Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BCAE44FF1F11EF98C2894E762E951A.roa
File: 63BCAE44FF1F11EF98C2894E762E951A.roa (raw, json)
Hash identifier: k5pP4op0v8tgXd3H9FLXyczBV3I35kxO1P84sPm6A3U=
Subject key identifier: AB:39:74:BD:9F:1B:9C:B7:88:84:58:68:6A:B2:0E:0E:03:A4:22:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01451C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BCAE44FF1F11EF98C2894E762E951A.roa
Signing time: Wed 12 Mar 2025 08:52:55 +0000
ROA not before: Wed 12 Mar 2025 08:52:51 +0000
ROA not after: Wed 16 Apr 2025 08:52:51 +0000
asID: 54600
IP address blocks: 45.205.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83228 (0x1451c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 08:52:51 2025 GMT
Not After : Apr 16 08:52:51 2025 GMT
Subject: CN=67d14b67-230d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:89:08:75:13:88:28:39:7d:3e:1a:52:41:
5a:b4:89:c8:ab:d7:ee:d9:b6:65:73:63:cd:ce:93:
c5:9b:d0:d8:e4:04:04:52:cc:1e:76:8d:50:33:ec:
f3:55:66:e8:97:43:9e:72:68:10:97:58:10:ea:05:
90:fc:47:00:f1:dc:3c:e0:24:51:ee:6b:42:8a:a0:
c4:77:23:ad:de:cf:c7:b9:f3:57:4f:38:37:e9:59:
cd:66:c8:8a:ad:c0:6f:59:cf:05:31:de:f4:8b:2d:
59:a5:02:57:03:9f:1a:f7:50:8a:94:cc:75:f1:3f:
e8:40:46:da:e1:2d:b9:1a:24:74:60:85:85:7f:28:
23:d8:e8:f8:d7:51:f8:3d:dc:5b:8f:c7:a4:78:60:
d3:4c:99:b7:95:e5:49:4a:7d:a0:53:3d:3c:d8:23:
35:ae:fa:af:1b:f7:66:a0:fc:0f:ac:ca:b7:03:44:
d3:d2:5a:e3:35:8a:1f:93:a4:e4:42:c3:0a:65:15:
3b:ab:59:7e:18:f4:f2:01:ac:2d:2e:10:28:ea:ce:
88:38:c3:f5:e5:d6:7e:3f:58:37:9f:90:fb:9d:a5:
e1:b7:4a:35:a6:0c:94:53:7c:29:d9:9e:a6:6d:0d:
96:90:4c:12:6a:41:82:1a:86:aa:ce:20:62:98:6d:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:39:74:BD:9F:1B:9C:B7:88:84:58:68:6A:B2:0E:0E:03:A4:22:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BCAE44FF1F11EF98C2894E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:c3:2b:20:f7:3b:49:bd:29:44:55:b3:a7:c4:11:3a:d4:dd:
f7:46:1c:b2:5c:fd:b0:15:eb:e3:9f:3e:16:6e:99:da:26:3f:
36:ce:6c:53:07:7a:be:2c:ef:11:85:17:84:1c:7a:6e:0c:53:
a8:bb:fc:ea:ae:2e:be:14:7c:7b:e5:8e:e2:0e:db:6a:a5:2b:
66:ce:52:84:0f:3f:ec:ea:0d:cf:b0:76:09:3e:7f:86:70:a3:
5f:9b:a7:07:3d:05:1b:77:5b:1b:04:f3:8b:33:e3:01:56:be:
96:b9:25:d2:cb:2a:b6:80:fb:5f:16:b8:a7:2a:14:74:f7:5c:
e3:98:dd:b5:24:e4:52:f4:7d:46:50:7f:cd:14:38:ef:b5:33:
25:fe:da:b6:7e:39:70:20:30:85:6d:8d:e4:17:0a:74:3b:9b:
26:6f:e9:57:f7:a0:6f:1f:0d:95:21:de:3e:3b:6c:bd:97:cd:
96:5d:f5:70:ef:cf:c2:48:cb:0c:9e:30:b5:42:9c:14:4b:d6:
5f:7f:88:3b:c1:d8:a7:bb:ed:fc:59:10:76:db:f2:9d:c0:dd:
89:4e:43:bb:8d:ed:93:c8:65:03:d9:84:c5:54:87:2c:a6:f6:
9e:64:ff:99:c1:06:dc:d3:e1:ac:c9:99:64:fa:04:9d:1b:f5:
2c:8f:80:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:45 2025 by rpki-client