Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0028F6BCF5C411EFB329F1BA762E951A.roa
File: 0028F6BCF5C411EFB329F1BA762E951A.roa (raw, json)
Hash identifier: 6CbGLAhfCCwso81s8hT1cy8GO0Ajcj4DlZ2C4m2nfWE=
Subject key identifier: 10:20:65:39:61:B8:C4:B7:83:D6:F4:4E:78:2F:D6:B0:18:8A:28:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0028F6BCF5C411EFB329F1BA762E951A.roa
Signing time: Fri 28 Feb 2025 11:06:04 +0000
ROA not before: Fri 28 Feb 2025 11:06:00 +0000
ROA not after: Sun 30 Mar 2025 11:06:00 +0000
asID: 138995
IP address blocks: 45.192.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81187 (0x13d23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 11:06:00 2025 GMT
Not After : Mar 30 11:06:00 2025 GMT
Subject: CN=67c1989c-8c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:aa:5c:21:11:0d:ce:84:88:1b:0a:ea:b4:
e2:8c:29:e2:39:b1:54:14:07:0e:8a:8e:00:53:bc:
55:78:71:7e:ca:b0:60:67:5c:86:a3:7b:3a:87:e0:
99:5e:33:85:75:8f:5e:e2:6b:cd:c3:96:aa:b6:71:
20:62:de:50:5a:f6:b2:2b:8e:a7:6a:59:43:93:5a:
98:39:af:ac:a2:9c:70:87:b6:70:4c:2a:96:b6:c5:
73:27:ac:93:fd:ea:d7:96:0e:70:3f:90:00:ad:44:
9c:58:66:eb:e5:38:dc:0c:3b:f5:40:25:ba:d7:75:
42:42:9a:80:cf:f9:2e:7d:6f:4c:12:ff:e6:e8:e5:
a3:37:06:dc:a3:a6:6e:08:ac:76:89:5d:87:c2:d1:
93:07:0c:5c:98:70:15:33:eb:2c:cd:3d:1b:83:ca:
ca:bf:6d:a1:71:49:5b:8d:0e:fa:7c:e9:f3:14:70:
59:0c:da:0e:06:5c:18:7c:32:93:8c:02:c5:12:4c:
30:51:b8:be:2d:81:f9:ae:2f:3d:90:67:5f:fc:7e:
17:8c:57:86:9c:bb:21:a1:22:93:9a:68:49:f2:d1:
df:17:c3:e0:a6:7b:b6:ee:47:b1:8f:09:ab:d0:ef:
dd:fb:52:ae:8b:61:27:31:2b:cd:8b:13:6d:79:e8:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:65:39:61:B8:C4:B7:83:D6:F4:4E:78:2F:D6:B0:18:8A:28:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0028F6BCF5C411EFB329F1BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:89:fd:54:f2:b6:60:ed:66:97:ec:53:ef:3d:15:96:78:4e:
69:a5:45:6e:d2:de:61:d5:67:91:46:3c:2c:38:cd:e2:ff:09:
05:64:19:f0:21:73:de:ea:50:c6:4d:94:45:95:33:58:07:fd:
85:e8:6c:95:71:ae:5c:c0:01:88:a7:9a:87:93:51:a5:cb:68:
95:72:07:2b:0b:0a:34:6c:4e:6c:57:ed:67:36:eb:97:b7:cd:
80:7c:bb:75:82:cb:b8:be:89:00:05:17:38:46:a5:f8:c6:cd:
ef:41:7c:41:e1:6c:76:e5:71:c4:3a:9a:6a:eb:3b:8f:95:68:
6e:88:0e:18:ab:1f:e6:bb:cb:31:de:12:91:80:dc:b1:ea:54:
8d:90:6c:3a:7b:96:31:e2:d2:67:30:7e:4f:b0:a0:c0:e9:0a:
ec:70:8f:52:7e:7d:0a:24:a2:0d:b4:1d:ef:0e:a5:11:fa:2e:
ca:90:7e:0e:f0:6e:b8:cb:4a:4c:60:71:d6:d2:7f:72:bc:93:
67:9a:e3:d2:66:52:10:06:7d:72:c1:31:05:eb:0d:c2:15:9a:
c6:b3:68:39:8f:9f:01:c8:ac:44:53:b5:bb:91:42:a9:28:68:
c0:fe:2a:85:87:ee:ab:c2:56:26:a8:a1:48:93:0d:b6:1f:ca:
b5:fb:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:27 2025 by rpki-client