Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3227FF94FB2F11EFB1B53A83762E951A.roa
File: 3227FF94FB2F11EFB1B53A83762E951A.roa (raw, json)
Hash identifier: B6Y5HTBfl2gyZuo8opnufaZdgecp6qv9ncvbexNX7kI=
Subject key identifier: 00:3B:83:53:E5:8E:2B:A3:8D:D6:57:F8:16:75:D2:D8:80:73:A3:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3227FF94FB2F11EFB1B53A83762E951A.roa
Signing time: Fri 07 Mar 2025 08:36:00 +0000
ROA not before: Fri 07 Mar 2025 08:35:56 +0000
ROA not after: Sat 12 Apr 2025 08:35:56 +0000
asID: 395886
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82916 (0x143e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 08:35:56 2025 GMT
Not After : Apr 12 08:35:56 2025 GMT
Subject: CN=67caafef-8879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:98:59:79:3e:4c:c5:c1:2a:4e:cf:04:1f:
9f:49:ac:48:8a:a0:ea:61:cd:2c:23:cb:a6:53:8a:
23:33:c4:c1:38:28:ae:58:96:f0:de:b7:de:71:cf:
20:12:86:60:87:98:7e:b8:72:80:7f:c7:24:ec:7c:
d5:fc:75:c7:4f:11:d7:14:db:2f:f4:aa:d3:bf:72:
ef:74:97:7f:64:ca:7d:63:26:c3:dc:f8:d6:1c:a3:
75:1a:e0:6a:a4:7c:50:ca:23:28:11:e6:04:8a:ea:
7b:7b:99:2e:bc:b3:6b:fd:39:59:5e:ab:8f:28:ed:
27:9e:a4:6e:f3:c9:86:17:08:48:db:7d:11:09:6e:
c0:15:2a:00:0d:9e:8a:30:a1:95:ea:93:d0:d6:18:
8e:ce:e1:4e:1b:c1:70:2f:78:e4:3e:91:39:55:f9:
0e:d4:1d:2c:09:45:e2:0c:bf:fa:50:7c:ad:fe:b0:
89:f3:2f:0f:b5:95:15:34:18:5d:45:8c:bc:39:ac:
2b:b6:83:83:2e:3f:f6:ed:40:4e:82:6f:94:9f:fe:
32:28:a2:3d:4f:1b:eb:66:38:65:93:22:70:e2:b1:
35:d7:98:43:b1:0e:24:6b:a6:eb:76:1c:8a:fb:ee:
63:f5:f8:ee:f2:42:98:64:12:6c:94:85:ec:8e:68:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:83:53:E5:8E:2B:A3:8D:D6:57:F8:16:75:D2:D8:80:73:A3:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3227FF94FB2F11EFB1B53A83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
32:3d:43:9a:94:f2:1e:b9:a3:1a:68:f3:ee:ca:2c:1f:99:18:
41:09:62:43:e0:42:65:b5:e3:f0:48:09:45:dc:b9:2f:4a:db:
9d:2c:67:67:72:f6:9e:ef:86:1b:d0:b7:b6:73:09:c6:cb:05:
2b:96:20:0c:42:4b:f4:68:9f:ca:a1:c4:65:91:1e:72:b4:58:
11:0b:21:d1:5b:e1:c0:a7:09:f4:a7:7d:77:de:0a:92:0a:ae:
fe:d8:84:d9:b8:30:d1:2e:76:11:dc:94:9b:ed:67:d8:71:a2:
0f:80:9f:24:78:22:7d:b2:22:09:d5:8d:3d:26:92:0c:c5:ff:
69:e1:30:89:6b:4a:eb:64:1d:5f:21:d6:01:e6:3b:f8:d0:ac:
91:17:ca:56:56:06:09:29:a2:05:dc:17:86:23:3a:64:b5:10:
b2:77:32:fc:a5:26:e0:ae:3e:b0:56:b4:9a:d0:5f:91:70:5d:
44:df:f7:90:07:36:62:43:f1:71:2d:1b:ac:2f:8f:a4:09:6e:
52:1f:60:c9:38:7a:ba:63:e1:cc:89:7a:d0:7e:b0:c9:a5:94:
da:5c:71:36:a3:b9:25:ec:aa:bc:20:75:8e:14:a4:d2:e7:34:
d7:2a:f4:c8:67:3e:0c:f6:fd:ef:68:e5:05:a7:54:25:9d:f5:
17:4c:8a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:36 2025 by rpki-client