Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FAE274CE55C11EF8E9DF25B762E951A.roa
File: 5FAE274CE55C11EF8E9DF25B762E951A.roa (raw, json)
Hash identifier: b/V2oP9jv8Jx3dredcug9y+jsv5C+v8tRK1iUWrxA78=
Subject key identifier: A5:AC:C5:61:7C:38:6E:CC:7B:3D:66:D1:8B:71:9C:24:0E:B3:28:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FAE274CE55C11EF8E9DF25B762E951A.roa
Signing time: Fri 07 Feb 2025 14:03:58 +0000
ROA not before: Fri 07 Feb 2025 14:03:54 +0000
ROA not after: Fri 21 Jan 2028 14:03:54 +0000
asID: 17561
IP address blocks: 45.196.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73182 (0x11dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 14:03:54 2025 GMT
Not After : Jan 21 14:03:54 2028 GMT
Subject: CN=67a612ce-25ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:57:45:4d:88:28:92:04:61:4f:9e:1e:91:
c2:0c:32:ad:5d:31:c6:2c:16:f8:14:96:37:66:6c:
2e:cc:a9:b0:85:4f:b7:f9:f4:79:0d:ce:e6:f8:30:
3e:b3:83:6a:57:14:41:19:61:6a:33:36:91:21:a0:
0a:56:79:fa:8c:68:c8:60:72:27:6a:de:b9:25:a9:
00:f3:3b:4b:6b:90:92:9c:d4:ab:88:07:af:a0:df:
c5:37:f9:e9:7c:9b:46:07:47:29:5d:4d:f3:90:fd:
d4:30:88:11:6d:80:18:8d:9e:bc:52:49:ab:06:d2:
ae:13:a9:98:5b:73:7a:36:4e:0a:b3:ba:6c:c4:62:
a7:75:24:fd:aa:1c:1f:56:58:73:46:0d:c6:bf:c1:
30:bc:d6:87:b3:6f:93:c8:75:6f:0d:55:83:57:a6:
8e:c9:78:6e:e7:e5:c4:3a:b4:45:b1:30:ac:87:b7:
8e:2c:23:74:11:1b:3b:2e:0a:d6:af:31:7c:b5:58:
f6:47:02:b8:09:37:82:db:82:1f:24:df:72:41:6e:
76:06:e9:f5:01:ea:56:98:5f:34:91:d4:ff:ee:ad:
28:46:88:c6:b3:0b:05:e4:ab:c0:61:57:06:b3:49:
fd:73:d9:82:62:bd:f5:0e:9d:8e:09:45:81:64:83:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AC:C5:61:7C:38:6E:CC:7B:3D:66:D1:8B:71:9C:24:0E:B3:28:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FAE274CE55C11EF8E9DF25B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.79.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c1:ea:86:89:54:57:a0:b2:d0:3e:17:81:90:e0:19:c2:c4:
0c:ad:89:93:56:4c:6d:ef:8f:2b:03:2d:43:dd:95:68:85:f6:
66:51:b8:10:2c:6d:67:d3:0f:80:93:39:66:61:7e:15:f1:1c:
b5:5d:be:4a:90:16:d7:9e:f1:c5:d7:5b:81:1f:09:86:1a:53:
da:25:e2:e8:c7:e8:64:84:2f:94:b5:c7:1f:2d:9f:4d:b2:54:
69:31:65:9e:50:c1:c7:e5:86:65:1c:38:30:47:50:d5:8c:84:
af:b6:9e:9c:35:49:aa:2c:eb:1c:1e:ed:fa:f8:15:20:8d:83:
f4:e5:68:df:32:33:6a:8d:52:40:37:f5:06:87:ae:3a:79:54:
77:be:08:74:04:5a:1a:4b:e0:71:85:be:9e:54:3a:dc:82:29:
35:20:60:83:41:d3:13:51:97:3f:02:d3:c6:56:bd:0b:8b:43:
dd:4f:d4:f9:14:4d:d4:5b:aa:7f:bd:b3:a1:d8:25:25:21:ea:
33:f5:49:4e:4b:35:fc:43:93:e8:08:ad:98:72:16:ff:cc:42:
b8:48:c3:e9:2a:79:46:52:aa:99:20:75:9a:45:03:8b:5c:b3:
7f:3c:10:cd:53:17:01:c3:29:13:7f:77:64:42:69:3b:1b:71:
0d:5d:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:45 2025 by rpki-client