Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ED09ABEF36411EF900BE461762E951A.roa
File: 1ED09ABEF36411EF900BE461762E951A.roa (raw, json)
Hash identifier: 2IudxYeJhQiFDAzQQO/1ww290CQwM1aF0j++eoq7KMQ=
Subject key identifier: 57:A3:2E:1E:15:E4:93:A7:95:71:07:0D:D8:32:E5:46:D0:26:91:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ED09ABEF36411EF900BE461762E951A.roa
Signing time: Tue 25 Feb 2025 10:34:41 +0000
ROA not before: Tue 25 Feb 2025 10:34:37 +0000
ROA not after: Wed 09 Apr 2025 10:34:37 +0000
asID: 63139
IP address blocks: 45.197.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77350 (0x12e26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 10:34:37 2025 GMT
Not After : Apr 9 10:34:37 2025 GMT
Subject: CN=67bd9cc1-9211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:bd:36:0a:70:f3:e6:92:d6:8b:4b:94:67:
08:b9:fb:ee:13:7c:44:cd:91:0d:af:73:19:27:f2:
ae:1f:5d:c7:08:26:ad:b6:32:91:7f:ac:36:27:e0:
d7:c7:d0:8c:3c:90:19:99:dc:fa:63:84:f5:ee:f4:
c9:17:dd:80:2c:f3:36:56:d3:3a:b6:98:00:21:90:
0a:36:25:22:a1:f9:e1:aa:d2:7a:ee:81:ed:e8:33:
32:57:ed:a9:35:9b:e6:40:37:2a:0a:00:4a:32:42:
fd:14:d6:c6:53:a5:3f:ea:81:70:7b:6c:45:84:57:
60:ce:e6:e9:75:20:b7:66:9b:e1:60:03:51:cd:7f:
6d:0d:6c:60:05:ee:3d:1a:52:e6:4e:95:11:ee:d5:
3e:4e:ba:2d:45:18:73:99:5e:d5:55:aa:30:63:25:
43:77:02:b0:8c:6e:36:b7:32:1b:f1:6e:13:9e:3a:
b0:6b:e6:e7:ac:e6:31:b4:18:45:5d:bc:6b:c9:e2:
93:04:40:cf:a6:a3:c6:24:49:81:2c:66:ff:63:27:
15:d8:f0:8f:c7:34:22:d4:82:29:87:53:3d:26:11:
be:80:e1:28:33:69:48:f9:3d:e8:f5:b6:94:14:34:
1e:78:30:39:80:8b:87:3a:e6:46:42:55:e9:c5:0e:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A3:2E:1E:15:E4:93:A7:95:71:07:0D:D8:32:E5:46:D0:26:91:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ED09ABEF36411EF900BE461762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d8:72:5b:8e:8f:cb:43:26:fc:ec:93:c8:cf:2f:15:7d:74:
4b:93:c0:53:3d:4b:eb:c6:b2:22:f6:85:2a:53:75:79:5a:b1:
53:ae:04:1c:a3:0f:70:f3:90:0f:68:34:36:3e:a5:59:63:a3:
62:9e:c8:46:60:86:c1:02:a1:69:bc:8d:1c:a4:4a:59:16:51:
0e:84:7a:ee:5a:8d:e1:2b:79:c7:9c:f3:bd:f5:98:7f:02:84:
5a:8a:1e:98:2a:65:b4:9e:bc:97:55:58:19:a6:77:42:4a:fa:
66:3a:cd:63:88:33:b2:87:31:81:22:33:75:6c:43:30:9a:1e:
76:f4:74:ab:e7:97:ed:43:70:6b:3a:ab:04:68:5d:2c:68:d1:
00:7c:f6:c2:75:af:b9:71:db:e0:a5:c2:0b:7a:51:cb:aa:2a:
f5:59:c0:dd:ff:41:a1:33:96:8e:45:bd:52:da:65:79:af:5c:
88:43:b2:70:17:bd:99:39:cd:2f:ae:e1:e1:df:57:4b:35:e2:
a8:00:51:f2:4a:34:e7:78:39:b5:f2:57:2a:4e:9d:46:41:fd:
8e:55:81:58:aa:f4:66:0a:d1:9d:90:73:15:7e:8c:f9:f6:d5:
9d:23:b8:e2:30:11:c1:0a:55:2e:ac:e4:22:55:a4:e5:f0:93:
bd:11:0b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:30 2025 by rpki-client