Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A72ED4E017C11F0B28B137F762E951A.roa
File: 0A72ED4E017C11F0B28B137F762E951A.roa (raw, json)
Hash identifier: 8+nySOl/8C26S5/A7H8NVS3E6SD8nRYSwZDrW+h9uSU=
Subject key identifier: 82:3D:81:C4:8A:7C:6C:DB:E2:6C:EE:25:9A:C8:FF:5E:D5:8F:81:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014628
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A72ED4E017C11F0B28B137F762E951A.roa
Signing time: Sat 15 Mar 2025 09:01:11 +0000
ROA not before: Sat 15 Mar 2025 09:01:07 +0000
ROA not after: Mon 21 Apr 2025 09:01:07 +0000
asID: 23470
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83496 (0x14628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 15 09:01:07 2025 GMT
Not After : Apr 21 09:01:07 2025 GMT
Subject: CN=67d541d7-d4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:13:c1:24:25:f7:98:04:75:23:4a:04:05:
40:d4:18:fc:bc:bb:1d:dc:26:b2:73:b8:22:b6:75:
c3:31:b9:7d:ce:f5:83:e5:ce:2b:8e:7d:81:a1:d5:
e6:67:72:c7:4a:80:10:83:1d:04:06:f3:89:f6:36:
15:60:5f:7f:5b:9a:fa:f3:9e:9b:52:28:77:7a:f3:
12:e3:9b:de:71:20:72:60:e1:7e:b6:0a:74:37:72:
ae:62:19:67:2e:d3:eb:77:27:8d:5c:6a:aa:ae:f3:
48:8c:c6:64:eb:04:43:d4:6d:1a:28:62:e1:4e:31:
c9:4b:d8:51:85:db:0a:07:55:4e:33:4d:ec:8b:ec:
5b:5d:b4:bb:14:ec:71:67:14:51:d6:72:05:9d:1a:
e0:e9:2e:db:e0:93:8b:5d:1c:bd:b6:84:d9:66:37:
4e:19:8c:e1:01:ff:bd:43:52:70:c5:75:69:c6:3c:
42:a4:bb:6c:33:10:fa:c8:29:8a:79:2e:63:b0:16:
cb:71:33:d3:51:4b:7c:c4:00:fc:cb:79:ed:b2:ae:
dd:3d:b3:ad:90:de:32:4d:01:1b:5e:9d:ef:14:f5:
3a:03:bc:50:89:62:99:e5:5a:2f:4d:d5:a7:dc:db:
b3:eb:8c:9f:44:70:34:18:d3:6b:d0:ea:9a:49:82:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3D:81:C4:8A:7C:6C:DB:E2:6C:EE:25:9A:C8:FF:5E:D5:8F:81:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A72ED4E017C11F0B28B137F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e7:aa:06:63:53:ff:77:e0:38:c8:78:7f:98:39:a0:fa:01:
c9:0e:fd:f4:a8:69:b4:77:bd:55:dc:cc:35:2b:0d:97:1a:c0:
59:f4:a6:0a:fe:62:cd:a6:1a:55:6e:9d:c7:b7:cc:a8:e5:b0:
1e:ab:ae:a6:6b:f1:18:39:7e:da:56:42:a9:68:bc:d9:df:33:
8c:e5:59:b2:4a:4d:56:10:d7:ef:17:ca:a3:12:5d:87:0e:54:
5b:71:0d:45:72:6c:79:12:aa:05:44:1e:15:16:e1:a6:1a:20:
04:38:71:82:50:30:6a:a8:7e:a8:d3:62:cd:08:4a:0c:e8:45:
25:f7:3e:3b:f7:b0:9f:7b:99:eb:30:38:5f:d0:12:54:5c:92:
b3:98:8c:24:6d:4f:9c:00:0d:69:47:a4:fa:fb:a2:ce:1f:5b:
69:20:10:c7:22:58:75:8b:50:4c:d2:f2:1f:cd:8e:a2:65:f9:
79:90:a6:7b:56:8d:0d:29:3f:ef:e4:8f:47:b9:e4:70:41:49:
60:b7:ec:44:a6:94:ea:a8:69:f8:d7:fa:db:31:f5:01:d7:ed:
c5:05:ce:70:5f:e5:4a:b0:7f:ec:a7:c7:0a:08:a8:d4:dc:98:
26:5f:d0:9d:71:ca:f9:a5:69:54:9a:71:b9:9d:4b:65:c7:c5:
23:41:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:22 2025 by rpki-client