$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215039.roa File: AS215039.roa (raw, json) Hash identifier: jqjgzduCc1c2IsXj5ZxKXMX71MsYD9S0UdIjDrrqrjU= Subject key identifier: C5:91:00:8B:47:CD:16:58:3F:BC:4B:EA:CA:CF:28:6D:DB:27:11:86 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 45FA0DB1A8BABA7D38097CD7E6D01BB51A15786F Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215039.roa Signing time: Thu 03 Jul 2025 15:52:59 +0000 ROA not before: Thu 03 Jul 2025 15:47:59 +0000 ROA not after: Thu 02 Jul 2026 15:52:59 +0000 asID: 215039 IP address blocks: 2a0a:6044:ac50::/44 maxlen: 52 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fa:0d:b1:a8:ba:ba:7d:38:09:7c:d7:e6:d0:1b:b5:1a:15:78:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:47:59 2025 GMT Not After : Jul 2 15:52:59 2026 GMT Subject: CN=C591008B47CD16583FBC4BEACACF286DDB271186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:b6:76:e3:c6:6f:fb:30:35:55:d8:7c:4f: 2c:86:a7:7a:e0:00:08:46:80:24:fa:b9:f8:e2:2b: 3d:26:81:2a:5f:08:14:c1:6d:fd:3b:2f:32:49:f8: e3:a4:e2:31:2a:ac:c0:5c:3c:09:07:74:bf:a0:9c: bc:3c:e0:07:cc:bf:4d:c8:af:e9:82:1d:73:71:b2: ac:b5:80:eb:bb:98:9a:92:cd:04:1e:cb:5a:c6:d5: db:08:ca:48:6e:94:8a:af:ca:53:6d:52:78:77:b0: 60:e9:a2:9e:0a:79:cb:96:f3:2d:6f:0e:37:1c:af: 38:6d:a4:c1:d9:29:75:e3:2f:cc:df:cb:f6:a5:dc: 3c:00:5d:5e:7b:45:d3:cb:80:c5:4e:a6:b6:52:a3: 45:9d:cc:7e:da:ff:02:f8:6d:dd:85:bd:3a:32:52: f3:11:8b:8c:fc:ac:61:a3:27:42:94:9b:e0:95:19: 84:e3:cb:17:4d:51:82:a3:a3:23:4d:f3:d6:87:55: 9b:3e:ac:0b:c6:c2:17:62:3a:9b:1e:63:4e:1d:8f: 2e:ce:6c:fe:80:a9:38:f4:27:76:59:0f:90:62:46: 30:aa:5f:1a:a3:e3:99:9f:84:66:17:3b:a3:08:a1: 61:5d:17:7c:42:e0:87:a4:fa:3f:39:47:b3:fb:7a: 18:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:91:00:8B:47:CD:16:58:3F:BC:4B:EA:CA:CF:28:6D:DB:27:11:86 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ac50::/44 Signature Algorithm: sha256WithRSAEncryption 45:9c:2d:b1:a4:c2:3e:06:87:a7:c2:8d:66:54:04:22:45:6a: c6:90:37:be:d9:b7:16:81:d5:3b:9b:ff:38:74:75:62:dc:9f: c9:4c:24:d9:ac:18:49:08:ea:59:f9:50:c4:6e:f0:e5:97:95: 18:33:ae:91:9e:1e:c6:12:88:ae:85:77:73:af:ee:0d:87:e5: 9d:c7:94:77:e8:73:71:21:3a:7a:c1:67:dd:84:fe:de:31:41: 26:59:6d:03:79:dd:c7:d5:0b:f6:19:ef:4e:1a:f0:7e:12:7e: 64:94:b4:1f:76:eb:da:0f:a2:27:aa:ff:d5:50:ea:dc:67:66: f1:da:f9:a0:6a:78:d4:d4:ec:ed:24:35:8d:32:34:30:d2:0c: cc:f3:08:ff:23:4d:d9:08:19:fe:c6:b2:ca:50:48:2e:7a:11: 61:53:63:5a:64:61:12:88:36:98:fa:76:2e:c9:09:02:f5:da: 00:89:82:19:90:31:d8:1c:80:70:0b:af:51:40:4e:2f:ba:8f: 4e:0f:29:20:3b:81:07:70:b0:d3:f3:0e:6e:a4:ec:1e:82:e9: 31:ec:77:03:c6:44:ae:5a:4a:4c:89:b5:c6:c9:8c:03:39:f3: 92:2f:7f:97:4f:0b:0f:07:34:83:f6:8c:7c:d5:c2:0a:73:50: 87:c5:13:c4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIURfoNsai6un04CXzX5tAbtRoVeG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ3NTlaFw0yNjA3MDIxNTUyNTlaMDMxMTAvBgNV BAMTKEM1OTEwMDhCNDdDRDE2NTgzRkJDNEJFQUNBQ0YyODZEREIyNzExODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm77Z248Zv+zA1Vdh8TyyGp3rg AAhGgCT6ufjiKz0mgSpfCBTBbf07LzJJ+OOk4jEqrMBcPAkHdL+gnLw84AfMv03I r+mCHXNxsqy1gOu7mJqSzQQey1rG1dsIykhulIqvylNtUnh3sGDpop4KecuW8y1v DjccrzhtpMHZKXXjL8zfy/al3DwAXV57RdPLgMVOprZSo0WdzH7a/wL4bd2FvToy UvMRi4z8rGGjJ0KUm+CVGYTjyxdNUYKjoyNN89aHVZs+rAvGwhdiOpseY04djy7O bP6AqTj0J3ZZD5BiRjCqXxqj45mfhGYXO6MIoWFdF3xC4Iek+j85R7P7ehhBAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUxZEAi0fNFlg/vEvqys8obdsnEYYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUwMzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq CmBErFAwDQYJKoZIhvcNAQELBQADggEBAEWcLbGkwj4Gh6fCjWZUBCJFasaQN77Z txaB1Tub/zh0dWLcn8lMJNmsGEkI6ln5UMRu8OWXlRgzrpGeHsYSiK6Fd3Ov7g2H 5Z3HlHfoc3EhOnrBZ92E/t4xQSZZbQN53cfVC/YZ704a8H4SfmSUtB9269oPoieq /9VQ6txnZvHa+aBqeNTU7O0kNY0yNDDSDMzzCP8jTdkIGf7GsspQSC56EWFTY1pk YRKINpj6di7JCQL12gCJghmQMdgcgHALr1FATi+6j04PKSA7gQdwsNPzDm6k7B6C 6THsdwPGRK5aSkyJtcbJjAM585Ivf5dPCw8HNIP2jHzVwgpzUIfFE8Q= -----END CERTIFICATE-----Generated at Sat Jul 5 02:21:28 2025 by rpki-client