Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E622C9EF2DC11EFB692C543762E951A.roa
File: 4E622C9EF2DC11EFB692C543762E951A.roa (raw, json)
Hash identifier: p/XvG5ADk+XCXkxsEnEQCSMLeGwK8oK1lJZnHaZu+sY=
Subject key identifier: BB:A0:18:DA:63:96:85:46:72:B0:AF:3A:76:91:27:38:E1:54:54:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E622C9EF2DC11EFB692C543762E951A.roa
Signing time: Mon 24 Feb 2025 18:22:29 +0000
ROA not before: Mon 24 Feb 2025 18:22:26 +0000
ROA not after: Sat 05 Apr 2025 18:22:26 +0000
asID: 42831
IP address blocks: 45.196.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77116 (0x12d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 18:22:26 2025 GMT
Not After : Apr 5 18:22:26 2025 GMT
Subject: CN=67bcb8e5-dd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:a8:4a:43:02:bc:cb:35:a9:9f:1f:b8:9a:
8a:48:1c:00:6f:5a:a9:a2:03:0a:1f:d7:4f:cf:1d:
a5:63:d0:d5:cd:68:b9:75:29:b2:6b:cd:da:f8:00:
d2:4c:7d:0c:a2:f6:89:b2:39:ed:9c:c3:1d:24:54:
ed:44:51:c3:9a:f8:f0:cd:be:43:13:7f:34:58:87:
dd:5a:2d:70:ab:fc:e2:db:ed:22:bf:19:3e:13:fd:
dc:78:db:e3:c5:e9:10:61:cd:ad:67:a4:39:c6:03:
cc:04:d8:c5:74:60:21:df:9e:e1:b0:3d:ca:6e:0d:
bc:ef:2d:ee:2e:5b:fa:a2:4a:54:0f:ed:f8:e1:35:
7a:21:02:e1:5e:29:e2:e8:41:af:2c:a9:5c:57:88:
c1:85:51:93:b8:26:b2:e6:22:86:84:4e:af:41:06:
08:f0:2b:18:40:80:e0:5f:a4:1b:51:9c:a9:a5:85:
11:0f:af:65:8e:f9:47:37:2a:19:d6:9c:7e:72:87:
0a:35:f8:df:24:c4:98:54:25:17:3b:f0:54:b1:33:
ec:ca:58:82:ad:dd:dd:95:30:a2:71:27:e7:17:d3:
4f:cf:57:79:fc:67:5f:4a:ee:0d:7f:2d:a6:09:9d:
dc:fa:9e:9d:1a:9b:11:dd:6c:90:44:4e:20:24:e3:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A0:18:DA:63:96:85:46:72:B0:AF:3A:76:91:27:38:E1:54:54:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E622C9EF2DC11EFB692C543762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.152.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:e7:b9:8d:4f:db:8f:8c:9e:b4:ab:c0:70:98:f8:af:ae:06:
95:b4:2f:cd:61:0a:d4:0e:1e:f7:75:b3:25:8f:b0:4c:74:a4:
ed:ed:ed:87:12:45:31:ca:16:b4:cb:79:80:99:0f:3e:77:68:
de:3e:73:a7:10:d6:b3:c4:69:0f:a3:1c:b1:67:6a:b2:c0:ae:
dd:b7:14:3f:54:d3:dd:bc:30:fc:34:25:69:45:5f:d3:c9:d0:
98:bb:eb:56:21:a5:71:dc:25:0b:a3:71:97:18:96:cc:b9:73:
b3:18:2d:f3:1f:08:42:bf:1f:c8:9f:62:9a:6e:2c:90:c7:c0:
5d:02:cd:aa:e6:d6:8d:e7:4c:f9:6f:92:c0:23:c2:1e:5d:92:
b0:9c:65:51:c8:c2:0c:53:db:d9:ac:73:cd:55:83:5e:8e:15:
3c:93:05:52:dd:6d:da:3a:17:f1:03:e5:ea:9b:ba:7c:af:1d:
da:58:65:f7:92:5b:92:c6:fb:f0:01:c2:3b:c4:0a:16:6c:7e:
d6:47:3d:5e:8b:63:67:5f:ed:cd:83:17:6d:82:fc:d5:5e:af:
10:2d:7f:9a:49:b2:18:bd:17:4f:5b:e9:73:8f:6f:cc:35:8a:
e6:dc:2d:b2:14:91:55:d0:ef:45:7a:61:8e:11:0b:1a:4e:36:
a7:05:77:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:42 2025 by rpki-client