Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa
File: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: 2a17Lk2A8/wL7uW3pe0LYOncmlPOF8z6wyS66XDk5lw=
Subject key identifier: 23:50:70:FE:80:44:0F:9E:01:F0:D4:2E:FB:23:B8:D6:27:2F:D1:1E
Certificate issuer: /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial: 690CD942AB66E21B5EB83479359AC4C1D76B2ECE
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/0/323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa
Signing time: Thu 04 Jun 2026 15:51:42 +0000
ROA not before: Thu 04 Jun 2026 15:46:42 +0000
ROA not after: Thu 03 Jun 2027 15:51:42 +0000
asID: 47272
IP address blocks: 2001:67c:d8c::/48 maxlen: 128
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0c:d9:42:ab:66:e2:1b:5e:b8:34:79:35:9a:c4:c1:d7:6b:2e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
Validity
Not Before: Jun 4 15:46:42 2026 GMT
Not After : Jun 3 15:51:42 2027 GMT
Subject: CN=235070FE80440F9E01F0D42EFB23B8D6272FD11E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:6f:6f:6f:8b:96:f6:64:6e:2e:3b:ee:42:
a5:4f:f9:70:1b:30:56:1d:1e:09:e2:1b:d2:c0:b0:
93:c6:87:f4:d6:56:49:3a:d7:b8:3c:03:f5:81:30:
9c:12:69:a7:1b:1b:d4:87:cd:5e:ed:51:8e:ea:8b:
69:80:55:a0:39:ba:7b:a1:72:bb:53:00:87:c0:a5:
8d:31:bb:12:0f:f6:d4:bc:7f:97:f1:c5:b6:7e:1c:
7a:c7:e5:ab:f2:70:ce:fa:2a:58:24:2a:73:19:25:
a2:41:af:6d:7b:38:3d:dc:02:3d:30:e7:a2:ea:f4:
c5:8b:97:a7:18:0e:1e:a5:58:05:d7:5f:f8:e2:83:
bb:c7:99:d9:6e:9e:ee:71:1f:0f:f8:f9:9a:d0:34:
56:95:28:d5:94:09:f1:65:9f:e9:2c:a5:d6:ca:ee:
34:8c:1e:e7:e6:b4:82:75:48:0e:2b:a2:66:3e:6c:
14:22:c0:57:11:36:99:25:ef:ca:0e:62:c4:c3:95:
76:eb:a3:6a:92:e6:51:8d:57:54:da:31:76:e8:de:
e4:e8:cb:30:01:87:b5:d6:e8:11:ad:84:3e:a0:97:
60:ae:8e:1c:e7:ae:39:8c:7d:99:d0:de:3f:b5:02:
40:a1:93:02:d3:a0:6d:dd:0d:f7:10:54:04:9a:05:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:50:70:FE:80:44:0F:9E:01:F0:D4:2E:FB:23:B8:D6:27:2F:D1:1E
X509v3 Authority Key Identifier:
keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d8c::/48
Signature Algorithm: sha256WithRSAEncryption
31:15:d0:92:3b:b0:e1:53:83:06:b6:bb:17:cd:08:f9:a1:54:
7c:2e:35:0e:3b:97:84:4a:5a:c3:98:2a:c1:99:96:d3:e3:db:
bc:4a:a6:dd:23:43:8e:74:82:6d:d7:a1:b4:a0:f0:d7:44:6e:
ec:08:3e:84:2d:09:ec:d3:dd:a3:c3:b1:6f:76:f3:b1:fb:a9:
09:75:ec:f8:6a:8a:63:28:7a:79:5d:21:e9:94:e6:e3:6d:a8:
07:ff:4c:9f:76:e3:9c:06:a1:fc:d9:dc:ee:5b:1b:83:fd:4c:
ca:e8:b3:70:8e:e7:a9:1b:50:6e:e8:9e:e2:27:82:d4:94:31:
33:24:c7:b9:ee:aa:05:42:de:13:2c:ca:63:45:cb:49:d2:63:
0c:69:13:08:d5:66:c9:b4:54:a5:fe:12:e5:92:91:2d:2d:6e:
3f:cf:b9:88:b7:e5:65:f3:d8:77:ad:3d:5e:7a:ad:03:88:a7:
06:4c:49:06:6a:08:46:18:a9:22:e4:a7:ad:7a:ce:e4:63:91:
d5:1f:7a:47:2f:fb:46:18:ef:86:b7:96:de:96:f3:24:bd:c5:
6f:f3:43:fe:2d:22:f2:2a:9c:1e:14:68:4d:3e:f6:0f:4b:1e:
8d:8a:50:93:92:d1:25:59:18:3b:e0:c9:89:8e:82:1b:06:c8:
5b:7a:6b:a5
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUaQzZQqtm4hteuDR5NZrEwddrLs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGFkZDU0NjY3MjMwODQ0OTBlZjQ5MWM2MTliOGJjNjFh
MzI4YThiNjAeFw0yNjA2MDQxNTQ2NDJaFw0yNzA2MDMxNTUxNDJaMDMxMTAvBgNV
BAMTKDIzNTA3MEZFODA0NDBGOUUwMUYwRDQyRUZCMjNCOEQ2MjcyRkQxMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYIm9vb4uW9mRuLjvuQqVP+XAb
MFYdHgniG9LAsJPGh/TWVkk617g8A/WBMJwSaacbG9SHzV7tUY7qi2mAVaA5unuh
crtTAIfApY0xuxIP9tS8f5fxxbZ+HHrH5avycM76KlgkKnMZJaJBr217OD3cAj0w
56Lq9MWLl6cYDh6lWAXXX/jig7vHmdlunu5xHw/4+ZrQNFaVKNWUCfFln+kspdbK
7jSMHufmtIJ1SA4romY+bBQiwFcRNpkl78oOYsTDlXbro2qS5lGNV1TaMXbo3uTo
yzABh7XW6BGthD6gl2CujhznrjmMfZnQ3j+1AkChkwLToG3dDfcQVASaBVCFAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUI1Bw/oBED54B8NQu+yO41icv0R4wHwYDVR0j
BBgwFoAUSt1UZnIwhEkO9JHGGbi8YaMoqLYwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC8wLzRBREQ1NDY2NzIzMDg0NDkwRUY0OTFDNjE5QjhCQzYxQTMyOEE4QjYuY3Js
MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9TdDFVWm5Jd2hFa085SkhHR2JpOFlhTW9x
TFkuY2VyMIGDBggrBgEFBQcBCwR3MHUwcwYIKwYBBQUHMAuGZ3JzeW5jOi8va3Jp
bGwuNDcyNzIubmV0L3JlcG8vSFlFSE9TVC8wLzMyMzAzMDMxM2EzNjM3NjMzYTY0
Mzg2MzNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIwMzQzNzMyMzczMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACABBnwNjDANBgkqhkiG9w0BAQsFAAOCAQEAMRXQkjuw4VODBra7F80I+aFU
fC41DjuXhEpaw5gqwZmW0+PbvEqm3SNDjnSCbdehtKDw10Ru7Ag+hC0J7NPdo8Ox
b3bzsfupCXXs+GqKYyh6eV0h6ZTm422oB/9Mn3bjnAah/Nnc7lsbg/1MyuizcI7n
qRtQbuie4ieC1JQxMyTHue6qBULeEyzKY0XLSdJjDGkTCNVmybRUpf4S5ZKRLS1u
P8+5iLflZfPYd609XnqtA4inBkxJBmoIRhipIuSnrXrO5GOR1R96Ry/7RhjvhreW
3pbzJL3Fb/ND/i0i8iqcHhRoTT72D0sejYpQk5LRJVkYO+DJiY6CGwbIW3prpQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:05:36 2026 by rpki-client