Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/314BB394F5C711EFB4E37053762E951A.roa
File: 314BB394F5C711EFB4E37053762E951A.roa (raw, json)
Hash identifier: 0nHdGUNKGtKEq1HEr/QPJ82PPO1clWbX1vDr7cqQC7U=
Subject key identifier: 7F:6E:E8:75:B8:9E:0D:36:B3:12:BA:C9:97:1C:32:5F:97:DD:51:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/314BB394F5C711EFB4E37053762E951A.roa
Signing time: Fri 28 Feb 2025 11:28:56 +0000
ROA not before: Fri 28 Feb 2025 11:28:37 +0000
ROA not after: Sun 30 Mar 2025 11:28:37 +0000
asID: 138995
IP address blocks: 45.192.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81201 (0x13d31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 11:28:37 2025 GMT
Not After : Mar 30 11:28:37 2025 GMT
Subject: CN=67c19df8-0f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:13:8b:12:e4:59:a4:81:5d:8c:a4:41:ad:
0a:a6:55:8b:46:75:74:c9:e6:12:20:82:22:5e:21:
80:c3:4c:33:9c:e4:ef:d2:dc:d5:a6:5e:46:38:ea:
74:fc:0b:71:53:c5:2f:a3:5d:5c:a2:ba:b7:a4:0d:
b3:62:8b:af:7b:b8:a1:a9:94:77:27:8d:84:70:3b:
76:f0:5a:4c:05:94:fd:05:85:32:39:27:96:87:36:
f8:fd:db:4f:d6:88:e4:b1:c5:38:92:10:15:b8:11:
7d:3a:cc:4a:46:68:6f:44:1b:85:58:34:dc:b4:d0:
83:6d:f6:72:6e:db:37:54:05:6f:d8:7a:35:77:d2:
ac:62:97:54:aa:62:f4:81:85:eb:5e:65:ef:d4:27:
94:71:66:a4:17:12:35:30:9e:22:ab:f9:cd:69:4c:
9c:f5:b6:d0:3d:be:2c:9d:86:52:27:cd:75:62:e3:
63:25:3b:25:02:26:4a:56:1e:58:54:76:60:22:4a:
8c:9f:6d:3a:fe:eb:31:4a:d9:bf:e8:48:bc:60:de:
ce:1d:8a:cf:72:19:cb:63:73:de:62:2b:9f:3c:e9:
78:9f:17:c8:92:30:ea:ff:6b:15:05:07:26:5a:b1:
6e:9b:26:ee:ac:dc:00:56:5f:07:fd:17:80:4b:9d:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6E:E8:75:B8:9E:0D:36:B3:12:BA:C9:97:1C:32:5F:97:DD:51:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/314BB394F5C711EFB4E37053762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5d:05:dc:78:5b:68:a0:6f:34:b5:18:e2:91:0e:18:ab:89:
7e:0e:23:4d:9a:b6:83:d4:5f:5e:02:1d:3b:f2:aa:fd:9a:f2:
7c:8a:20:28:91:fd:0b:f6:4b:ef:c6:1c:4b:c6:7f:80:62:00:
25:4c:f3:e8:26:b0:e3:33:5a:51:5a:73:ae:ec:f2:6f:f6:2f:
9c:8f:c4:a2:d5:b1:78:4b:03:27:68:23:29:27:1b:3d:37:45:
7c:5a:4a:41:c4:97:bc:de:4d:5e:05:5a:01:f7:8d:d1:f6:ed:
32:5c:f5:b0:b1:dd:58:fa:09:ae:b4:75:76:71:41:0b:d3:50:
34:a9:1b:32:30:b7:b1:80:24:8e:a4:66:1f:3b:11:05:98:39:
16:33:2e:42:45:72:a5:c6:b8:d3:1b:a8:05:cf:fd:67:ef:fb:
51:67:fc:28:43:19:1e:6e:bd:9e:36:5a:22:dc:24:5a:0b:45:
e2:83:6a:53:d9:ee:fc:81:d8:c3:93:fa:22:c4:9b:01:d4:0e:
54:8b:6a:b3:41:59:79:5f:dd:96:01:c9:3c:84:ae:8b:64:b2:
92:b5:c0:39:37:16:1b:18:8f:11:7b:ca:3d:4b:19:a6:10:f7:
94:3b:95:53:ae:af:f4:2d:c3:ad:d2:04:43:74:17:da:cd:fe:
c4:13:4e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:16 2025 by rpki-client