Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BDB7CA2F5D511EF974AE3B2762E951A.roa
File: 6BDB7CA2F5D511EF974AE3B2762E951A.roa (raw, json)
Hash identifier: VnWke6Aw/GGZwE8ePqfeIg+8zzTzn+lnQpYepjNY3k4=
Subject key identifier: CB:32:0A:48:A2:F5:08:27:DE:C5:95:CA:45:CD:8B:88:05:31:D0:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BDB7CA2F5D511EF974AE3B2762E951A.roa
Signing time: Fri 28 Feb 2025 13:10:46 +0000
ROA not before: Fri 28 Feb 2025 13:10:42 +0000
ROA not after: Sun 30 Mar 2025 13:10:42 +0000
asID: 203020
IP address blocks: 45.198.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81365 (0x13dd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:10:42 2025 GMT
Not After : Mar 30 13:10:42 2025 GMT
Subject: CN=67c1b5d6-2e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:3a:18:b8:d1:38:87:03:7b:a7:e3:05:b1:
f7:aa:ab:0a:b0:20:22:fc:dd:8d:88:55:0d:a2:71:
c2:db:a7:55:04:23:9a:74:f5:62:f6:ca:f2:f9:08:
4b:8c:44:2a:76:0e:f3:22:ad:a4:5a:c5:09:df:35:
5c:04:dc:98:a0:5a:87:05:ec:79:34:f1:31:9a:81:
ab:e7:75:6d:cf:89:8e:0a:b6:f6:d0:ca:8b:33:60:
0d:d9:d3:89:5f:01:c3:a6:17:f4:1c:db:c1:84:03:
11:55:7b:d6:02:8b:66:d6:b9:df:a8:b4:61:dd:3b:
40:7f:60:7c:8a:03:57:1b:57:9b:b7:0b:d5:a5:70:
83:df:f3:d8:e6:49:86:7d:a2:a3:cc:b7:37:f7:2c:
47:7e:22:df:05:15:a0:3b:ae:c3:99:00:76:f9:5a:
ff:1c:5a:74:df:5b:db:d1:29:7a:ea:69:cc:9b:55:
14:44:a3:b3:1c:b5:7b:1f:db:74:9f:02:e6:f1:cb:
83:73:2f:29:37:94:b2:1e:19:42:a0:85:ad:d1:40:
01:90:12:cf:eb:e0:2b:fe:22:fe:aa:ce:3d:50:24:
93:5d:fe:37:05:54:09:3e:c3:b6:0a:61:31:56:b5:
41:d2:9e:b0:47:a1:34:39:28:08:1d:3e:00:b4:a4:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:0A:48:A2:F5:08:27:DE:C5:95:CA:45:CD:8B:88:05:31:D0:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BDB7CA2F5D511EF974AE3B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.50.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:f9:4a:4c:2a:88:af:6c:d6:99:e4:01:c8:b3:a3:82:3e:19:
b6:55:0b:fd:e1:0b:a8:a4:ed:ec:96:57:f4:99:55:b7:5c:3e:
21:3c:88:9a:7a:ea:58:8e:64:6f:7a:7c:fa:e8:d1:4a:2c:94:
32:4a:94:71:bc:2c:c6:f9:f8:2c:3b:a8:8c:ee:bc:ed:2f:b6:
47:1e:24:ce:04:34:e3:1b:ea:09:22:c5:5b:d7:4c:61:ca:39:
66:ba:3b:79:9c:ae:c3:85:f5:71:cb:6d:29:f0:87:4e:92:0e:
7f:d1:3a:52:99:8b:14:7f:ac:03:43:54:f5:74:8e:ec:d7:44:
bd:48:32:da:4e:ab:4f:9b:88:a9:71:5c:db:86:93:ed:69:1c:
1c:75:66:2d:df:0e:d2:62:72:33:7b:26:2f:b3:4e:e7:51:7d:
46:c4:a6:79:99:21:3b:5c:20:9d:13:4e:57:a9:d9:09:7a:31:
90:d7:26:59:b5:8b:2e:0d:da:9b:8c:44:bb:dc:11:e4:05:45:
f3:cd:e1:08:f4:15:75:87:0a:9f:b6:77:99:cc:eb:d4:5b:fa:
6f:f4:b2:e7:b0:ba:87:25:a3:f1:2f:cc:65:c3:98:84:22:32:
3e:c6:38:c9:59:d3:a9:aa:52:5f:93:2c:e8:08:f4:93:bc:64:
7f:03:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:49 2025 by rpki-client