Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FE4DE58F36311EFBBF8055B762E951A.roa
File: 0FE4DE58F36311EFBBF8055B762E951A.roa (raw, json)
Hash identifier: PA7iufUJIbK1Aq2DCM4/wl/t12MfwMaL8/KOAahE7Y8=
Subject key identifier: A6:2B:F8:C5:4A:D9:4D:51:96:3D:5E:AF:8B:0F:A6:F0:5A:31:6F:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E20
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FE4DE58F36311EFBBF8055B762E951A.roa
Signing time: Tue 25 Feb 2025 10:27:07 +0000
ROA not before: Tue 25 Feb 2025 10:27:03 +0000
ROA not after: Wed 09 Apr 2025 10:27:03 +0000
asID: 63139
IP address blocks: 45.197.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77344 (0x12e20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 10:27:03 2025 GMT
Not After : Apr 9 10:27:03 2025 GMT
Subject: CN=67bd9afa-6069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:cb:d0:db:13:a1:5c:fb:a7:39:ca:e5:14:
a4:10:8f:f5:33:dd:1d:76:f4:3b:04:08:06:b9:d5:
cd:34:fb:75:43:af:47:70:9e:57:33:28:0d:01:66:
d2:c1:c7:4d:be:c2:91:19:6c:41:77:a3:ee:7f:b1:
4f:79:51:08:11:6f:0b:41:85:35:78:b4:25:09:64:
99:eb:d2:3b:f9:d6:e5:05:c4:5b:5b:54:80:05:f0:
05:17:35:45:22:56:0d:50:99:04:f6:39:43:c1:ec:
bb:dc:93:bf:b7:6b:f7:50:ff:ed:2f:78:6a:2d:27:
70:84:b3:f5:01:2e:52:8d:53:d3:a9:eb:e4:ea:8a:
d1:a7:d3:db:af:66:fe:d9:e4:f5:fd:91:d5:be:cd:
72:dd:d1:6f:1d:af:ec:76:65:5e:7a:07:cd:12:b8:
9a:d5:8e:8d:11:d9:37:4b:ff:06:c9:4d:41:50:55:
1b:4b:5e:e8:83:8b:f1:21:ab:7b:6a:d8:51:cb:fe:
89:42:36:65:8c:39:94:0b:7d:61:67:97:fc:f2:72:
6f:5f:77:93:c5:09:fc:53:c3:1c:5f:42:cc:7b:af:
57:2d:ea:68:70:c5:1d:d7:83:b1:7a:47:e5:ed:29:
2f:0b:80:b2:d5:c4:49:d3:70:af:9d:ba:14:5e:3b:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:F8:C5:4A:D9:4D:51:96:3D:5E:AF:8B:0F:A6:F0:5A:31:6F:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FE4DE58F36311EFBBF8055B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f9:bd:84:a4:c0:65:0a:2c:d9:91:d9:11:72:f3:25:12:38:
2f:0b:bc:55:6a:6b:23:b3:f3:6e:92:f8:d6:be:a6:a1:b7:90:
e9:d8:59:59:62:20:a4:74:55:8c:7f:3f:69:9f:48:2b:1b:28:
45:2b:02:46:f1:b8:94:b0:94:d7:2a:40:26:b6:95:0a:1f:81:
52:60:32:87:f2:a3:a3:ad:ff:57:9b:69:2e:ac:b5:f0:b5:f4:
75:68:1e:44:f3:1a:37:e9:08:38:05:bc:c7:53:f7:42:71:da:
84:70:5d:f3:97:3f:d8:3d:40:b1:f0:e7:4f:ce:3a:26:50:51:
b5:67:40:ae:af:18:71:31:38:63:f2:4a:54:c8:33:7b:8e:59:
56:c6:cd:a0:79:49:80:04:86:3c:ba:23:b3:0e:9c:ca:5f:57:
b8:0e:38:69:a4:51:7c:62:af:f1:2f:29:bb:17:b8:56:56:04:
24:e3:99:e7:54:e7:81:f1:34:06:70:5e:3c:1a:ec:9c:35:10:
d3:93:09:a5:32:d0:56:ce:f9:55:10:bf:17:08:44:3c:82:05:
a4:5a:0b:37:42:9f:df:95:ca:c0:53:d2:bb:35:bf:f4:66:95:
23:3f:8c:d9:4b:ec:73:c7:fc:0c:e7:66:f3:dc:4f:bd:e1:68:
05:36:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:56 2025 by rpki-client