 13 Feb 2027 02:03:55 +0000
asID:                     214848
IP address blocks:        2a09:54c6:d000::/36 maxlen: 48
                          2a09:54c6:d000::/48 maxlen: 48
                          2a09:54c6:d001::/48 maxlen: 48
                          2a09:54c6:d002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Feb 2026 15:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:32:d6:e6:c8:e8:cd:9d:57:54:58:0e:94:14:67:96:25:5d:5c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Feb 14 01:58:55 2026 GMT
            Not After : Feb 13 02:03:55 2027 GMT
        Subject: CN=466C63D530B9241436B3AC7C25D29D1C51997448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:6f:70:63:71:59:9b:7d:20:a7:17:2a:03:
                    54:80:e5:b6:72:ba:59:72:19:17:4a:7a:a6:15:c3:
                    2a:0a:3d:2b:c7:04:7b:21:11:3c:fe:d5:44:0c:ff:
                    25:ee:bd:be:6b:de:43:23:29:1f:a2:c1:92:94:75:
                    24:a4:18:bb:0e:8d:6f:40:d2:67:41:1e:52:f6:21:
                    d1:b7:ec:8e:9b:c6:ac:bd:c2:af:e7:0e:77:9f:46:
                    4d:5b:4e:35:48:be:89:8e:ef:78:7f:ec:fa:dd:fc:
                    07:df:21:3b:c3:4e:02:33:bb:6d:c9:19:c0:18:2e:
                    53:39:b5:04:25:0f:61:5c:b9:74:bb:11:45:9a:2d:
                    6e:b8:58:27:48:e7:37:3c:1f:c1:92:2c:9d:6d:13:
                    b1:26:6d:da:89:e2:d5:e2:67:47:13:68:50:bc:08:
                    70:5b:0e:fc:c7:c9:59:25:9d:2a:e2:6a:36:0d:7a:
                    b9:29:59:e1:26:a1:c2:4a:b7:83:ba:de:d7:4d:4d:
                    38:bb:05:92:57:6c:a7:5a:d5:4d:93:e9:01:1f:09:
                    49:01:a2:49:87:df:4a:c7:a2:6e:b9:c3:23:42:d0:
                    c4:22:7e:1e:9e:94:cc:46:f4:6e:8a:18:d3:ca:3e:
                    23:11:0b:7d:10:db:be:70:e5:4a:48:e6:fa:85:c1:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6C:63:D5:30:B9:24:14:36:B3:AC:7C:25:D2:9D:1C:51:99:74:48
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214848.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         57:71:76:f1:9e:1f:fd:3b:30:5c:65:e6:f6:f5:f3:bb:4d:a5:
         a1:e9:2d:f5:4b:e5:64:5d:1d:b4:f2:cd:21:62:5b:f4:5f:30:
         b7:bf:12:d9:8b:e0:7b:a9:13:c9:2a:f5:cc:f5:19:6a:a4:8c:
         f8:b1:52:ef:dc:a5:4b:82:37:e5:a9:22:48:1c:18:46:6d:1f:
         37:d5:01:bf:bc:66:42:90:26:19:97:da:e4:0b:1c:c3:a3:da:
         ad:2d:27:b4:a0:57:38:62:33:08:04:3b:f8:ad:5a:84:e4:bb:
         79:84:4f:29:80:ed:2c:22:ee:4f:20:99:5b:4c:1f:98:22:2c:
         ba:b6:d7:7f:17:ba:9c:1e:92:46:37:39:10:b9:d6:b8:76:a0:
         7d:01:c5:37:0c:5f:e2:49:a2:ad:38:84:fc:a7:3c:73:86:aa:
         9a:f2:cc:19:d8:c8:a9:94:07:cb:77:53:5c:92:11:38:47:2d:
         65:9e:ce:f0:74:d8:f0:7b:93:b2:0b:2b:11:be:c8:8b:24:ae:
         92:f8:0b:a3:1e:5e:d9:fe:5a:30:55:fe:c9:59:ae:dc:e8:03:
         1d:8b:b6:4b:9c:ef:b4:84:89:6e:44:2a:56:6b:e7:18:60:10:
         28:a1:ec:5b:78:cb:fd:f4:da:1f:41:cb:81:f7:61:b9:b6:0e:
         66:96:a0:04
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUCjLW5sjozZ1XVFgOlBRnliVdXHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjAyMTQwMTU4NTVaFw0yNzAyMTMwMjAzNTVaMDMxMTAvBgNV
BAMTKDQ2NkM2M0Q1MzBCOTI0MTQzNkIzQUM3QzI1RDI5RDFDNTE5OTc0NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCT29wY3FZm30gpxcqA1SA5bZy
ullyGRdKeqYVwyoKPSvHBHshETz+1UQM/yXuvb5r3kMjKR+iwZKUdSSkGLsOjW9A
0mdBHlL2IdG37I6bxqy9wq/nDnefRk1bTjVIvomO73h/7Prd/AffITvDTgIzu23J
GcAYLlM5tQQlD2FcuXS7EUWaLW64WCdI5zc8H8GSLJ1tE7EmbdqJ4tXiZ0cTaFC8
CHBbDvzHyVklnSriajYNerkpWeEmocJKt4O63tdNTTi7BZJXbKda1U2T6QEfCUkB
okmH30rHom65wyNC0MQifh6elMxG9G6KGNPKPiMRC30Q275w5UpI5vqFwUQPAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQURmxj1TC5JBQ2s6x8JdKdHFGZdEgwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ4NDgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq
CVTG0DANBgkqhkiG9w0BAQsFAAOCAQEAV3F28Z4f/TswXGXm9vXzu02loekt9Uvl
ZF0dtPLNIWJb9F8wt78S2Yvge6kTySr1zPUZaqSM+LFS79ylS4I35akiSBwYRm0f
N9UBv7xmQpAmGZfa5Ascw6ParS0ntKBXOGIzCAQ7+K1ahOS7eYRPKYDtLCLuTyCZ
W0wfmCIsurbXfxe6nB6SRjc5ELnWuHagfQHFNwxf4kmirTiE/Kc8c4aqmvLMGdjI
qZQHy3dTXJIROEctZZ7O8HTY8HuTsgsrEb7IiySukvgLox5e2f5aMFX+yVmu3OgD
HYu2S5zvtISJbkQqVmvnGGAQKKHsW3jL/fTaH0HLgfdhubYOZpagBA==
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:22:46 2026 by rpki-client