Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D7822E0F39811EFAECAF940762E951A.roa
File: 4D7822E0F39811EFAECAF940762E951A.roa (raw, json)
Hash identifier: 8C40AOE9caBSuUvYMiUEM9byAQ2pxCj7pw+98jd5P4I=
Subject key identifier: 5C:E3:72:C7:82:B1:05:53:4B:EC:23:CA:8E:6A:0B:08:FC:E9:6A:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012EAD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D7822E0F39811EFAECAF940762E951A.roa
Signing time: Tue 25 Feb 2025 16:48:13 +0000
ROA not before: Tue 25 Feb 2025 16:48:10 +0000
ROA not after: Wed 09 Apr 2025 16:48:10 +0000
asID: 138915
IP address blocks: 45.197.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77485 (0x12ead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:48:10 2025 GMT
Not After : Apr 9 16:48:10 2025 GMT
Subject: CN=67bdf44d-bd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8e:ec:35:f1:81:2f:ae:72:44:53:f1:7f:54:
a7:2d:3d:c4:b8:06:1c:21:e9:07:7b:a7:18:ee:a4:
59:dc:b0:c4:09:2b:38:93:58:2d:e8:39:89:02:d6:
82:6d:5c:42:55:5c:11:4d:48:c1:22:c4:bb:f1:5d:
b5:5d:4f:30:a0:bf:81:8e:2d:d6:6d:4d:d4:77:1a:
a2:38:b3:e7:e7:d7:14:f6:6c:b0:ce:48:53:bb:4b:
a2:48:78:59:77:12:3e:9a:49:63:a4:7a:a8:b0:63:
c1:aa:f2:b2:b1:31:be:d1:0f:c3:96:c0:8c:ee:25:
9a:09:4a:5b:90:f2:74:f0:ad:7f:92:07:ea:0e:cc:
66:94:92:d0:4e:7b:bd:c9:77:f2:2c:2b:20:34:83:
5a:30:8b:c6:e9:6d:29:4e:fd:b2:f2:65:5d:8f:ff:
48:dd:5a:a6:ad:28:2f:21:50:a1:66:05:57:56:e9:
b3:6e:3a:11:e5:b0:ec:c4:d3:33:b5:59:42:02:01:
6e:30:3b:94:1e:e2:d7:d9:e6:5d:1b:b0:72:70:6b:
88:17:14:0f:2c:21:79:4e:6e:83:e8:86:6e:fb:e3:
66:76:eb:5c:43:22:5f:be:27:3a:d0:4f:d6:72:b2:
7c:ea:82:f8:14:cc:d1:c5:2f:13:37:c6:07:dd:cc:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E3:72:C7:82:B1:05:53:4B:EC:23:CA:8E:6A:0B:08:FC:E9:6A:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D7822E0F39811EFAECAF940762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:90:f0:05:99:ed:39:59:6c:1b:cc:84:3f:0b:8d:38:bd:44:
73:60:20:b3:02:f1:82:5a:bb:d1:2d:61:a8:ea:b2:79:4a:7c:
51:20:fa:db:a2:a4:30:73:08:3d:79:e4:9a:54:22:d0:91:a8:
22:28:6a:37:31:a7:aa:93:9a:8b:85:cd:f1:f1:a3:6d:de:be:
e8:37:e6:ca:dd:d8:b7:f6:82:6e:cb:32:d9:e0:d0:74:23:fc:
e8:ff:78:45:c6:29:be:f0:62:d8:85:5e:d2:d4:2c:de:69:e4:
31:e8:dd:22:65:dc:1e:fc:37:c4:6d:b1:72:c6:a6:a0:23:7b:
e3:67:54:7b:0d:a9:4f:7b:ea:cb:0a:5e:ce:24:40:b2:a3:4a:
5e:45:26:38:65:3b:31:70:6d:96:37:6d:3d:85:da:88:6d:82:
fc:e7:e3:c9:ba:89:d3:a2:84:9a:d6:61:55:a7:8a:b8:f1:9d:
fd:22:48:f1:42:22:bb:2f:83:3f:b3:2f:65:b1:08:4f:d9:5a:
f3:e9:59:9d:5f:ab:41:dc:aa:40:fe:5b:79:8d:d6:fc:13:bc:
be:1f:e8:5a:ad:64:34:b0:fa:71:d3:60:f9:3b:fb:08:07:be:
1b:21:e8:ec:60:3a:cb:af:07:c7:0b:8c:0f:5e:84:45:d3:56:
50:64:65:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:15:03 2025 by rpki-client