Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35AEEFBEF43C11EFADE2F7A9762E951A.roa
File: 35AEEFBEF43C11EFADE2F7A9762E951A.roa (raw, json)
Hash identifier: znrc1yL/aM1quOpZjTQvAcUvj5PF6yEtZ/3/fNwF/wI=
Subject key identifier: FD:97:96:31:CF:33:A9:AA:BA:B5:7C:18:72:EA:76:CE:E6:CB:EE:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01325C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35AEEFBEF43C11EFADE2F7A9762E951A.roa
Signing time: Wed 26 Feb 2025 12:21:31 +0000
ROA not before: Wed 26 Feb 2025 12:21:27 +0000
ROA not after: Sat 19 Feb 2028 12:21:27 +0000
asID: 17561
IP address blocks: 45.198.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78428 (0x1325c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:21:27 2025 GMT
Not After : Feb 19 12:21:27 2028 GMT
Subject: CN=67bf074b-68f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:1f:03:b2:8b:70:91:eb:ac:e0:2e:26:41:
96:e4:46:24:69:00:bc:bb:f4:f5:69:5e:7e:67:55:
73:d1:d4:48:48:f7:f5:96:a7:46:a0:68:99:e8:be:
b6:d2:70:b5:4b:07:2d:b4:37:87:42:ef:57:2f:e1:
3a:6d:23:0e:e9:a8:b3:31:fd:92:05:65:0a:60:4b:
b4:a0:9c:9e:a7:20:0f:e9:63:c2:55:54:b3:6d:0a:
d8:08:b6:53:6a:bf:87:63:90:31:1e:c8:72:17:c8:
58:28:7a:5b:b4:02:17:26:31:b8:30:45:87:dc:24:
bc:0b:e0:61:13:8c:30:15:81:48:e6:9a:30:c5:ef:
79:b1:14:74:41:33:0f:9b:07:f2:4f:48:2d:dd:51:
cd:df:36:7a:f7:c7:9f:ca:ac:11:63:8f:6c:e7:a5:
65:52:70:fc:c0:0f:d4:bc:ae:35:f6:41:7d:cc:e7:
56:e6:71:89:31:45:88:9b:b9:b4:21:a8:fd:f5:01:
ab:77:ee:b6:30:60:28:73:f8:ea:a6:3a:83:04:17:
1d:e5:a1:b7:fe:b4:a1:d4:3b:8f:a1:10:81:e6:6b:
eb:be:9b:a7:4e:82:4c:c6:44:fe:88:dc:ac:97:64:
7e:b7:39:71:9a:2d:3c:c8:0a:ad:76:6f:ef:e7:3d:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:97:96:31:CF:33:A9:AA:BA:B5:7C:18:72:EA:76:CE:E6:CB:EE:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35AEEFBEF43C11EFADE2F7A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.31.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1e:94:4b:09:5c:0a:ab:1e:55:10:d3:ff:0b:23:a7:7a:e0:
9a:2b:86:36:17:eb:e2:d5:8e:95:4f:60:c2:10:41:ab:3b:0b:
f4:36:87:c5:2c:72:3f:19:a5:ba:36:03:45:e9:75:a8:c9:d1:
b3:e1:12:15:f0:21:88:26:d6:79:80:9d:c7:c0:59:42:26:b0:
af:f9:5f:85:48:eb:9b:bc:a4:f0:12:c9:52:d2:0c:84:8e:12:
f7:13:88:23:5a:db:7a:23:d9:75:d9:49:31:77:36:30:7f:cf:
b3:c4:3c:7d:80:05:63:6d:2f:18:ce:84:b1:a5:40:be:e0:d8:
60:12:0a:01:10:43:23:da:b3:92:5a:53:d8:bd:e5:3a:bc:75:
2e:c3:a5:24:0c:88:42:5b:70:31:d0:cf:7f:76:c4:b1:01:c0:
ef:d7:cb:a6:f0:a3:c2:f1:be:36:d6:43:b4:84:81:b3:39:c6:
08:62:66:66:74:47:04:03:4b:b7:b3:02:35:9a:21:25:31:f2:
1b:97:71:06:30:75:64:03:85:44:a8:b6:3d:70:f5:96:c6:45:
06:fb:24:ef:19:af:29:fa:b0:e6:bc:b4:84:2b:a7:d6:6b:ed:
86:4b:5a:06:82:cf:69:5e:69:a6:d9:b8:9b:76:03:96:e7:f2:
b6:0d:d0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:57 2025 by rpki-client