Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CD8116CF39011EF8C01B888762E951A.roa
File: 5CD8116CF39011EF8C01B888762E951A.roa (raw, json)
Hash identifier: wDIBPkh5RJCKHEKiELsMcbFCYrxT935NFOFZvieEy1c=
Subject key identifier: DF:E1:2E:C4:67:D4:39:4A:B8:1E:36:6E:67:C9:C0:2A:69:83:74:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CD8116CF39011EF8C01B888762E951A.roa
Signing time: Tue 25 Feb 2025 15:51:23 +0000
ROA not before: Tue 25 Feb 2025 15:51:19 +0000
ROA not after: Wed 09 Apr 2025 15:51:19 +0000
asID: 63139
IP address blocks: 45.197.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77437 (0x12e7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 15:51:19 2025 GMT
Not After : Apr 9 15:51:19 2025 GMT
Subject: CN=67bde6fb-e9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:3c:d1:37:6a:c4:95:70:1f:50:5e:b2:66:
b7:6c:cf:c1:b8:50:64:7f:6c:fd:93:86:b0:1b:59:
9a:e3:4c:ec:44:cb:0c:3d:ae:ef:a0:4a:5c:08:09:
10:7a:6f:a2:a8:03:8b:aa:49:85:cc:16:5c:a3:09:
33:1f:6b:3b:d2:3e:48:26:62:8d:07:a8:47:35:5b:
1d:38:62:01:b7:24:07:8c:b5:60:61:a6:cd:0b:52:
06:17:24:93:bf:02:fd:54:3c:98:bd:69:c2:a2:14:
15:01:1e:5e:9e:6d:7e:12:a5:60:09:0b:80:5e:0f:
37:b5:e4:39:8a:73:36:0c:33:c9:2f:c2:2d:ff:28:
16:9a:d1:11:a2:92:c5:23:bf:03:79:9f:96:98:7f:
33:82:1f:c2:dc:ce:17:11:99:3a:91:12:8f:d9:44:
b8:f8:58:ef:ec:7c:90:86:5a:08:46:79:32:4f:5f:
5f:4e:51:49:00:9f:19:50:69:79:be:83:93:e7:7a:
78:62:c2:c1:b7:53:75:51:9e:c2:a3:41:45:2c:fa:
fe:42:ce:fe:f5:e5:d0:73:28:bf:8a:85:5c:95:72:
83:3e:04:18:63:0d:fe:b3:82:d0:40:e2:0c:3c:fd:
b8:f8:37:b8:f4:4a:bc:a5:69:c4:59:65:f8:6b:fc:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E1:2E:C4:67:D4:39:4A:B8:1E:36:6E:67:C9:C0:2A:69:83:74:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CD8116CF39011EF8C01B888762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.106.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e8:54:9e:3c:64:83:74:e7:8c:b7:fa:3f:cd:01:b8:71:7a:
84:46:e2:94:c5:5d:09:01:b9:ec:df:8c:f2:95:6c:3f:1f:0e:
8f:56:ee:7f:39:6e:f2:ef:e2:3d:a7:d3:80:57:84:74:0d:6a:
d1:75:18:f4:85:30:87:2f:cd:ca:5b:af:35:19:f9:40:54:04:
c5:40:18:66:51:48:25:b0:4b:05:69:ae:aa:f1:84:3a:d8:46:
0c:86:dd:3f:86:11:50:d6:d3:3f:da:3a:92:fe:cc:ab:c9:31:
9f:d1:b9:1a:1f:71:b6:8f:27:53:ae:a4:c4:f9:6d:81:41:24:
52:17:e9:a8:0a:6f:4a:14:fb:b7:b5:a9:f4:08:a9:b1:17:a1:
c3:90:21:fb:60:6f:99:c9:7d:de:2b:c6:a9:74:69:ec:e4:93:
83:0e:f5:7f:ef:8b:97:99:d7:b9:ae:8d:bd:97:7e:8b:24:d2:
8a:f1:8c:6a:89:b9:56:2e:3b:fa:0d:fc:11:4d:bc:31:b7:a1:
e0:44:cc:da:ef:51:4c:31:5f:8f:8a:0b:d8:26:66:65:48:6a:
de:fe:b3:ad:30:30:1d:33:38:af:03:38:83:66:66:7d:41:87:
b6:1d:3b:a8:c3:9a:f5:63:ea:f5:c1:5f:3d:25:8e:ea:ca:4d:
bd:92:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:09 2025 by rpki-client