Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39B84422F43A11EFB3A5509D762E951A.roa
File: 39B84422F43A11EFB3A5509D762E951A.roa (raw, json)
Hash identifier: 6S7Nd7J7BmqVc6ZSq6q4YRlfka2fQMDb6ZlefpnZX7k=
Subject key identifier: EF:EB:03:C8:6D:6F:42:BD:22:5C:46:B0:0F:7F:79:08:58:F3:0E:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01322B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39B84422F43A11EFB3A5509D762E951A.roa
Signing time: Wed 26 Feb 2025 12:07:18 +0000
ROA not before: Wed 26 Feb 2025 12:07:15 +0000
ROA not after: Sat 19 Feb 2028 12:07:15 +0000
asID: 17561
IP address blocks: 45.198.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78379 (0x1322b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:07:15 2025 GMT
Not After : Feb 19 12:07:15 2028 GMT
Subject: CN=67bf03f6-64de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:89:57:a3:52:a6:30:b0:f7:43:1f:d0:f5:
60:2b:41:7b:34:0f:c9:0e:14:01:24:d1:62:61:ad:
a1:ff:08:ac:1d:f1:db:c4:37:ac:4f:eb:6c:06:40:
b6:3b:19:70:c1:80:cb:b0:ad:a3:88:27:95:42:b4:
99:5f:e1:45:0c:be:3c:d4:10:ff:30:ef:67:b6:f4:
15:34:10:ad:09:ad:51:f0:bc:02:c1:77:e7:17:b0:
51:ab:a8:49:53:98:0f:86:1c:a9:bc:d0:a7:f3:a2:
06:d5:a7:76:60:83:c5:cf:1e:33:28:d8:0b:df:37:
cc:06:9d:9f:5f:d0:62:a3:0a:bf:d2:08:e7:cd:08:
1d:4a:8f:e1:76:82:c1:4a:94:be:0b:a6:0f:eb:8d:
a0:37:51:1b:b3:b3:f8:7f:d2:d4:6d:04:07:f1:da:
61:2f:ce:ba:8d:94:5f:2c:5e:d5:d6:9e:0b:3c:bf:
c4:2f:16:7a:48:b5:7d:7a:b9:10:d1:3b:01:d5:28:
6b:8d:2b:ab:05:48:e5:35:a3:e1:af:7c:e3:15:44:
57:03:85:f3:a0:b0:8d:7d:71:65:4a:75:4b:08:db:
f3:9a:99:9d:60:46:d1:89:79:01:7a:6e:73:b2:aa:
29:3a:36:3b:f7:0d:52:95:24:ea:1a:14:18:a5:45:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EB:03:C8:6D:6F:42:BD:22:5C:46:B0:0F:7F:79:08:58:F3:0E:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39B84422F43A11EFB3A5509D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.9.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f9:c2:c0:79:ec:d1:a5:20:aa:6e:57:1c:03:12:56:fc:28:
a5:f4:f9:3f:b1:43:e6:ac:54:27:8f:9b:21:25:6c:4b:c7:e1:
40:7d:64:c1:a9:50:f4:4c:db:db:f5:3a:f2:1b:cb:2d:d3:ab:
ff:c5:27:11:e3:70:e5:b3:aa:b6:4e:7d:68:49:0c:7d:02:2f:
9f:8e:11:c0:73:d6:90:0c:2c:e3:e2:ba:1d:0b:40:76:b9:9d:
b6:d3:f6:22:8f:08:d2:69:62:ba:59:22:3e:0b:6c:8d:49:77:
69:4c:53:07:fb:6f:a9:2f:51:77:5a:31:c1:67:5f:97:4a:de:
06:6e:9a:3b:c9:70:9a:04:f7:ba:01:7d:a3:26:42:67:df:04:
d5:94:2a:1b:30:99:8a:51:71:d3:98:e3:10:4f:b7:a1:53:a8:
60:27:38:c6:18:81:27:8d:8c:23:88:22:b5:2b:73:b6:23:b2:
67:e6:0c:e7:12:7f:ed:2d:ac:91:27:85:6b:62:ef:13:b3:4c:
93:be:c1:4e:de:44:b3:b5:7b:cb:06:ab:05:1c:87:b8:66:3d:
c3:09:aa:a3:71:80:9c:82:ed:72:ce:43:7a:76:42:5a:e3:3f:
90:49:7b:b7:0a:b7:6a:0f:80:13:60:9a:e4:12:0f:be:41:48:
7f:ff:77:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:15 2025 by rpki-client