Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE85750F5D711EFB9DB4242762E951A.roa
File: 7EE85750F5D711EFB9DB4242762E951A.roa (raw, json)
Hash identifier: nzMZT02yI3qlAQ2xYze2n0MnlD0RKB0Z2qmKj5BPtdQ=
Subject key identifier: EC:BE:16:4A:F5:19:52:6B:09:43:CF:8D:3A:3D:3B:A1:7D:C3:90:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE85750F5D711EFB9DB4242762E951A.roa
Signing time: Fri 28 Feb 2025 13:25:37 +0000
ROA not before: Fri 28 Feb 2025 13:25:33 +0000
ROA not after: Sun 30 Mar 2025 13:25:33 +0000
asID: 203020
IP address blocks: 45.198.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81381 (0x13de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:25:33 2025 GMT
Not After : Mar 30 13:25:33 2025 GMT
Subject: CN=67c1b951-c857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:dd:e7:b1:66:1c:c3:9f:2b:d4:c9:ba:68:
55:db:a0:92:4e:53:24:23:ab:21:2d:ae:b2:49:cc:
cf:bb:73:0e:ac:08:ac:a9:e1:1c:03:7f:5e:93:68:
92:8d:c5:e9:82:3d:c9:3e:28:53:97:83:ec:a7:37:
4b:74:b3:00:4c:be:db:91:51:14:bb:c2:18:5d:a0:
f7:a0:a4:c4:bc:44:b6:ea:5a:b8:25:02:b5:b6:90:
36:c0:b8:0e:6e:63:ce:86:71:e6:8c:b4:6d:27:8b:
ea:08:22:51:aa:0b:54:50:dc:78:97:2d:51:b2:71:
e8:e4:65:00:16:90:85:ad:2b:4d:5c:d2:ae:68:f4:
b2:c2:1b:12:f8:e8:64:4c:57:b0:a3:9a:b4:65:f1:
0b:58:c0:fb:c1:6b:3b:25:0d:f8:38:b4:d1:e2:3d:
53:bf:ca:26:72:97:9f:99:d6:5c:30:39:15:31:c0:
9a:13:52:32:9d:c7:84:dd:ae:1f:99:9b:06:13:89:
cf:d9:bc:2c:36:2e:f9:fb:17:05:c8:46:7c:57:60:
d0:b9:bd:da:f2:88:a8:6d:c8:5f:68:c2:6f:63:63:
d5:c6:2d:4a:25:f6:f4:13:ae:81:14:22:c6:95:fb:
44:eb:a9:80:4e:f0:15:bf:68:ad:93:90:a2:7a:c3:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BE:16:4A:F5:19:52:6B:09:43:CF:8D:3A:3D:3B:A1:7D:C3:90:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE85750F5D711EFB9DB4242762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.44.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:43:6f:69:93:73:29:a9:a4:b5:82:70:51:be:9e:2b:22:d5:
62:5d:9c:2b:c2:87:56:84:e2:54:49:71:3e:10:d8:d2:98:8a:
0d:2f:a1:b9:c1:5e:4b:bd:5a:d3:9d:db:24:70:8d:37:dd:5f:
3a:53:e5:17:c9:a5:67:74:ca:a6:b8:6c:38:12:3a:09:a4:e8:
c9:65:49:e6:67:24:e1:d5:e4:14:e0:ce:e4:a0:4e:92:a2:86:
75:d2:3f:ea:0e:ca:f1:69:bd:4d:66:9f:c5:9b:86:1a:7f:10:
dc:eb:bc:e4:62:9d:2b:cf:31:82:3d:e2:f0:e1:89:d9:ff:af:
21:1a:28:a4:01:5b:07:7b:74:0b:ce:23:46:fc:8e:bd:50:a3:
b8:cb:45:55:20:54:1f:f6:78:b8:94:16:26:35:49:21:e9:a0:
5a:28:5a:90:b7:c5:08:ef:77:ff:6e:00:2d:ab:b8:7b:30:af:
3f:02:90:7c:84:14:93:4b:73:e9:14:7c:03:63:12:1e:bd:60:
64:94:13:b0:59:74:f4:04:88:02:8f:89:68:76:57:2f:e8:12:
d5:52:be:d1:04:27:ca:3c:c5:9d:3b:85:37:25:b4:22:8f:ce:
a3:1f:0a:36:6a:90:83:fc:2b:c0:f5:59:c1:9a:73:49:db:11:
9e:87:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:07:44 2025 by rpki-client