Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64DC8080F38811EFA1938854762E951A.roa
File: 64DC8080F38811EFA1938854762E951A.roa (raw, json)
Hash identifier: DxUx1Ks7THoxC1b4OPbYRL1RLW9w3seM//OnddCrBuw=
Subject key identifier: D8:C3:9B:53:AC:D7:22:1F:9C:CD:C7:EB:33:B0:57:EA:26:7E:19:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64DC8080F38811EFA1938854762E951A.roa
Signing time: Tue 25 Feb 2025 14:54:21 +0000
ROA not before: Tue 25 Feb 2025 14:54:17 +0000
ROA not after: Wed 09 Apr 2025 14:54:17 +0000
asID: 63139
IP address blocks: 45.197.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77380 (0x12e44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 14:54:17 2025 GMT
Not After : Apr 9 14:54:17 2025 GMT
Subject: CN=67bdd99c-382a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:f6:1b:1e:b1:8f:e0:e7:15:bd:81:c9:c7:
13:5b:88:85:93:db:7d:7a:ee:f4:50:29:1f:da:bd:
1f:71:0d:b6:23:cd:a6:f8:fe:5a:71:26:68:ab:c3:
c6:b4:76:bb:b9:85:28:d6:84:fd:83:1a:0f:08:57:
c6:92:21:f9:f2:ea:f0:1a:b2:11:44:27:26:71:a4:
35:22:5e:df:9d:f6:ab:e4:cd:9f:06:d9:a5:86:d4:
9a:5f:f2:51:03:0b:f1:86:8e:23:6b:35:cd:e9:ac:
5c:dd:f5:79:09:d3:0f:c0:d9:72:d4:3d:77:15:8e:
8e:29:82:2e:bc:a5:35:3c:76:ec:a4:17:5c:be:c0:
5a:b7:7f:3f:ec:21:cc:b4:1d:b9:a0:10:1c:f9:53:
e2:c0:07:d1:9a:af:dd:51:73:17:95:ae:c4:a8:b2:
77:29:04:f0:a6:40:12:02:b9:ed:ef:e2:29:a5:ed:
80:d3:3e:06:b7:d1:d8:5f:66:01:d7:03:13:17:6e:
48:f3:25:cd:54:10:8d:28:60:45:ba:3c:08:05:e8:
a0:21:35:bd:4a:db:6a:97:9b:b5:cb:ab:96:39:41:
bc:a8:96:d0:d4:f9:10:61:a6:e1:37:c8:1e:37:52:
ba:4b:e8:cd:7f:19:d4:ef:31:d4:ed:e6:9e:4f:40:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:9B:53:AC:D7:22:1F:9C:CD:C7:EB:33:B0:57:EA:26:7E:19:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64DC8080F38811EFA1938854762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e4:7e:7d:16:45:4f:57:6f:a0:79:fc:79:52:fb:3c:3f:fb:
92:32:4b:11:e9:34:62:99:7c:89:98:f3:5c:56:0e:27:ae:18:
8f:d6:76:67:06:5b:ff:12:ff:ed:47:db:5b:56:23:7b:33:69:
15:93:c1:2d:a0:59:57:2f:5d:31:c3:88:49:ac:7f:67:b8:12:
0b:95:9d:bb:41:bf:3f:d7:2a:bc:e8:d2:eb:78:eb:7f:d6:2b:
70:c4:bf:93:70:41:6c:20:e2:05:09:60:49:c2:9f:b2:6f:4d:
b8:aa:c7:4f:44:c5:ad:04:0e:f5:49:66:5f:a3:6b:ea:51:45:
fd:5a:20:69:eb:eb:a2:d6:5f:f0:fc:f9:d8:8c:ba:2d:52:a0:
64:2a:fd:b9:ee:bc:52:46:fd:9f:0d:fd:b9:57:51:dd:c8:46:
77:04:94:c7:85:fa:93:4e:e4:3c:a9:d2:49:a5:a1:32:1b:c8:
8e:f3:59:27:29:ed:6b:30:20:e1:b4:66:09:9b:6a:5d:f8:7b:
a7:0a:b9:f4:22:38:e9:23:10:d1:b7:22:9d:a1:25:fa:1c:93:
49:f4:6e:1d:9b:05:5f:6d:c3:c7:ad:92:e8:86:96:ae:0f:3f:
be:41:9e:3a:12:c5:3e:c1:ca:ee:72:35:c8:c1:97:ff:e2:57:
65:98:80:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:45 2025 by rpki-client