Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS47272.roa
File: AS47272.roa (raw, json)
Hash identifier: L6jLJRmoVj+Eg+ZR/6DJcmkb6AiqrIBXXBRnMvBCLM0=
Subject key identifier: 97:DF:38:AF:09:5A:1C:8C:E7:C0:4D:45:1A:9A:F3:45:C6:E6:F3:C5
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 34166F6DB0AA4F7A0B78AA000E0336633462D636
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS47272.roa
Signing time: Thu 23 Jan 2025 22:29:22 +0000
ROA not before: Thu 23 Jan 2025 22:24:22 +0000
ROA not after: Thu 22 Jan 2026 22:29:22 +0000
asID: 47272
IP address blocks: 118.91.184.0/23 maxlen: 24
195.184.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:16:6f:6d:b0:aa:4f:7a:0b:78:aa:00:0e:03:36:63:34:62:d6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 23 22:24:22 2025 GMT
Not After : Jan 22 22:29:22 2026 GMT
Subject: CN=97DF38AF095A1C8CE7C04D451A9AF345C6E6F3C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:7f:17:09:6f:b3:0f:cb:37:65:9e:f3:40:
e1:18:0e:92:41:d4:2f:6c:20:b1:21:07:41:0f:6e:
25:c6:87:93:c0:fd:55:98:98:d2:69:32:ce:de:14:
5a:7f:b6:76:f4:94:0a:6f:67:c8:ab:81:52:23:d2:
9b:0b:30:a3:dc:5b:9c:73:a7:64:a1:d7:10:d6:82:
38:aa:79:66:3a:b1:c0:e9:11:aa:9c:a7:93:6e:57:
b1:dc:17:4e:19:b6:c9:ca:3b:22:08:94:e2:9a:01:
17:5a:e2:44:36:6b:12:c8:dd:db:bd:dd:e5:2d:23:
71:32:7e:17:ec:e3:46:68:fa:20:47:d3:64:75:eb:
f5:7b:0d:5c:57:03:42:ca:25:9e:cd:02:35:47:2d:
9c:61:d5:ba:be:81:30:e3:f9:f9:f1:5c:9b:f8:69:
43:21:33:58:f1:1a:6c:19:9c:41:a8:d0:33:d0:60:
b2:3e:93:5d:1e:08:33:3f:39:d0:c7:44:29:d8:0f:
7a:43:29:dd:2b:c1:33:92:fa:30:4e:0c:ec:6d:31:
59:53:a4:ea:f4:49:27:87:ab:9a:c5:38:14:25:3d:
af:ff:8b:54:63:f3:39:e4:e0:cc:3c:33:2a:80:d2:
2e:a5:23:ce:25:86:a5:89:82:d4:ba:9e:98:54:7b:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DF:38:AF:09:5A:1C:8C:E7:C0:4D:45:1A:9A:F3:45:C6:E6:F3:C5
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS47272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.91.184.0/23
195.184.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:08:03:a6:64:cd:d3:4b:10:97:b1:5a:c7:ea:b0:b8:96:b0:
93:bb:0f:a9:77:88:a8:e3:d3:78:a3:a1:68:96:f6:56:a5:02:
f4:3c:0e:50:9b:2a:e1:30:fc:48:d0:9c:d5:1e:0a:ea:47:2f:
27:97:9d:5c:d5:d1:ba:7e:62:04:95:a4:6b:fe:80:61:16:0a:
7c:16:81:d6:97:a8:75:6a:6e:64:7d:04:38:38:4c:ec:8a:e4:
c1:92:48:df:97:46:b1:31:f5:65:b4:8e:7d:6e:70:19:64:c8:
19:c9:9a:5f:4f:08:aa:78:ee:08:20:08:1b:4d:22:93:b1:3f:
8d:ef:3c:f2:9e:27:bb:33:d0:63:67:a2:10:95:18:2f:69:7e:
d6:cf:a1:7f:69:7d:0a:b9:78:50:ad:c2:94:fd:1c:a5:86:a3:
30:36:6b:c0:27:50:70:15:de:da:f1:20:aa:1b:a8:c5:e9:d2:
db:60:eb:29:da:ae:a9:a7:70:bf:5a:0f:b6:13:53:45:cb:8b:
5f:91:01:f5:c2:07:72:09:e7:d8:c7:d9:65:b9:69:6e:60:f6:
83:1f:02:22:8b:17:16:bf:82:bb:5c:e8:e9:f8:bb:10:90:36:
6a:e9:17:59:03:47:3f:53:fc:ba:8f:09:94:47:48:e3:a4:60:
4e:0e:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:06:15 2025 by rpki-client