Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E8686A8FB2611EF91EEE44A762E951A.roa
File: 6E8686A8FB2611EF91EEE44A762E951A.roa (raw, json)
Hash identifier: akTT2cloUfUMUjLmdHLOXIrFSpVS+7ekMF2EArx6cuQ=
Subject key identifier: 55:E5:1A:AB:28:B5:D4:6F:7D:6A:43:8D:85:45:58:25:28:25:70:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E8686A8FB2611EF91EEE44A762E951A.roa
Signing time: Fri 07 Mar 2025 07:33:16 +0000
ROA not before: Fri 07 Mar 2025 07:33:11 +0000
ROA not after: Sun 13 Apr 2025 07:33:11 +0000
asID: 141718
IP address blocks: 45.194.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82890 (0x143ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 07:33:11 2025 GMT
Not After : Apr 13 07:33:11 2025 GMT
Subject: CN=67caa13c-e802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:80:be:3c:fb:ba:68:a7:88:2e:01:bd:e6:
8d:15:3f:80:33:64:2e:4a:90:ff:3a:d2:56:c6:9c:
d5:4c:c5:7f:2c:84:19:f9:30:2f:8d:65:8c:fb:1f:
94:e5:70:83:c2:de:1c:c5:ac:6e:08:84:79:93:e4:
58:68:00:a9:b6:a6:2b:c5:5e:ba:d5:e5:9c:9b:cf:
56:9d:df:41:81:63:32:77:9d:7b:c7:71:c8:ea:9f:
49:e3:bd:9a:94:b3:ae:cd:dd:2f:c7:c7:c1:6a:47:
09:34:46:14:40:50:de:0e:97:c9:5e:48:13:9b:b5:
eb:57:25:6a:45:34:79:a4:c4:8d:0d:42:34:3d:3d:
8d:04:b4:53:d9:fe:f0:6a:11:b3:50:54:2f:07:67:
e6:04:51:f1:06:2c:53:2e:f6:cf:43:b7:cf:dc:ca:
33:97:f1:f1:a2:0e:57:76:cc:c4:64:a9:db:08:44:
5e:74:3a:ae:7e:27:e7:01:a0:df:b0:95:21:4c:a5:
51:81:95:44:b4:80:64:74:88:14:e0:da:f1:b8:6c:
6e:8a:64:3c:f0:a2:3f:ea:f6:5e:1c:c5:21:81:7a:
0c:2d:59:35:83:d9:be:70:0f:2b:5b:68:fa:db:71:
57:d6:ce:10:61:b8:a9:9d:53:9b:25:40:46:c5:68:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E5:1A:AB:28:B5:D4:6F:7D:6A:43:8D:85:45:58:25:28:25:70:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E8686A8FB2611EF91EEE44A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.86.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e0:6a:f7:38:7e:3e:ff:60:01:0f:92:79:66:80:01:57:16:
d0:fc:2e:2f:6c:fe:7b:80:56:dd:d6:e8:13:90:04:38:18:24:
f7:2d:3f:93:bd:43:0a:8a:10:81:f2:2d:1a:d2:2b:69:3f:1c:
f4:86:7c:73:94:51:c3:b6:2d:6c:fa:b7:7a:74:71:cc:b0:7b:
18:ca:47:5a:3d:f5:94:d1:c9:6f:25:08:7e:b9:5b:19:8f:d1:
64:25:bb:3d:7c:03:f9:87:e3:e4:ab:1a:74:90:ba:bf:a5:ea:
60:46:90:e6:31:e1:ec:c8:c1:ac:7b:8f:ed:1e:32:dd:87:23:
cf:02:cd:e8:ba:68:a8:ca:ea:b9:a2:1b:46:a7:e2:11:9f:0b:
46:19:97:7c:54:68:e8:50:46:ab:18:29:f4:b7:17:96:27:06:
6f:35:3b:a5:c1:f3:2c:6c:0c:6a:99:9e:3f:6d:6c:b9:40:9f:
48:2c:78:be:f7:6e:e4:04:2a:6d:05:01:a6:61:35:ee:be:ed:
5a:92:b7:eb:c3:01:7a:ef:52:3c:51:c9:68:7a:89:05:9d:69:
d4:43:3f:47:ad:7f:8d:7e:f5:e1:bf:c1:fd:c0:ed:4b:77:62:
15:75:79:1b:af:d7:39:f7:4b:92:b1:38:e7:c7:b2:22:b9:52:
39:b7:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:36 2025 by rpki-client