Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD6F60AF5BD11EF8B10BE8F762E951A.roa
File: 8DD6F60AF5BD11EF8B10BE8F762E951A.roa (raw, json)
Hash identifier: 5Q3wgsMUL+EvLwBuhydzB6KkW1NYAvrIFGSmQ5DJ3Mo=
Subject key identifier: 09:3C:F3:26:B7:AF:DD:6E:06:93:5D:2F:5A:9E:C0:D8:2F:46:B3:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD6F60AF5BD11EF8B10BE8F762E951A.roa
Signing time: Fri 28 Feb 2025 10:19:55 +0000
ROA not before: Fri 28 Feb 2025 10:19:51 +0000
ROA not after: Sun 30 Mar 2025 10:19:51 +0000
asID: 138995
IP address blocks: 45.192.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81161 (0x13d09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 10:19:51 2025 GMT
Not After : Mar 30 10:19:51 2025 GMT
Subject: CN=67c18dcb-3750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:5a:ae:2e:06:ac:56:cd:36:a2:57:98:13:
3e:eb:82:a0:b9:ea:64:a6:7b:ae:39:8b:8e:ee:84:
3b:4a:a4:50:f5:b4:d4:4c:93:42:bb:54:c7:2e:ff:
82:02:38:0d:30:b0:9f:84:2f:53:e8:89:10:37:14:
a0:d7:8c:2e:fb:86:f5:dd:9b:4b:fa:df:0a:e7:71:
69:df:15:19:8d:1c:81:11:a4:0b:e1:8d:53:fc:9f:
b8:be:f6:fe:85:65:e3:b2:66:dd:13:d7:d8:48:49:
ad:4a:1d:21:f4:8c:28:54:15:1e:34:df:54:a5:98:
d3:2a:6b:81:6b:cb:b9:a1:04:e6:8e:49:b5:70:ea:
88:37:73:0a:0f:13:9e:d2:e5:ec:df:18:11:f0:cf:
84:0c:42:f4:af:38:0e:c3:16:a6:2b:45:30:5c:40:
db:5e:ce:82:e5:f6:db:13:f2:73:0a:b1:f5:ca:4a:
03:1c:03:98:ce:ca:37:32:12:b3:34:2e:64:2f:8e:
3b:0c:cf:75:f6:b3:4e:df:7d:1c:dd:15:89:a2:73:
50:7e:17:b9:e7:17:3a:36:4a:5c:5a:fb:3c:a8:85:
0f:99:b1:bb:b4:47:9b:46:29:11:28:7a:e5:fb:46:
1c:dd:f0:d6:2a:bb:17:9b:df:f8:1b:cc:8b:7d:e8:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3C:F3:26:B7:AF:DD:6E:06:93:5D:2F:5A:9E:C0:D8:2F:46:B3:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD6F60AF5BD11EF8B10BE8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.224.0/24
Signature Algorithm: sha256WithRSAEncryption
28:61:61:cf:69:30:3f:c6:39:3b:bb:0d:9a:09:88:ec:be:00:
85:75:63:15:b7:08:7e:78:7c:7c:fe:14:08:6c:63:a3:6f:44:
99:d9:dd:23:5f:6d:e8:65:43:ca:4b:89:ba:5f:9f:a4:42:24:
31:77:1d:9d:9d:47:b8:ba:4c:09:02:67:13:4b:88:2a:60:50:
e0:45:f2:ff:16:5b:a9:26:53:49:ca:d3:52:90:fc:e7:53:2a:
b6:aa:1e:c0:0a:46:3b:4b:00:c8:9c:ce:85:f5:eb:df:ee:66:
8c:97:41:b5:f3:33:5b:b6:58:97:0d:d9:c7:33:73:86:65:98:
7b:5b:8d:08:fe:a6:fa:97:42:a8:ed:be:46:46:3e:24:ba:d2:
bf:02:a2:0b:6c:65:af:77:f6:ca:d5:c9:b1:c1:d2:27:e1:22:
fa:83:51:6e:d8:a5:2e:8f:9e:71:8f:e7:48:85:f6:db:5a:db:
d7:bd:29:e9:ee:a4:d8:f3:9f:d3:e4:12:0e:e8:46:3e:c9:7c:
87:f8:a9:ca:86:bc:fb:78:b2:7b:e0:ab:f1:04:21:cb:57:d4:
50:da:44:1c:56:6e:da:25:5d:ff:27:50:b3:de:7f:ba:02:72:
9f:00:aa:77:e6:f2:bf:f5:e8:19:d2:9c:f6:32:6a:ad:b0:9d:
92:d4:93:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:18:57 2025 by rpki-client