Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0749E8ACF36211EF99FA1E54762E951A.roa
File: 0749E8ACF36211EF99FA1E54762E951A.roa (raw, json)
Hash identifier: pq9SzbZykeaIzukuiuofEvYK4R/kdu42ftFkW0sfUFI=
Subject key identifier: A2:39:50:DD:4D:80:2E:E5:BA:48:1A:A8:5E:08:1B:C9:6D:D8:AC:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E1A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0749E8ACF36211EF99FA1E54762E951A.roa
Signing time: Tue 25 Feb 2025 10:19:43 +0000
ROA not before: Tue 25 Feb 2025 10:19:39 +0000
ROA not after: Wed 09 Apr 2025 10:19:39 +0000
asID: 63139
IP address blocks: 45.197.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77338 (0x12e1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 10:19:39 2025 GMT
Not After : Apr 9 10:19:39 2025 GMT
Subject: CN=67bd993f-f40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:0b:f4:68:ad:d9:6d:ae:db:e9:ec:a0:ae:
08:fd:48:7c:f5:f1:ab:ce:b3:b7:4f:97:e5:57:54:
96:85:66:a6:81:60:39:d0:ec:a5:f4:c8:01:6c:72:
dd:d0:e7:fb:bb:4b:62:30:93:61:1c:09:92:cf:ca:
7a:05:84:70:f1:1a:71:04:d6:f9:39:ff:f0:b1:97:
9d:64:f6:d3:f0:c9:50:3d:ab:ec:a9:90:25:19:7f:
34:34:4f:46:da:07:b5:5d:69:83:19:f0:e0:79:2c:
16:6a:01:05:c5:f9:a9:c3:2e:3b:bf:7f:bb:db:ac:
21:3a:8f:a5:cc:c8:92:cf:9e:8e:8f:71:60:ec:fb:
0d:8f:3b:f9:4c:4c:0a:12:db:2b:53:4e:b7:d6:57:
f6:e7:c2:8f:fb:84:ec:62:64:22:c3:8d:72:82:c6:
8b:25:72:14:c4:5e:d1:ce:2d:9f:c0:eb:2f:ee:33:
97:47:9c:a6:c0:6d:3b:86:6b:8e:f9:98:a2:08:46:
47:03:75:48:63:a7:88:9b:ea:39:be:49:b6:d7:5d:
5d:76:d7:96:4f:48:a4:ff:37:1a:5c:c4:3d:38:24:
08:75:5e:a2:8c:b2:23:38:8a:a0:bc:53:2f:1f:ce:
f5:f4:19:63:25:d0:23:4a:46:7d:5a:d3:fa:26:83:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:39:50:DD:4D:80:2E:E5:BA:48:1A:A8:5E:08:1B:C9:6D:D8:AC:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0749E8ACF36211EF99FA1E54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
41:00:62:94:18:ca:08:43:4c:18:71:e7:93:04:72:bb:28:7a:
f4:c9:da:1a:bb:31:76:77:fd:71:de:fd:d8:7b:0a:08:54:0f:
38:8d:5c:cd:9f:2c:bc:78:75:9a:54:df:ac:39:df:24:79:a7:
fe:ac:50:00:71:dd:92:d5:80:6b:69:28:5a:c5:d6:4f:b1:b3:
1a:4a:8e:a8:f0:f6:d8:59:f1:f9:19:cc:06:97:06:36:f7:c5:
03:59:7a:59:79:bb:88:16:29:6d:34:3c:2f:f9:ba:52:c8:53:
f8:64:80:98:8f:dc:56:33:83:25:45:dc:c9:85:d7:f9:30:75:
48:98:08:8f:09:bf:10:c0:0e:a3:40:54:bd:ec:41:88:13:39:
d6:a3:4b:9b:76:8e:53:74:83:81:30:ed:c6:a3:96:e9:de:6c:
88:8f:2c:b1:a1:93:3c:e1:2e:63:d1:1f:6c:62:db:da:19:44:
c3:bc:83:49:24:5f:dd:d9:17:02:59:99:b1:e9:33:0b:95:93:
02:c2:35:36:8e:ad:df:af:63:07:1c:e5:a5:7a:e6:da:46:ee:
3d:26:2e:6a:9b:fc:4a:ba:57:04:b6:a3:32:38:4f:51:86:84:
3e:e4:0e:a3:5e:4d:34:b8:d6:54:d8:13:53:1c:2b:de:59:c4:
5b:d7:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:07 2025 by rpki-client