Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B7FE68FFE111EF9A6C0CAE762E951A.roa
File: 40B7FE68FFE111EF9A6C0CAE762E951A.roa (raw, json)
Hash identifier: ph4NsCqYKZcGBPvNYrEudhnvDuyEFsR5B87vIbp+B5Q=
Subject key identifier: 9F:0F:D0:17:27:F8:94:56:2A:B7:B8:88:A8:33:68:60:9B:35:28:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01458D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B7FE68FFE111EF9A6C0CAE762E951A.roa
Signing time: Thu 13 Mar 2025 08:00:39 +0000
ROA not before: Thu 13 Mar 2025 08:00:35 +0000
ROA not after: Sat 19 Apr 2025 08:00:35 +0000
asID: 262186
IP address blocks: 45.192.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83341 (0x1458d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 08:00:35 2025 GMT
Not After : Apr 19 08:00:35 2025 GMT
Subject: CN=67d290a7-67db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:ea:b9:6b:a3:2a:11:64:0b:af:ba:b8:17:
0e:14:dc:e8:8f:7d:29:17:62:ab:8d:9a:59:ec:c7:
ec:2c:ae:cb:d6:71:70:59:2e:89:4d:09:7a:9e:f6:
37:01:33:dd:81:6e:19:9e:b4:2a:42:79:c1:5f:79:
aa:2e:21:aa:6c:4e:52:f1:b5:cf:1a:99:90:ab:5e:
67:3d:88:be:2a:fe:be:08:45:7c:17:8a:d1:6b:d3:
4e:fe:a1:a2:f3:0f:e1:2d:d8:32:99:6b:4d:7c:f9:
5c:39:f3:59:fa:d9:ff:61:94:3f:25:0d:01:f9:18:
76:7a:d7:48:3a:06:11:b4:b9:e7:03:76:eb:df:8e:
e8:44:09:55:f9:66:c9:f0:a8:a4:ea:cc:9a:a5:4b:
54:af:c4:a9:4f:71:9b:c0:c4:db:e3:b0:7c:ef:55:
c1:19:0c:b1:8e:15:92:5f:f4:90:9c:53:00:4a:a8:
d1:f3:75:98:5b:2f:f7:59:9c:47:e6:f4:5f:83:88:
05:1f:3a:8d:af:bb:e9:ce:c1:6c:7f:34:60:99:01:
60:c2:bf:4b:17:56:04:47:d8:a0:29:5a:85:71:bb:
d7:a5:f1:08:e1:e3:7e:02:48:97:94:f8:58:10:bd:
01:89:0e:2b:22:c7:66:e7:7b:b5:65:a0:01:fa:13:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:D0:17:27:F8:94:56:2A:B7:B8:88:A8:33:68:60:9B:35:28:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B7FE68FFE111EF9A6C0CAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:91:67:51:95:3a:a7:21:66:56:c5:f2:50:c5:9e:7c:28:08:
c8:90:15:46:00:87:07:d2:37:db:fb:4d:74:f5:a9:04:e1:2c:
98:e0:29:76:44:50:0b:4f:ba:6b:6f:14:fb:ce:3d:21:3d:40:
e0:40:c2:8c:35:fb:36:15:54:5a:65:dc:5f:75:cf:07:45:ee:
4a:b5:98:77:6b:db:f6:6b:08:b8:6c:33:e6:a0:3a:ee:cd:2c:
20:c5:82:41:32:99:9d:91:a0:f5:2f:26:5b:84:57:c9:d5:6f:
af:1e:6c:4e:d9:ba:93:ba:77:c2:9f:e1:d2:33:c2:1a:8a:c7:
f0:31:ec:86:14:64:2d:05:fa:4e:46:e6:26:f6:64:75:d7:be:
de:67:7f:8b:47:d3:9d:85:f2:0e:a8:88:9d:ea:4f:19:cd:99:
80:77:49:5a:85:7d:c2:52:f1:1d:e7:14:d6:38:b5:b9:a0:2b:
86:42:d8:2f:5c:c7:cc:a9:7f:07:cf:e0:bf:9a:d6:c5:6d:1b:
51:c5:ae:e2:11:f7:be:6f:c4:d5:2e:40:52:b0:87:77:c3:b3:
60:61:4d:6f:3d:72:dd:a2:2a:9b:a8:b4:30:b2:d4:d8:3a:2a:
a2:db:a1:7f:87:35:ae:9d:13:c6:82:f2:fc:ea:5d:e5:86:59:
00:ca:69:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:20 2025 by rpki-client