Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3881BDC0F38D11EFAE196C74762E951A.roa
File: 3881BDC0F38D11EFAE196C74762E951A.roa (raw, json)
Hash identifier: 5+6QKS61zFt0CGLdlxsCa1Z8/uUwO7SqdBdqyQbh1u0=
Subject key identifier: 2C:0A:34:0D:66:E9:8C:9F:D8:4A:FA:60:0D:B2:6A:41:99:66:E8:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E62
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3881BDC0F38D11EFAE196C74762E951A.roa
Signing time: Tue 25 Feb 2025 15:28:53 +0000
ROA not before: Tue 25 Feb 2025 15:28:50 +0000
ROA not after: Wed 09 Apr 2025 15:28:50 +0000
asID: 63139
IP address blocks: 45.197.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77410 (0x12e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 15:28:50 2025 GMT
Not After : Apr 9 15:28:50 2025 GMT
Subject: CN=67bde1b5-86ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:17:19:34:ff:c4:b4:54:6e:bf:9b:37:35:
3b:e6:3a:16:b7:19:2a:b6:df:94:33:29:e7:87:76:
c5:91:b7:c0:a2:80:3f:20:80:e4:c4:72:02:6f:2f:
30:7d:97:f2:6f:a4:09:32:8e:d0:1a:02:48:ff:b6:
2b:df:7c:de:1c:5c:23:b5:f8:da:e5:dc:4d:f9:11:
07:65:cf:1b:97:f6:48:9c:79:d3:c2:79:4d:e1:b6:
1b:ea:31:b1:70:14:d8:79:f0:c1:b5:39:fc:74:80:
fd:ec:24:1a:64:73:71:cb:b7:6a:e4:dd:92:44:2b:
d4:d9:93:3f:10:f9:e3:02:23:8f:42:d4:c8:46:62:
33:9b:06:e9:01:04:00:09:d1:47:2e:ca:a4:38:82:
c1:1e:29:e3:58:9f:82:1d:84:69:0a:df:d4:e6:ed:
95:98:be:bc:21:a8:8b:ac:b8:a1:fd:ed:43:ae:e2:
a8:37:a3:9b:11:03:39:e3:07:87:89:3b:7e:b8:82:
c9:f8:25:4c:f2:40:6e:d4:5a:c6:fe:95:43:4e:af:
32:e2:23:0a:cd:f7:2e:8d:80:5f:8d:2f:66:4a:17:
96:99:43:5d:8b:40:ae:43:37:31:d4:16:6f:b8:3d:
35:5f:ae:9c:d7:5a:5c:16:f4:e7:66:6d:6b:44:75:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0A:34:0D:66:E9:8C:9F:D8:4A:FA:60:0D:B2:6A:41:99:66:E8:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3881BDC0F38D11EFAE196C74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.97.0/24
Signature Algorithm: sha256WithRSAEncryption
13:34:6b:71:6c:c0:f7:e9:13:58:7c:73:b4:ef:84:ef:20:77:
de:9a:66:df:a6:01:10:bb:1d:7b:ad:54:d7:c4:0d:9a:46:40:
52:84:1b:5c:5b:ad:0b:9e:c8:f0:4e:71:1f:21:5f:6f:30:60:
1d:21:6f:0b:d7:32:3d:cf:5b:83:53:d9:4f:f0:52:b3:9f:5e:
dc:02:c1:c2:15:ed:c7:39:1c:7a:cc:be:3e:b8:15:60:00:c1:
f2:c2:11:6e:c5:f3:fb:50:8d:ef:25:ac:d1:f7:1d:4c:e4:37:
d6:4e:96:05:98:8e:39:ce:3e:f0:51:45:3e:59:71:f2:69:c4:
73:a6:14:9a:4d:e3:cc:42:8c:77:47:30:b0:e1:2b:f6:c9:52:
ee:4d:37:ef:99:6e:50:7e:da:36:e9:dc:24:80:a8:21:34:f7:
1c:e5:30:8a:54:0d:2b:0d:58:2f:be:35:b4:d2:5d:b0:9a:b6:
b1:b1:71:3d:5f:00:19:39:af:7a:08:0c:c2:b1:28:c3:35:84:
66:0f:3f:24:ee:5c:e9:7d:46:a8:5f:cd:35:d9:12:6a:24:ce:
ef:0b:89:42:3d:54:ca:44:b1:e4:68:8e:e7:da:ce:ff:83:5d:
3e:6c:69:fb:a0:89:73:af:8a:63:4d:72:e3:85:ba:f4:6b:e7:
4a:d8:53:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:01 2025 by rpki-client