Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS219412.roa
File:                     AS219412.roa (raw, json)
Hash identifier:          5E5lko0IcTgvGyPXVKGPYg4YnznsEpxJBHHASiiICm8=
Subject key identifier:   CD:12:1F:2A:25:13:2C:6E:15:EA:5C:FA:38:0A:B4:42:F1:4D:34:52
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       638FAE7B3C141475C5990B74C352FB0F1C937EE1
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa
Signing time:             Wed 29 Jul 2026 11:22:40 +0000
ROA not before:           Wed 29 Jul 2026 11:17:40 +0000
ROA not after:            Wed 28 Jul 2027 11:22:40 +0000
asID:                     219412
IP address blocks:        2a05:dfc3:f900::/40 maxlen: 48
                          2a0f:6280:3000::/36 maxlen: 48
                          2a0f:6280:5000::/36 maxlen: 48
                          2a0f:6280:c000::/36 maxlen: 48
                          2a0f:6284:52::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 15:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8f:ae:7b:3c:14:14:75:c5:99:0b:74:c3:52:fb:0f:1c:93:7e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jul 29 11:17:40 2026 GMT
            Not After : Jul 28 11:22:40 2027 GMT
        Subject: CN=CD121F2A25132C6E15EA5CFA380AB442F14D3452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:93:fe:62:b0:c4:82:a4:90:aa:af:38:4b:
                    27:8e:88:42:cf:ad:c3:90:68:d7:79:90:9b:85:b9:
                    0e:b8:7a:80:d8:d2:5d:19:ab:55:a6:43:ca:5f:62:
                    db:9d:b1:f9:fc:ac:25:52:bc:8d:01:64:f1:4b:af:
                    b9:f1:46:13:a1:0c:03:51:b9:b8:18:ac:b3:73:79:
                    90:13:db:e1:50:6c:fa:0d:65:80:42:f2:14:8a:7b:
                    5b:c1:42:47:e8:df:37:55:e1:dd:da:b8:f9:0e:2e:
                    b6:36:9f:84:00:65:5e:9a:b7:55:55:74:ac:76:3e:
                    6a:4a:ee:8a:71:78:58:38:3d:28:ef:32:93:05:c8:
                    00:fc:46:17:7b:e4:a8:9e:12:fc:e6:7f:47:3f:d3:
                    0c:58:64:11:a2:68:12:b0:9e:08:47:ae:d3:cf:d9:
                    45:fa:68:3d:15:ed:59:61:05:39:f8:5a:b2:fc:1b:
                    f9:b3:4d:46:b4:a6:a0:bf:44:f6:a2:a8:42:26:ec:
                    c3:db:0d:c4:c0:be:39:bd:75:d8:cc:f2:b8:5e:a0:
                    57:7c:a7:3a:c9:ee:6b:e0:8a:94:2f:c8:a5:a9:7f:
                    f8:3c:bb:dd:c0:32:6a:fd:c4:a4:3f:7c:25:1c:41:
                    fb:c4:6a:62:ce:2b:6c:80:81:81:0a:9b:50:50:f6:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:12:1F:2A:25:13:2C:6E:15:EA:5C:FA:38:0A:B4:42:F1:4D:34:52
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:f900::/40
                  2a0f:6280:3000::/36
                  2a0f:6280:5000::/36
                  2a0f:6280:c000::/36
                  2a0f:6284:52::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:3b:91:fa:e9:39:bc:60:81:a8:40:63:c9:e3:f8:63:2d:28:
         ad:c8:ec:e4:a8:1b:f9:c7:15:e4:86:c6:1c:e6:eb:96:3a:14:
         23:9a:7d:cd:db:96:85:1b:bd:a6:e7:c9:e2:35:ea:0f:21:f8:
         a0:71:ea:e0:51:b4:1e:99:82:f7:b1:9e:af:b8:40:35:30:9b:
         2b:54:e2:7b:26:e5:6d:67:01:43:43:42:e0:0e:11:67:99:51:
         4e:49:9a:a6:91:46:4c:92:fc:69:1f:89:7a:d8:1c:a3:8e:bb:
         6a:9b:25:c7:5f:18:2c:75:11:37:28:b7:b0:7e:f8:57:93:20:
         c4:f2:50:93:fb:4d:b6:09:be:32:5c:8f:33:d3:7b:dc:16:a5:
         ce:6e:95:27:b6:34:30:a4:58:26:1a:7d:c1:d3:f6:e8:bf:13:
         01:66:61:44:4d:13:50:05:8c:62:e1:88:6d:7f:e2:3c:a6:3c:
         b7:6f:74:89:df:4f:57:99:de:6e:2e:76:26:f7:a2:5e:bb:de:
         b2:f5:ab:81:03:28:22:a8:ac:a6:7a:e0:66:2c:9d:79:c6:3a:
         aa:8c:e4:a2:91:6f:d7:f4:c9:89:fd:ce:36:08:9d:29:c7:26:
         91:1c:8b:a2:5a:f2:33:74:3d:3a:0b:a0:d9:2d:1b:99:43:b4:
         38:64:8e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 03:04:11 2026 by rpki-client