Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04C6BCBEEC9011EFA37E3DB3762E951A.roa
File: 04C6BCBEEC9011EFA37E3DB3762E951A.roa (raw, json)
Hash identifier: AYSI+ruzJf0kkO3avioc8kXOBjbz4gOlp7/Ycu7YiiU=
Subject key identifier: B9:B2:6A:6C:F1:52:94:C8:32:E0:C7:F8:3E:87:39:2A:51:8C:AF:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012466
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04C6BCBEEC9011EFA37E3DB3762E951A.roa
Signing time: Sun 16 Feb 2025 18:01:17 +0000
ROA not before: Sun 16 Feb 2025 18:01:14 +0000
ROA not after: Fri 21 Jan 2028 18:01:14 +0000
asID: 17561
IP address blocks: 45.196.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74854 (0x12466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 16 18:01:14 2025 GMT
Not After : Jan 21 18:01:14 2028 GMT
Subject: CN=67b227ed-0607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:0d:26:35:33:61:b7:68:94:da:9f:23:ba:
b9:f3:da:49:50:cc:bf:96:37:c3:ba:19:9c:78:d4:
42:87:92:da:33:6a:24:4a:a2:51:86:bc:16:81:5b:
78:ed:fd:f5:6b:26:7e:cc:2e:e0:be:ec:73:e9:a9:
1a:f9:b7:c3:e5:9f:03:ef:81:16:4c:a0:d3:e0:8a:
09:ff:99:20:6f:3e:fe:2e:bd:22:81:83:fb:10:b1:
72:c2:3d:0c:fa:0d:df:65:e3:5c:ac:d1:09:b6:fe:
ac:18:ac:51:3b:d0:74:b6:4b:58:66:76:ba:71:eb:
34:f4:63:28:5b:06:67:54:d4:75:11:37:9c:e1:1b:
0c:89:20:9d:cc:37:76:05:c7:d9:9c:96:ef:12:95:
f1:86:a1:6f:09:4a:6a:59:16:65:94:3d:61:35:13:
91:fb:29:05:f2:94:0a:fe:ae:92:14:4d:1f:2a:68:
72:8a:20:86:b1:bb:f0:12:cc:52:2e:6d:28:64:e8:
ac:e3:60:97:f7:ce:72:7d:d7:9b:a7:06:46:a8:29:
4a:0d:38:bc:2a:ed:82:66:30:ab:f5:f7:cc:4d:e7:
e1:4e:82:f1:b9:cc:e8:45:ad:6c:78:aa:5e:ed:29:
9f:9c:88:e9:8d:6f:04:1f:fc:2e:84:23:8f:60:56:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B2:6A:6C:F1:52:94:C8:32:E0:C7:F8:3E:87:39:2A:51:8C:AF:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04C6BCBEEC9011EFA37E3DB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.89.0/24
Signature Algorithm: sha256WithRSAEncryption
82:dc:c5:54:28:3d:12:a2:11:89:68:57:41:2d:22:15:29:86:
0d:4c:db:ea:f4:47:13:90:9a:8f:fc:3b:e0:95:a1:15:1e:5c:
e4:3a:0c:4b:1b:72:b9:70:05:32:19:4c:bf:d8:8e:ec:94:4a:
ce:7a:a5:22:eb:11:a2:35:bd:4b:21:61:60:a1:0c:8c:cd:b2:
91:7b:e0:5c:48:4d:c1:db:e9:bc:00:43:3f:c7:e9:a3:a7:0e:
c3:6f:04:d8:71:72:a4:45:33:c0:ec:7f:4f:c0:86:9e:e4:2d:
1c:6a:24:ff:43:cd:7f:e6:9b:19:1f:f2:c5:e1:db:b8:39:08:
8e:30:11:11:51:d7:73:a8:72:9f:cd:7c:e4:10:01:a6:5c:3e:
52:3f:3f:6b:9d:62:65:7f:31:49:aa:a7:47:8d:18:26:88:2b:
11:e9:31:b2:5e:00:a9:c7:f2:85:5b:be:04:f7:15:f7:92:55:
41:50:a6:57:64:11:78:aa:f2:01:c7:4a:14:b4:09:ff:b0:9a:
1d:e9:9a:f0:52:9e:17:1d:73:6d:76:31:7b:76:37:5c:43:d2:
34:f1:a0:b3:3e:f7:dc:13:d2:46:a3:80:d3:35:bc:10:8f:00:
e7:8d:f6:27:fa:8f:90:44:a8:97:05:af:6e:d4:12:0e:91:9b:
98:bd:68:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:25 2025 by rpki-client