Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581A41C0F41E11EF8813B55A762E951A.roa
File: 581A41C0F41E11EF8813B55A762E951A.roa (raw, json)
Hash identifier: WAc/l8348HQXQWFH5Ae7ndoc+I6gufeuOy4mEr7n+7Y=
Subject key identifier: AF:30:59:E0:DF:15:12:5E:2D:29:08:E4:43:71:6F:CE:97:1F:0A:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01301F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581A41C0F41E11EF8813B55A762E951A.roa
Signing time: Wed 26 Feb 2025 08:47:44 +0000
ROA not before: Wed 26 Feb 2025 08:47:40 +0000
ROA not after: Sat 19 Feb 2028 08:47:40 +0000
asID: 17561
IP address blocks: 45.197.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77855 (0x1301f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 08:47:40 2025 GMT
Not After : Feb 19 08:47:40 2028 GMT
Subject: CN=67bed52f-db5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:1c:62:8a:25:ba:8c:3b:29:8a:ca:45:00:
cd:85:1b:36:9d:d1:1b:b4:82:d3:5e:37:09:fe:14:
56:91:7b:0a:2a:5d:51:eb:ca:e4:b5:8f:ee:43:e7:
b1:d4:9e:f0:98:fc:06:cf:e3:8b:bd:e5:b3:ef:8b:
4b:ac:d4:c4:b0:3c:0b:64:06:68:1e:18:16:6c:58:
33:84:3e:f7:96:42:be:8a:c5:de:8e:3b:65:d9:83:
ce:51:30:da:0d:ce:28:6a:fb:5e:06:8c:f1:59:31:
2c:55:21:a8:14:9e:f8:36:29:ff:a4:7f:a1:2a:e5:
4b:25:3f:64:b3:cd:d3:30:6f:89:a7:75:8c:95:1e:
3c:bd:72:b1:31:24:5a:94:4e:49:1f:cf:65:a5:be:
ae:23:69:4a:35:2d:64:14:11:63:8f:f8:bf:3c:3b:
40:d9:7b:57:59:80:d6:2d:72:5d:e8:55:87:d6:37:
55:79:76:db:ea:14:52:03:ba:bc:17:dd:8c:3f:5f:
f9:2f:22:87:35:34:88:6e:6b:3b:7e:7f:b3:3b:56:
4f:d9:6f:4a:a3:62:b9:5e:cc:c9:98:39:ce:8d:39:
44:6c:1b:cf:f5:68:bb:e6:19:1c:a6:fc:48:1c:6a:
17:12:eb:9c:d4:38:e3:4e:bf:2f:b3:08:75:b7:6e:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:30:59:E0:DF:15:12:5E:2D:29:08:E4:43:71:6F:CE:97:1F:0A:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581A41C0F41E11EF8813B55A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.62.0/24
Signature Algorithm: sha256WithRSAEncryption
33:1f:22:39:53:06:e2:f1:2e:8a:ef:3d:43:90:72:39:d1:e2:
7f:6c:ae:bc:fb:2d:0c:2f:26:ef:c9:74:75:e7:d9:86:36:67:
38:fb:08:5f:87:f9:3b:2d:c1:4a:65:b6:6a:1b:fe:4c:c1:e2:
b2:17:d6:1c:e0:2d:02:bd:9d:49:09:e7:36:6a:7d:ca:13:a8:
d0:3d:fb:e1:07:e4:be:18:3b:bf:2a:b1:95:a9:18:dd:45:b6:
53:a5:a8:9c:53:0c:93:86:15:85:19:4d:43:1f:3c:fa:0a:9e:
a6:ad:65:6e:b2:ce:b1:85:8a:7a:36:f7:b6:17:23:24:f4:86:
52:d9:af:96:42:8a:67:20:f1:d6:d7:42:47:70:f0:52:8e:a8:
0b:a5:fc:e4:9e:4d:09:91:19:0d:50:7e:00:56:3b:f3:98:28:
0a:2d:dd:1f:eb:1f:f4:eb:46:5d:95:7e:b6:34:cd:da:b2:4c:
cb:e1:a1:68:76:2d:d0:bf:a7:cf:7a:ee:b9:c2:fe:58:fe:b1:
42:ea:af:56:d8:01:54:0b:e8:20:be:6c:f2:4d:87:88:8a:85:
81:f7:56:a2:d2:ee:c8:ad:36:85:22:e5:e1:5a:c7:dc:a1:72:
f9:cd:18:8b:32:eb:62:de:21:ae:75:1f:9c:44:8e:50:fa:e7:
14:0f:68:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:10 2025 by rpki-client