Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86B0BF58F43411EF96BB1274762E951A.roa
File: 86B0BF58F43411EF96BB1274762E951A.roa (raw, json)
Hash identifier: gRgG/sxVui75oDppAyhwedAMvYrp2gdWk1oq/cuVyC0=
Subject key identifier: 12:7C:56:29:4E:AD:9C:DA:E7:59:D1:C2:E8:F0:0D:64:16:7A:30:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86B0BF58F43411EF96BB1274762E951A.roa
Signing time: Wed 26 Feb 2025 11:26:31 +0000
ROA not before: Wed 26 Feb 2025 11:26:27 +0000
ROA not after: Sat 19 Feb 2028 11:26:27 +0000
asID: 17561
IP address blocks: 45.196.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78279 (0x131c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:26:27 2025 GMT
Not After : Feb 19 11:26:27 2028 GMT
Subject: CN=67befa67-4f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:3c:28:b8:fa:bb:23:c3:d8:32:29:c8:3c:
29:0e:a6:be:9d:08:25:5b:c1:71:a3:c5:91:50:3f:
fd:79:ba:25:73:5b:01:b6:71:36:3a:a0:c6:e2:b7:
8d:c8:ff:20:ed:cc:7e:b2:c2:f5:fe:e2:43:d5:3f:
27:c9:46:f9:79:6a:f4:90:fa:af:10:d6:4b:f0:23:
7b:f9:e6:a0:76:01:24:61:8b:2f:ed:12:c1:96:f2:
db:28:db:43:12:25:10:ef:df:d9:c0:c6:d2:0e:a5:
a7:49:a3:80:dd:a6:be:69:20:75:a6:48:ff:53:7b:
65:64:62:5a:f2:fe:06:5c:fc:51:44:76:85:60:51:
bd:3c:fe:34:94:67:88:c4:1e:0e:1c:5a:02:87:bd:
49:b9:bf:c6:16:c6:61:96:8c:74:33:27:7b:03:ef:
f2:5c:a8:83:b3:d7:33:f9:a3:9d:6b:43:29:a4:c6:
37:b5:3f:ed:35:be:52:7b:54:36:d7:f0:3a:67:77:
35:1b:4e:33:fe:f2:a5:c0:d5:5a:7b:08:d8:2a:03:
4a:46:6f:cc:d6:a8:8c:e7:fd:6a:a6:ed:c5:d4:18:
8a:f0:7a:d4:a8:88:6d:b3:d4:a2:38:de:07:59:12:
4e:0d:0d:5a:27:db:0b:42:3c:2f:8f:59:16:dd:22:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7C:56:29:4E:AD:9C:DA:E7:59:D1:C2:E8:F0:0D:64:16:7A:30:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86B0BF58F43411EF96BB1274762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.5.0/24
Signature Algorithm: sha256WithRSAEncryption
03:45:8a:67:ea:92:ae:c4:ee:f3:bd:7e:ad:18:ae:b9:ec:33:
20:ad:70:60:28:e8:21:16:67:ce:63:67:bc:fc:9f:97:79:c8:
52:9e:22:f5:24:2e:36:d6:9f:cf:9f:c9:00:61:e0:f7:3f:f8:
35:37:55:54:7b:56:be:8d:9a:0e:d2:76:83:37:52:28:44:59:
d7:98:30:a4:5b:c3:0e:79:cd:b6:9d:2f:c5:43:d9:c4:fd:20:
a1:8a:25:5c:82:f2:49:74:2c:30:08:8d:b8:6e:cf:4b:41:cb:
0d:07:8b:12:10:0f:54:3e:0c:0f:64:bd:44:47:ef:dc:38:63:
41:48:a6:04:14:c6:2e:1c:dc:e5:c3:3f:c9:db:05:b1:02:29:
88:fc:88:1e:c5:dc:c7:5f:6a:71:57:d2:29:f6:d5:46:b8:27:
a0:4c:81:63:a8:76:5b:de:cf:29:7f:31:8b:c2:0d:ff:87:ee:
08:37:af:27:40:3f:fe:b8:24:bb:73:a9:7d:e2:7e:dd:d6:b5:
ae:af:07:d1:26:45:08:c9:6d:99:14:b7:47:ae:70:77:d1:a0:
31:74:7a:fd:f4:93:d5:3e:54:97:ab:ff:35:0f:6d:84:74:11:
e3:a4:71:5d:cb:94:71:b4:a2:3a:20:84:69:ed:9f:db:a2:7b:
2f:e9:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:25 2025 by rpki-client