Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19F6CD54F5D711EF928B8141762E951A.roa
File: 19F6CD54F5D711EF928B8141762E951A.roa (raw, json)
Hash identifier: v8iyJ9WiBM0GMkMAYa5PDixxlG2KENobpcYIaAE9IR0=
Subject key identifier: A2:E0:BF:C0:F8:51:BC:C5:7E:41:80:7D:1F:09:20:D9:39:B7:1D:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19F6CD54F5D711EF928B8141762E951A.roa
Signing time: Fri 28 Feb 2025 13:22:47 +0000
ROA not before: Fri 28 Feb 2025 13:22:44 +0000
ROA not after: Sun 30 Mar 2025 13:22:44 +0000
asID: 203020
IP address blocks: 45.198.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81379 (0x13de3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:22:44 2025 GMT
Not After : Mar 30 13:22:44 2025 GMT
Subject: CN=67c1b8a7-a9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:97:bb:a1:5f:9c:9d:fc:4d:bc:de:e0:8f:
93:21:0f:66:4c:37:53:5f:fb:43:2a:5e:f7:02:5e:
0c:48:db:0f:d7:d0:a1:3d:9c:ae:13:5a:df:e9:33:
f7:05:d3:c1:45:e5:b2:70:ea:38:72:83:48:af:c8:
d3:17:86:4a:0e:4a:bc:c3:a1:d6:ae:7c:11:bf:c2:
bf:3e:70:8f:83:95:bd:b1:cb:75:0d:9f:6e:b0:11:
b8:2c:a1:b4:4e:20:62:5f:bf:8a:0b:a7:70:34:57:
a6:01:17:49:0e:1e:04:47:11:f1:00:28:13:17:41:
98:36:e3:8c:69:02:76:89:e1:3a:14:c4:61:6d:70:
93:69:c1:91:11:0f:29:e3:55:35:cb:f3:f7:67:14:
df:d3:88:ef:3d:b5:d8:de:ce:fb:65:96:aa:ea:15:
b0:85:d0:d5:d9:cd:30:d7:85:00:01:3b:22:c4:76:
af:8e:1b:41:af:09:84:a6:fe:7c:a1:14:10:b1:36:
20:96:3f:c1:1c:9a:37:d8:24:39:0f:ec:dc:11:8c:
1d:3d:df:81:5b:97:be:fa:22:80:2c:f2:fb:2f:25:
2b:5d:9a:d8:67:14:21:17:e7:28:e3:43:b8:7f:91:
00:4b:79:ee:2e:29:d8:a6:67:e7:ed:06:c3:cf:78:
60:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:BF:C0:F8:51:BC:C5:7E:41:80:7D:1F:09:20:D9:39:B7:1D:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19F6CD54F5D711EF928B8141762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.40.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:d8:5a:d8:e6:ca:e3:2b:23:53:2c:50:8b:be:58:fd:7c:c6:
5a:50:3a:a8:26:0b:a5:a4:2b:0d:4f:16:a2:94:ae:cf:54:53:
79:39:5c:e8:7c:fc:90:ad:98:b0:94:28:f3:02:61:d2:32:b0:
5b:a6:c6:fb:ee:8c:92:91:ff:05:91:32:17:99:d8:23:fd:cf:
ec:d6:1c:5e:e6:5c:d2:dd:72:b3:83:74:53:0a:2c:f9:46:43:
ac:a6:e2:c5:7e:65:07:ea:22:88:23:08:e3:59:01:d4:96:2c:
68:ba:4f:75:70:c9:ce:6e:e8:d9:52:5f:f2:bb:75:af:5d:33:
bb:b4:4c:c8:8f:a2:07:f2:c7:b6:99:3c:c6:94:15:b8:97:62:
17:83:04:42:79:ef:6e:a4:15:37:35:c7:71:19:a5:b8:2c:4a:
3d:89:5b:8a:42:b3:2c:54:55:9e:23:da:50:36:67:23:ab:58:
d1:b2:d7:96:4f:e1:09:23:4e:12:60:f3:e3:df:a2:be:b3:7c:
be:de:e7:c3:fb:06:d8:c0:83:9a:a7:90:38:2d:8b:de:1f:34:
30:d2:8b:bc:60:72:3f:9a:ac:a2:48:a1:e4:1d:cc:1c:23:dc:
01:a1:b6:c1:a0:71:c5:ec:ff:ba:82:91:b9:2a:67:6c:f9:29:
64:d7:18:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:10:13 2025 by rpki-client