Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66038E32F43B11EF8F7B4AA3762E951A.roa
File: 66038E32F43B11EF8F7B4AA3762E951A.roa (raw, json)
Hash identifier: V9sIbtvN88X+7j/Ij7Gr/9GU+aQCDNf733Z8xx8yQMo=
Subject key identifier: D4:CF:37:30:D2:28:78:55:54:A3:1E:17:3D:BD:EB:8C:1F:5E:AD:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013249
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66038E32F43B11EF8F7B4AA3762E951A.roa
Signing time: Wed 26 Feb 2025 12:15:43 +0000
ROA not before: Wed 26 Feb 2025 12:15:36 +0000
ROA not after: Sat 19 Feb 2028 12:15:36 +0000
asID: 17561
IP address blocks: 45.198.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78409 (0x13249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:15:36 2025 GMT
Not After : Feb 19 12:15:36 2028 GMT
Subject: CN=67bf05ee-d8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:aa:16:28:6c:b9:6a:da:72:a5:ec:cd:d6:
1f:b4:5a:f4:85:d0:dd:da:a8:38:5a:29:a4:52:51:
93:e4:37:7a:4e:12:17:57:4a:23:45:fc:34:7e:3b:
df:b4:a8:c9:02:ef:56:de:3d:57:7e:ef:ad:0a:f6:
fd:b8:af:cb:67:e6:5a:a2:6f:71:0a:7b:a7:54:5e:
f1:be:04:e0:47:55:74:2f:37:c4:0c:b9:0b:a4:10:
e5:51:27:53:da:77:b2:8b:09:40:6e:44:bb:3d:9a:
3b:2d:20:0e:b6:8d:95:25:c0:ff:3f:dc:25:0f:3e:
f6:07:b5:fd:b8:39:7b:e9:a7:9b:bf:cc:ad:6e:44:
b0:ea:d9:2a:51:7b:c6:02:4d:8d:93:f3:f5:45:ca:
38:a4:0e:79:df:7d:3b:4e:35:32:ed:72:2f:75:9b:
e4:47:d7:f3:0a:f2:09:b2:be:aa:d5:99:ed:65:bb:
ed:c8:57:7d:3a:6d:f6:6c:e5:f6:a1:6d:24:4a:68:
10:10:0d:be:09:53:0c:17:47:59:7f:69:40:5a:53:
18:05:78:af:42:28:33:d6:51:a6:b0:0c:a5:c7:9d:
86:94:c4:a7:af:b4:35:3f:a7:f3:a1:4b:49:ec:66:
c6:7c:51:ac:e5:6b:df:5d:76:6a:b8:26:bc:61:c7:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CF:37:30:D2:28:78:55:54:A3:1E:17:3D:BD:EB:8C:1F:5E:AD:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66038E32F43B11EF8F7B4AA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4f:88:c6:74:ab:51:e3:72:61:fb:ec:40:88:d7:35:89:2e:
fa:72:5d:d3:88:56:d1:7b:75:44:c5:41:46:27:90:f0:b7:7d:
b1:a9:37:89:b3:c2:c0:11:f9:53:77:54:db:27:5f:6f:71:30:
4c:73:47:8e:21:08:3b:a5:09:21:af:61:1c:99:6d:12:64:32:
53:05:8c:72:b7:bf:a2:e1:11:f2:51:b3:b6:eb:d8:fc:5d:f7:
c6:e6:56:d0:8d:95:fa:27:5f:44:ed:46:0d:c1:31:0b:83:df:
82:08:a6:06:8f:6a:d2:1e:b7:79:d6:58:a9:f7:78:e9:c6:f7:
2c:12:50:49:f9:4c:87:9b:98:d9:48:0a:84:5c:de:50:a0:2d:
fb:d9:22:c0:c5:4a:b7:b8:81:a2:95:99:d8:60:e4:50:f5:86:
1f:9e:bd:7c:ec:4b:b1:f5:11:34:4f:2b:b9:f8:3b:e6:00:7d:
99:fa:c4:64:43:2f:ed:c1:f9:0a:0e:f3:b4:4a:e2:87:6d:54:
81:ec:31:7e:a6:ba:a8:09:af:0f:f2:09:f6:87:90:41:73:12:
dd:d6:ea:94:88:24:4e:74:ae:de:ba:b2:8b:c2:0e:04:75:bf:
d7:eb:9e:c3:8d:96:82:8e:86:44:87:38:35:3a:dd:14:8d:a7:
31:b9:f6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:37 2025 by rpki-client