Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: 0wJmmtc18z/1E1hyXKRsRXLsPIlrR6DSLYUGIJZUmww=
Subject key identifier: A9:93:7D:49:3F:E9:85:A3:11:86:D5:6A:1D:8E:13:A5:75:81:CB:84
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 499DC6784593482F7EF00546D297970FD1F3B475
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa
Signing time: Wed 29 Oct 2025 14:57:17 +0000
ROA not before: Wed 29 Oct 2025 14:52:17 +0000
ROA not after: Wed 28 Oct 2026 14:57:17 +0000
asID: 14618
IP address blocks: 2a05:dfc3:f740::/44 maxlen: 44
2a05:dfc3:f750::/44 maxlen: 48
2a09:54c6:dfff::/48 maxlen: 48
2a0f:6284:41fe::/48 maxlen: 48
2a0f:6284:4c00::/44 maxlen: 48
2a0f:6284:4c50::/44 maxlen: 48
2a0f:6284:4c60::/44 maxlen: 48
2a0f:6284:4c80::/44 maxlen: 48
2a0f:6284:4c90::/44 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:9d:c6:78:45:93:48:2f:7e:f0:05:46:d2:97:97:0f:d1:f3:b4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Oct 29 14:52:17 2025 GMT
Not After : Oct 28 14:57:17 2026 GMT
Subject: CN=A9937D493FE985A31186D56A1D8E13A57581CB84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:24:72:83:aa:79:58:8c:35:b0:11:34:68:
85:b4:e7:38:aa:42:e8:b2:41:2c:7c:96:b1:54:d6:
73:a1:db:68:a7:ed:4f:04:35:c1:c0:ba:f5:21:43:
19:da:5d:2c:6c:4a:6e:e8:5d:cc:cc:5a:bb:c3:a8:
7e:c4:81:f7:c5:04:a2:cc:ea:a1:9a:28:fa:23:a1:
0b:19:50:0f:0c:75:46:49:70:f7:27:7d:57:cd:ea:
f4:f5:42:2c:3c:94:c7:4c:81:fd:a9:78:8d:1f:02:
ff:df:11:8b:bb:ea:99:50:cb:7a:fb:60:64:8a:78:
89:45:2e:45:e7:e5:fd:42:cf:0d:49:8b:67:5e:8b:
6c:03:cd:2c:cf:f6:31:ec:6b:4d:a5:c6:ff:a1:72:
f5:69:ba:53:e7:c4:8f:f4:48:aa:05:32:39:ef:8b:
a2:33:9f:6f:be:b2:97:82:6e:9e:34:80:25:a8:6c:
46:b6:be:4f:26:6a:20:98:4f:58:11:c8:48:0f:36:
e6:bf:59:e7:51:da:37:f0:15:54:39:c7:a2:a1:66:
e7:df:92:8c:7c:35:a1:47:fe:88:3c:df:75:04:9e:
e2:71:99:ba:6c:9d:e5:74:91:20:ff:a1:94:fa:e5:
be:71:6d:ef:95:05:84:67:06:b9:3d:07:93:b1:77:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:7D:49:3F:E9:85:A3:11:86:D5:6A:1D:8E:13:A5:75:81:CB:84
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f740::/43
2a09:54c6:dfff::/48
2a0f:6284:41fe::/48
2a0f:6284:4c00::/44
2a0f:6284:4c50::-2a0f:6284:4c6f:ffff:ffff:ffff:ffff:ffff
2a0f:6284:4c80::/43
Signature Algorithm: sha256WithRSAEncryption
3c:3e:53:28:4a:2c:eb:ce:bc:cb:74:f5:ff:e4:22:25:f3:a0:
d5:50:37:3f:83:14:c3:25:45:43:9f:b9:6a:b9:ae:df:eb:6f:
ec:ab:6c:b9:47:b3:a4:e6:55:52:c9:d9:c7:24:30:91:b2:e3:
90:64:e1:f7:b8:6c:48:c1:55:da:fe:aa:1a:01:0d:a1:a7:7f:
ef:59:d4:9c:aa:96:88:be:52:b9:d5:a9:2d:3d:2a:3f:6e:93:
ce:b7:63:cb:2a:eb:65:82:ac:9c:9a:3f:e7:96:75:d2:b0:0f:
a5:d8:ec:66:f1:4c:35:95:6c:6f:7b:2c:0d:f3:2c:d2:7d:77:
0c:0a:00:36:b9:b0:46:0b:ab:ce:92:ea:5a:82:a9:cb:35:77:
6a:e7:f9:ab:75:58:6e:3f:bb:bf:32:b4:20:de:1e:cb:56:67:
4c:63:f6:7b:1a:da:be:69:87:5e:c6:8c:a6:a2:43:6c:ac:e1:
7e:c6:6b:5b:0f:a4:33:51:6b:92:ee:ec:f1:05:49:2b:15:c7:
df:32:d7:9d:3a:b9:07:53:6d:36:a6:bd:7f:12:2e:0c:2a:7f:
ad:98:bb:c5:1d:da:e7:ff:76:11:09:89:26:d8:68:d1:3c:5c:
a8:ae:c8:3e:0a:33:64:e6:74:7a:c9:e6:45:b0:ea:41:40:46:
86:45:2b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:53:11 2025 by rpki-client