Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS216401.roa
File: AS216401.roa (raw, json)
Hash identifier: a8TX+/EGVkEBmBcUnF62UuXaRj/MVAhG5bSByqA9GB8=
Subject key identifier: EA:05:56:32:06:4F:38:55:11:BB:0B:CD:98:78:E8:56:08:A5:82:3C
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 25E3CBAFC9E0124309CA6F7F568C9E89A6CC53E1
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS216401.roa
Signing time: Sat 01 Nov 2025 23:11:09 +0000
ROA not before: Sat 01 Nov 2025 23:06:09 +0000
ROA not after: Sat 31 Oct 2026 23:11:09 +0000
asID: 216401
IP address blocks: 2a0a:6044:b500::/40 maxlen: 40
2a0a:6044:b500::/44 maxlen: 44
2a0a:6044:b510::/44 maxlen: 44
2a0a:6044:b520::/44 maxlen: 44
2a0a:6044:b530::/44 maxlen: 44
2a0a:6044:b540::/44 maxlen: 44
2a0a:6044:b550::/44 maxlen: 44
2a0a:6044:b560::/44 maxlen: 44
2a0a:6044:b570::/44 maxlen: 44
2a0a:6044:b580::/44 maxlen: 44
2a0a:6044:b590::/44 maxlen: 44
2a0a:6044:b5c0::/44 maxlen: 44
2a0a:6044:b5d0::/44 maxlen: 44
2a0a:6044:b5e0::/44 maxlen: 48
2a0a:6044:b5f0::/44 maxlen: 48
2a0f:6284:2000::/36 maxlen: 36
2a0f:6284:2000::/44 maxlen: 48
2a0f:6284:2010::/44 maxlen: 48
2a0f:6284:2020::/44 maxlen: 48
2a0f:6284:2030::/44 maxlen: 48
2a0f:6284:2040::/44 maxlen: 48
2a0f:6284:2050::/44 maxlen: 48
2a0f:6284:2060::/44 maxlen: 48
2a0f:6284:2070::/44 maxlen: 48
2a0f:6284:2080::/44 maxlen: 44
2a0f:6284:2090::/44 maxlen: 44
2a0f:6284:20a0::/44 maxlen: 44
2a0f:6284:20b0::/44 maxlen: 44
2a0f:6284:20c0::/44 maxlen: 44
2a0f:6284:20d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e3:cb:af:c9:e0:12:43:09:ca:6f:7f:56:8c:9e:89:a6:cc:53:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 1 23:06:09 2025 GMT
Not After : Oct 31 23:11:09 2026 GMT
Subject: CN=EA055632064F385511BB0BCD9878E85608A5823C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:3e:95:55:8e:9e:05:94:96:ca:32:47:63:
f4:72:94:45:56:16:f8:51:98:0b:c5:11:8a:9b:87:
6e:33:f6:d5:e7:1f:a7:7e:f2:4c:07:84:97:10:ce:
98:a3:35:4a:f5:35:c0:f5:90:6c:a7:fe:12:75:d3:
48:3f:9a:dc:88:68:c6:68:04:d9:bb:de:ae:a2:f2:
fd:82:f0:55:30:f9:37:9c:2f:21:62:39:30:cd:70:
7f:cc:e8:36:ce:fe:b4:a6:4c:39:e3:2c:cf:f7:2f:
6b:d5:9e:ab:a0:7f:18:5d:9d:c1:15:8b:a7:8c:9a:
8b:9a:ee:a8:34:10:bf:0a:29:77:4c:14:92:89:2e:
ce:cb:06:6b:ce:4a:eb:f7:9f:cf:9b:ea:e8:f6:65:
6d:2e:41:7a:98:40:97:f7:4e:70:56:5d:2f:c0:58:
4f:b8:84:55:9d:db:e6:92:a8:38:fc:42:11:8f:00:
8d:42:be:7f:bc:bb:bc:bb:a6:26:27:9f:88:7a:71:
6d:c9:60:9d:cf:f3:12:54:82:0f:14:6e:f8:c0:61:
02:9d:22:c6:af:68:43:0f:33:4a:0a:52:1b:03:08:
f1:1e:53:f3:88:c9:0b:bb:53:d1:4e:6e:ec:e5:9c:
b7:ec:2e:be:e0:8f:ed:da:c8:e0:77:6d:e2:6b:d2:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:05:56:32:06:4F:38:55:11:BB:0B:CD:98:78:E8:56:08:A5:82:3C
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS216401.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b500::/40
2a0f:6284:2000::/36
Signature Algorithm: sha256WithRSAEncryption
30:ed:76:87:80:06:f0:70:09:49:95:29:00:ae:9e:ed:77:a3:
33:d8:db:18:ac:a8:c4:2d:90:eb:9c:56:3d:56:76:38:ed:da:
0c:b8:ff:4c:0a:d3:2b:77:3a:06:de:be:a4:e9:a7:2e:db:26:
62:15:b9:7d:a4:4e:2a:20:01:00:7d:91:73:b6:b5:bb:4d:9d:
82:d1:b2:5c:d8:6d:c6:4d:35:94:84:aa:db:5c:25:53:e2:6a:
08:34:3b:c8:80:12:76:4b:0f:3b:64:8f:72:36:bd:34:d4:36:
e3:44:7f:06:e9:f5:d8:79:27:13:53:93:c4:ce:f4:20:bf:df:
fe:4e:a8:46:0e:b8:11:92:08:56:0b:25:f8:b3:e7:ea:6e:28:
94:88:45:73:3d:54:67:8b:db:98:36:90:4e:49:ca:36:99:53:
73:2e:61:4e:f8:a6:76:e2:66:e1:7a:56:15:f2:cf:45:21:54:
c1:00:c1:a0:ef:44:33:72:14:72:9b:59:4a:90:d5:d4:90:4b:
7b:50:9b:bd:67:21:d9:d2:c2:3c:f5:f2:b3:88:be:bd:cc:bc:
9b:5e:a6:12:7a:03:da:2e:f4:09:ee:f1:fe:14:be:5b:0d:8c:
4c:66:8a:f1:a4:ae:e0:59:42:5a:0f:bb:b1:53:2f:a0:dc:4c:
f0:6b:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:13:08 2025 by rpki-client