Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS47272.roa
File: AS47272.roa (raw, json)
Hash identifier: WbC7dZQ2z48kLJF/KHT1vjecgdCx72QdHzkLSOub+bo=
Subject key identifier: 49:3C:59:9A:90:7C:96:92:4B:EB:BF:DB:2B:46:7D:A4:13:04:15:E5
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 7718ECD69D008CB1F09ED03551E0CDDC5AE3407C
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
Signing time: Mon 29 Jun 2026 11:10:39 +0000
ROA not before: Mon 29 Jun 2026 11:05:39 +0000
ROA not after: Mon 28 Jun 2027 11:10:39 +0000
asID: 47272
IP address blocks: 199.47.240.0/24 maxlen: 32
2a06:1281:40::/44 maxlen: 44
2a06:1281:1000::/36 maxlen: 36
2a0f:6280:a::/48 maxlen: 48
2a0f:6280:13::/48 maxlen: 48
2a0f:6280:15::/48 maxlen: 48
2a0f:6280:18::/48 maxlen: 48
2a0f:6280:1d::/48 maxlen: 48
2a0f:6280:1f::/48 maxlen: 48
2a0f:6280:1300::/40 maxlen: 48
2a0f:6283:1130::/44 maxlen: 44
2a0f:6283:1140::/44 maxlen: 44
2a0f:6283:1150::/44 maxlen: 44
2a0f:6284:20::/44 maxlen: 44
2a0f:6284:4700::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:18:ec:d6:9d:00:8c:b1:f0:9e:d0:35:51:e0:cd:dc:5a:e3:40:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jun 29 11:05:39 2026 GMT
Not After : Jun 28 11:10:39 2027 GMT
Subject: CN=493C599A907C96924BEBBFDB2B467DA4130415E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:70:f8:08:66:f7:f8:ab:b9:59:f8:48:36:
ec:77:70:50:83:e5:4c:d5:16:15:43:00:e6:b3:12:
c7:ee:41:41:31:06:91:a4:98:ee:22:fc:b1:7c:74:
fa:2f:0c:80:b1:63:f0:02:67:34:1b:ee:29:6c:35:
bb:cf:0c:d0:5e:4c:55:19:35:1a:96:4f:6b:0d:7c:
3a:aa:fd:65:6d:18:70:55:a5:39:fa:7e:d0:44:2e:
35:80:a6:50:7c:75:90:99:28:ba:bb:30:9e:cc:f5:
16:54:da:66:e1:3e:77:09:b4:a6:b8:df:b3:06:b5:
1c:a4:fe:94:3f:5d:46:30:f4:42:da:f9:eb:25:c6:
55:54:c3:ae:cb:b7:a5:30:2c:6e:05:fe:b2:6b:71:
61:f2:b1:85:66:87:a3:10:a9:d1:12:42:a9:17:a0:
c8:ba:cf:c6:5c:97:d4:6b:66:ef:dd:53:fe:ae:2a:
44:86:96:e1:16:cb:0b:fc:05:c4:a2:69:5d:12:ac:
25:a9:cf:1f:6a:29:d2:c5:cb:24:27:e0:9a:95:eb:
f6:01:19:d7:57:fb:6d:88:b8:39:58:06:b4:9e:dd:
87:14:01:71:c0:66:3a:4f:68:a6:28:60:f3:e7:3b:
07:e9:5d:24:de:c5:86:e6:bc:b9:45:f3:6c:fa:33:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3C:59:9A:90:7C:96:92:4B:EB:BF:DB:2B:46:7D:A4:13:04:15:E5
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.47.240.0/24
IPv6:
2a06:1281:40::/44
2a06:1281:1000::/36
2a0f:6280:a::/48
2a0f:6280:13::/48
2a0f:6280:15::/48
2a0f:6280:18::/48
2a0f:6280:1d::/48
2a0f:6280:1f::/48
2a0f:6280:1300::/40
2a0f:6283:1130::-2a0f:6283:115f:ffff:ffff:ffff:ffff:ffff
2a0f:6284:20::/44
2a0f:6284:4700::/40
Signature Algorithm: sha256WithRSAEncryption
06:2a:2b:c4:e5:0c:58:c3:0d:7c:95:0e:e0:b7:34:7e:96:20:
1a:45:a1:e0:7d:4e:13:4b:79:b9:56:d2:27:85:40:c1:b0:20:
81:84:94:45:50:bb:3f:4c:a8:f3:08:36:5c:89:12:f4:a1:c3:
12:35:4e:be:f1:05:01:71:48:cd:d3:d6:22:da:a4:13:78:97:
94:ea:af:34:d7:2a:3c:10:02:9d:b1:32:14:05:19:6f:b2:1b:
28:39:09:07:c2:ac:d2:cf:6a:7f:1a:35:6f:c4:ef:6a:a6:13:
3e:36:60:c7:1b:32:33:fb:34:81:39:29:cc:de:6c:81:c9:7d:
d5:41:34:8b:69:c4:22:66:70:b9:95:c0:36:f4:6a:54:b3:44:
3a:c8:40:1d:d7:2a:9f:74:ac:96:a1:f0:84:c2:29:60:d1:12:
b3:a7:74:bf:66:9a:c9:80:e0:14:7c:fe:6e:bf:c6:2a:44:ed:
55:94:b1:72:ca:ef:7f:15:66:28:59:02:2b:77:ac:34:54:bf:
b0:b5:1e:f7:40:bd:97:f5:22:c8:ec:fe:c6:ba:1f:9a:7e:2c:
ef:68:b7:4f:9e:20:56:2f:87:ca:a3:8f:0a:35:0a:3b:c6:46:
7d:af:9e:01:a7:d0:2a:15:23:6c:40:72:52:10:96:b6:cd:21:
b0:58:32:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 05:51:05 2026 by rpki-client