Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67C618FAE54C11EF829E1D73762E951A.roa
File: 67C618FAE54C11EF829E1D73762E951A.roa (raw, json)
Hash identifier: plEKWBEb6Re5n2k6bRHEHyw1Jw/if2BUiDhX30nXsL8=
Subject key identifier: D2:BD:3B:79:58:85:64:00:95:20:27:F5:0D:7C:C4:CF:88:33:C2:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67C618FAE54C11EF829E1D73762E951A.roa
Signing time: Fri 07 Feb 2025 12:09:39 +0000
ROA not before: Fri 07 Feb 2025 12:09:36 +0000
ROA not after: Fri 21 Jan 2028 12:09:36 +0000
asID: 17561
IP address blocks: 45.192.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73049 (0x11d59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 12:09:36 2025 GMT
Not After : Jan 21 12:09:36 2028 GMT
Subject: CN=67a5f803-6ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:de:a7:df:eb:b9:d6:57:b7:d7:a0:92:f8:
35:1f:28:11:98:48:ed:99:e7:74:ca:a4:6d:76:4d:
0c:91:ab:85:aa:82:e1:ee:8c:a5:4b:fe:cd:38:4d:
7b:97:f9:c1:74:b7:c7:f0:05:5c:8a:5d:57:d3:28:
ba:f3:78:e9:72:29:61:62:92:90:3b:da:11:29:5e:
9f:bf:c2:e4:30:73:63:56:0b:99:88:c2:58:9a:25:
5e:0b:2d:b2:b6:99:c0:40:38:f1:9f:3b:9a:12:c6:
3c:76:67:3d:84:11:d1:d4:ad:42:5e:f0:60:cd:09:
58:99:f2:82:39:64:8a:6a:96:73:ba:c0:28:6b:ec:
aa:f3:92:ac:61:18:c3:d8:5f:c6:f6:b8:e5:52:7c:
69:35:b1:4b:af:a1:d1:40:ea:37:e4:9c:23:5c:3c:
1b:f2:80:23:d2:0a:12:2f:0c:40:ac:7e:88:b2:93:
54:34:86:22:d1:6a:50:18:3b:9c:c5:9e:60:e3:10:
57:79:05:e8:1a:42:a9:ce:c6:b7:97:d5:e2:80:2f:
d5:14:c5:ca:87:c7:f0:5a:11:c3:39:68:45:30:13:
dc:bc:f7:76:39:56:8d:d7:bd:d1:54:04:f5:ed:1b:
a1:08:d8:80:f2:80:8b:41:7a:80:3f:60:34:8e:a9:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BD:3B:79:58:85:64:00:95:20:27:F5:0D:7C:C4:CF:88:33:C2:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67C618FAE54C11EF829E1D73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b0:b3:e4:47:f3:87:f0:d0:4d:86:42:7b:a5:b4:5c:43:c3:
67:e6:04:a6:e6:eb:18:d5:a8:15:29:00:1c:1c:11:5b:d4:3d:
fe:0e:e5:9b:6e:ba:e3:43:c5:5a:44:cf:79:9a:00:3a:94:b0:
86:4c:e4:d0:e9:c7:3d:61:dd:d5:c0:ac:f6:8a:a5:f8:74:fd:
04:47:e7:63:cb:07:de:b0:a0:19:43:45:13:ff:3a:fb:32:e8:
5b:77:d7:97:c7:e9:67:66:56:ef:b4:69:75:3d:d5:d5:3e:9b:
27:c6:2d:c0:a4:f4:4e:aa:14:56:de:ed:c7:ea:ec:10:a0:b8:
ae:79:af:de:2b:0a:42:c8:59:43:76:d5:91:f0:30:c9:04:87:
53:47:3c:af:7e:05:99:6f:2a:89:5f:ef:42:1e:cc:17:ee:c9:
1b:e7:44:51:68:87:be:79:4e:79:25:55:0a:e2:ae:8f:16:8c:
60:d1:16:05:11:c1:b9:60:c4:4a:2d:37:14:f0:a1:69:4d:34:
20:26:cf:96:2e:21:c2:15:47:c7:0d:08:2a:79:20:b6:9d:a1:
c0:8f:87:fb:36:25:6d:af:4d:04:79:14:d5:23:16:db:79:f5:
ba:5d:53:cc:4a:90:35:a0:3a:02:0e:57:90:8f:96:ae:4b:8f:
3f:26:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:46 2025 by rpki-client