Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54A7721EEC9011EF99DED0B6762E951A.roa
File: 54A7721EEC9011EF99DED0B6762E951A.roa (raw, json)
Hash identifier: R/yamm8lUrxbMzWoPHFYLkXevrqO3tMoXS3KYHlChkE=
Subject key identifier: 69:E6:2A:9B:FC:5A:F5:07:CD:F2:26:B3:3A:C1:60:B6:B4:A2:91:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012468
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54A7721EEC9011EF99DED0B6762E951A.roa
Signing time: Sun 16 Feb 2025 18:03:31 +0000
ROA not before: Sun 16 Feb 2025 18:03:27 +0000
ROA not after: Fri 21 Jan 2028 18:03:27 +0000
asID: 17561
IP address blocks: 45.196.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74856 (0x12468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 16 18:03:27 2025 GMT
Not After : Jan 21 18:03:27 2028 GMT
Subject: CN=67b22873-f0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:75:0c:91:cd:7d:49:22:5f:b6:3a:e8:70:
a4:f4:f8:00:fa:85:3b:82:92:42:31:dd:df:df:d5:
a8:98:4e:64:50:69:2a:64:5d:e5:74:5e:47:15:98:
f7:3e:b9:15:ba:06:77:4d:a0:0c:2d:08:18:63:6e:
a5:c8:fe:6c:e0:2a:3e:89:4f:3d:d1:be:21:fc:9d:
a9:ec:d5:82:d0:35:7e:05:69:e4:1d:21:b2:11:9b:
0b:f6:05:60:c5:ff:42:be:24:73:32:70:ef:61:f3:
1d:1a:92:68:13:e8:54:57:05:09:26:2a:6f:49:a5:
ac:ef:36:6a:cb:79:4e:2d:51:0f:b0:e2:67:35:ac:
66:71:89:cd:74:30:58:3a:cd:41:5b:d3:a8:b0:d0:
b8:57:18:c3:ae:5f:42:33:e4:8d:a5:29:c9:3d:5c:
08:e8:b5:28:e0:e9:8d:14:33:5b:88:78:04:95:bb:
bb:2b:0a:a7:23:64:a3:df:83:cd:dd:f1:dd:b9:93:
b5:73:e8:8c:e6:5b:12:5e:06:a5:4f:e8:ee:a1:9e:
be:cc:e2:1e:7e:aa:f6:ec:16:d4:bc:d2:24:80:d3:
60:f5:67:ad:b1:07:ac:ca:4c:0a:12:0f:19:0b:7b:
52:4d:8f:ea:1f:ea:d3:64:fa:3a:e8:9f:64:a0:a6:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E6:2A:9B:FC:5A:F5:07:CD:F2:26:B3:3A:C1:60:B6:B4:A2:91:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54A7721EEC9011EF99DED0B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c0:cc:1d:41:a8:9c:aa:b7:b2:4a:2a:1d:15:fd:0a:92:47:
c7:17:25:fa:65:f3:43:49:b3:a5:27:23:97:51:98:32:88:6b:
e2:c8:13:3b:58:91:e6:ce:73:f6:88:27:7c:f8:67:a8:40:ac:
1c:ef:0d:ed:25:84:61:57:60:98:15:4f:2c:5a:09:b2:19:87:
40:39:ee:8a:35:24:f8:2e:f6:5e:6b:f2:cc:32:54:ae:26:13:
94:19:ef:9a:32:54:04:e7:09:92:32:8b:31:f5:3d:0d:2b:62:
14:fa:74:41:56:06:dd:77:83:ee:a6:ab:16:91:f3:22:b4:5d:
42:f6:50:15:81:fd:85:b8:53:bf:71:da:a4:cb:df:b0:e9:99:
7e:b2:e3:6a:70:d4:c8:11:62:b3:74:28:c8:1f:2f:29:71:4b:
56:8c:8e:b1:a5:56:ae:b7:e9:08:81:71:39:9d:e1:a8:c0:ce:
de:de:53:90:7e:89:ac:6f:59:11:d7:88:0b:0b:fd:c8:f1:5a:
76:78:53:3e:a9:28:68:02:f2:12:87:b8:3b:29:17:1d:dc:25:
44:00:cb:44:da:9e:ab:26:62:c3:fb:53:10:a5:06:15:d4:60:
7f:57:ec:5b:32:1a:2a:0a:a1:1e:ab:45:18:96:2e:db:50:ec:
13:33:07:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:21 2025 by rpki-client