Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4662A91AF39511EF899E02AB762E951A.roa
File: 4662A91AF39511EF899E02AB762E951A.roa (raw, json)
Hash identifier: ypa64ms5x6gXpvelt800vOuciZYoFxnxpRAtgZOKXRg=
Subject key identifier: A6:AE:1A:ED:E8:15:D9:A0:04:3D:28:2B:C4:95:72:09:59:2A:4F:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4662A91AF39511EF899E02AB762E951A.roa
Signing time: Tue 25 Feb 2025 16:26:33 +0000
ROA not before: Tue 25 Feb 2025 16:26:29 +0000
ROA not after: Wed 09 Apr 2025 16:26:29 +0000
asID: 63139
IP address blocks: 45.197.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77465 (0x12e99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:26:29 2025 GMT
Not After : Apr 9 16:26:29 2025 GMT
Subject: CN=67bdef39-d8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:b5:3d:cf:38:2d:33:e8:d6:72:c5:f4:59:
7a:8c:8d:9e:0d:89:b8:0d:51:36:35:ba:3b:b1:95:
39:5f:4b:6d:a1:c1:4a:71:e4:ba:33:17:cb:24:d7:
ac:de:c4:5e:9f:75:48:23:ab:a5:69:e7:51:a2:95:
23:e8:87:60:9c:05:db:e3:bd:36:65:91:e6:3c:0f:
d1:58:71:f3:7d:6b:b2:37:60:72:af:03:5d:5c:c0:
9d:3f:4a:9b:43:cd:35:63:a3:0b:d6:26:db:92:d5:
cb:00:e3:5f:41:ef:c8:f6:e2:4c:87:f3:2c:f4:86:
00:e7:d6:ae:77:35:bf:d7:0c:9f:95:95:bb:c0:d3:
b2:55:2a:b6:69:99:d2:cd:67:a8:9a:2d:3e:d8:a8:
0e:2c:3d:de:4e:e2:32:30:02:c0:d3:50:72:8e:74:
98:11:13:e2:0e:9d:4f:c0:cc:60:67:8a:d4:17:99:
0c:fa:8d:bc:66:41:67:4d:3b:6d:40:ee:80:cf:e9:
be:f6:9e:4a:dd:0f:9f:e6:51:49:51:d4:96:cf:44:
54:e1:21:96:02:62:fb:5a:31:c6:b2:13:a6:d1:2f:
ea:e3:04:47:25:dc:35:95:64:ab:70:03:88:80:8c:
1f:43:d5:3c:de:6f:64:5c:b8:70:62:f8:0c:40:cd:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AE:1A:ED:E8:15:D9:A0:04:3D:28:2B:C4:95:72:09:59:2A:4F:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4662A91AF39511EF899E02AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:1f:d6:48:35:9f:5a:08:2a:e1:4a:51:a2:a8:66:7c:c9:0e:
73:66:4b:c4:59:00:59:bb:36:79:16:19:c1:1a:c1:16:82:8f:
42:33:07:ae:58:1c:6a:ee:5f:b2:ba:32:d7:69:06:7a:28:ce:
30:03:b6:9b:db:a5:ce:3c:bd:fa:a9:d6:17:ff:44:75:4c:a2:
26:38:23:07:e5:3c:90:b2:9c:07:1a:73:75:e4:88:c4:a7:87:
38:c3:5c:6b:36:79:d8:8e:2f:a9:3e:8a:0a:d3:7c:23:0c:5d:
13:b5:01:be:c0:96:19:b9:07:67:cc:48:7e:f9:1f:a3:2d:c2:
4d:b5:5c:a9:71:34:31:2d:c8:36:c3:59:e9:4f:bd:09:49:cd:
95:c7:a7:ba:e6:f7:93:59:c5:95:b8:f8:c3:40:ee:d1:be:be:
d4:bd:f7:e7:9e:df:2e:d7:85:a5:41:99:e6:19:3f:93:ec:d5:
68:d8:eb:a4:f5:c2:2c:e1:fb:5a:2e:96:7c:51:aa:1b:1f:ed:
96:06:91:90:36:37:93:5c:66:9c:ed:3a:dc:37:ea:e0:3e:bd:
96:4f:11:c0:56:90:f5:15:75:71:c2:09:b7:9b:ea:47:db:a8:
f4:98:51:d5:e2:5d:b2:3e:ef:2b:b9:3b:1a:c1:28:eb:0b:67:
da:23:bb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:01 2025 by rpki-client