Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1ACB62F39111EF873B7391762E951A.roa
File: 6E1ACB62F39111EF873B7391762E951A.roa (raw, json)
Hash identifier: /7nYQ6EKRv7aH1Yh4+mwPl0NNuNg1mXWgMrLZB/1Pyg=
Subject key identifier: 6D:56:BC:70:14:FA:0F:8D:01:FA:64:32:47:F2:88:E8:31:AC:C9:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1ACB62F39111EF873B7391762E951A.roa
Signing time: Tue 25 Feb 2025 15:59:01 +0000
ROA not before: Tue 25 Feb 2025 15:58:58 +0000
ROA not after: Wed 09 Apr 2025 15:58:58 +0000
asID: 63139
IP address blocks: 45.197.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77443 (0x12e83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 15:58:58 2025 GMT
Not After : Apr 9 15:58:58 2025 GMT
Subject: CN=67bde8c5-27b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:96:44:c9:cb:76:ca:f7:ae:fe:b0:27:3d:a1:
ab:ef:8c:e3:10:b7:ad:95:f7:da:62:9e:ca:48:83:
15:3f:3e:d1:6b:87:98:e4:65:16:06:c2:d1:7e:79:
2b:11:72:92:bb:29:41:2c:e4:2a:b5:8b:17:68:c1:
e4:27:ab:52:2e:ad:e5:e1:b1:dc:86:32:3e:f6:30:
35:e3:e1:d5:7f:c5:69:98:1b:98:7a:29:86:1e:97:
9a:3a:ff:fb:ef:27:dd:b7:41:8b:1f:80:fa:9d:e1:
98:53:30:db:4b:94:9f:90:55:a4:5c:85:6c:15:99:
6c:51:e4:f5:b2:5b:d8:d1:d1:3d:0e:ed:b8:f0:e2:
d2:49:88:83:16:17:c9:ae:e9:15:cc:c5:2e:3f:ca:
8c:33:42:e7:43:8a:a9:55:9b:6b:bb:2e:d7:68:b1:
e5:0b:12:4d:35:74:32:1b:a0:1e:52:ac:ff:c2:24:
64:7e:f9:43:df:c9:00:51:a1:cf:cd:13:07:0a:9c:
29:6f:3c:72:35:33:6b:d0:b3:58:e7:f9:ee:34:d3:
77:86:c3:05:19:f0:41:82:cb:8e:db:14:1d:63:2a:
4d:a8:ac:0a:60:e2:78:d9:7a:ba:20:46:39:65:87:
54:44:2e:c6:07:26:7f:b2:f4:96:1b:c8:8d:e4:f9:
20:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:BC:70:14:FA:0F:8D:01:FA:64:32:47:F2:88:E8:31:AC:C9:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1ACB62F39111EF873B7391762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.109.0/24
Signature Algorithm: sha256WithRSAEncryption
22:17:ba:57:46:b1:ec:8b:b5:f0:82:e3:26:c1:25:35:08:5f:
3a:76:92:0c:c9:07:74:b7:f7:5a:d8:8d:4a:88:e2:cf:0d:18:
c4:54:42:ab:b2:fe:f3:f2:63:d6:45:dc:16:71:e5:3e:fa:cf:
66:1c:1f:fc:81:60:33:fc:a0:fe:7a:cf:1c:42:cc:cb:ab:47:
da:d3:61:21:ca:d7:c9:22:a9:56:19:d7:88:03:5f:e9:44:c6:
2d:6e:5d:61:9f:4d:be:85:f1:1f:e6:ea:72:c3:57:9d:a5:58:
a2:b0:ff:85:e8:70:91:5a:9e:2b:5a:e5:e4:18:3f:49:fc:0d:
55:25:5c:d9:7b:0d:33:a2:8e:f9:25:67:39:1d:5d:12:1f:c5:
a4:94:66:6c:7f:e2:b6:e3:9a:c5:8d:5e:3c:ce:51:aa:a7:36:
3a:50:98:ae:06:b6:55:f9:2d:1c:d9:68:84:5a:17:9a:08:d6:
b5:8c:10:ce:d0:69:f9:5c:98:06:9a:16:7c:83:fa:f0:86:bb:
b1:82:c2:3e:96:ab:a3:4e:4f:55:23:30:7c:91:39:c4:d0:d0:
16:73:2b:48:11:f9:77:44:bf:aa:23:d1:36:b8:4e:3f:2d:5c:
b9:50:a8:92:08:f7:9e:a5:b9:99:f1:3a:49:cf:26:2b:3c:a0:
c0:6f:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:37 2025 by rpki-client