Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2973B484FB2E11EFBBD11E7E762E951A.roa
File: 2973B484FB2E11EFBBD11E7E762E951A.roa (raw, json)
Hash identifier: eDoST7hqcb/6yleA9rvbcpKjaUYAXJ8icGXr51yCcWo=
Subject key identifier: 33:B8:2B:4C:6B:05:31:72:12:28:4D:15:71:EF:A2:99:8A:C0:67:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2973B484FB2E11EFBBD11E7E762E951A.roa
Signing time: Fri 07 Mar 2025 08:28:35 +0000
ROA not before: Fri 07 Mar 2025 08:28:31 +0000
ROA not after: Thu 10 Apr 2025 08:28:31 +0000
asID: 214808
IP address blocks: 45.192.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82910 (0x143de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 08:28:31 2025 GMT
Not After : Apr 10 08:28:31 2025 GMT
Subject: CN=67caae33-c8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:01:16:68:9c:0b:29:ba:f9:a1:ed:fa:5e:
5a:78:73:e5:55:bf:43:0a:e1:0a:3a:da:57:c4:48:
df:05:1f:30:7e:8a:17:46:68:23:46:e6:3f:c8:89:
27:dd:4e:9f:2f:90:68:dc:f3:56:c6:94:ad:96:8b:
67:d4:b1:dc:54:7b:10:b2:25:45:89:42:a5:d4:8b:
e0:93:04:18:13:aa:05:84:57:3e:4d:fd:b0:c9:38:
c4:94:d6:84:88:c9:cc:ee:3a:c0:14:e4:0c:21:bf:
7b:6c:e5:cf:4f:27:8b:d6:e1:02:cb:05:83:e0:53:
2d:88:57:77:44:72:47:79:da:28:81:73:e2:9d:f8:
14:18:01:97:e7:32:96:f8:f1:d3:8a:64:af:c7:a8:
d3:74:ae:a7:47:13:25:ce:c8:e3:f4:4e:8d:76:5b:
cb:69:6c:7d:c4:21:76:fd:d2:44:7b:cb:59:86:c6:
e1:fa:27:90:a4:7f:33:a6:c4:3d:f5:e0:85:06:47:
5c:8b:1f:ce:72:1d:59:48:9c:a7:47:3c:d6:f6:89:
9a:27:4c:2d:bb:06:9e:84:26:a8:9b:56:40:90:ee:
fa:76:30:9f:43:ca:b4:83:99:fd:b6:37:4b:f0:fe:
ff:13:60:3c:3f:23:68:77:6d:e9:2c:c3:a8:80:93:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B8:2B:4C:6B:05:31:72:12:28:4D:15:71:EF:A2:99:8A:C0:67:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2973B484FB2E11EFBBD11E7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.242.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:f5:c1:f0:9d:c9:de:7f:9a:72:6d:76:f7:64:a7:1d:42:59:
80:5d:97:91:60:9e:9c:48:78:44:9c:c5:d9:3c:84:d6:d8:52:
0d:d9:52:c6:12:ef:1d:d4:0c:74:59:c5:72:ca:0a:c9:c1:14:
78:13:0c:cd:d9:7e:cc:c7:d7:39:8d:f1:06:d2:f7:a6:ce:3f:
5d:68:18:cc:d8:92:2a:2f:39:13:f1:4e:44:35:78:69:37:7d:
52:83:f0:5f:15:92:64:91:e1:7e:87:60:06:22:11:66:6d:d0:
e5:09:58:3e:78:18:8d:6f:e2:53:38:6f:d8:a7:67:e5:e6:6e:
dc:18:90:49:14:0e:d0:ee:e7:e4:5f:58:64:85:19:05:8e:3a:
45:3c:5a:43:61:24:12:b6:52:dd:d1:90:aa:5c:b1:e6:62:e1:
7a:97:06:aa:56:55:8d:2d:51:a8:5b:31:67:3e:34:6e:52:e0:
3c:aa:a5:cf:56:93:fc:ee:28:b2:13:4c:5b:2e:16:08:86:f8:
e6:93:23:37:0a:3e:bb:73:0c:3b:3a:f3:ca:90:ea:ed:7a:12:
53:a8:20:17:a2:41:1b:90:19:bd:d0:10:d3:ac:e4:ab:25:0c:
98:d9:23:a7:96:54:49:d3:c2:98:34:75:02:63:3e:ea:1e:81:
23:3a:80:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:58 2025 by rpki-client