Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9100BCD2F43511EFB6291D7C762E951A.roa
File: 9100BCD2F43511EFB6291D7C762E951A.roa (raw, json)
Hash identifier: Ahy5zo2VtpUf66AGN534IhqXacl5UxxJOwPjGr3bQA4=
Subject key identifier: 38:6F:2A:EB:22:E0:96:E5:7B:EC:04:34:AD:CD:C8:7B:D9:BE:59:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9100BCD2F43511EFB6291D7C762E951A.roa
Signing time: Wed 26 Feb 2025 11:33:57 +0000
ROA not before: Wed 26 Feb 2025 11:33:54 +0000
ROA not after: Sat 19 Feb 2028 11:33:54 +0000
asID: 17561
IP address blocks: 45.196.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78289 (0x131d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:33:54 2025 GMT
Not After : Feb 19 11:33:54 2028 GMT
Subject: CN=67befc25-f31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:ac:0d:f6:cc:50:de:58:a7:fd:1a:52:c3:
09:78:59:6c:d0:df:41:53:51:cc:72:78:83:85:3b:
5a:5c:f8:b1:aa:37:34:9d:46:bf:c3:3b:55:2c:fa:
ff:81:21:53:f8:9e:db:e3:3b:98:c3:9a:19:81:d4:
35:cc:5d:4b:25:a9:fd:c5:9e:38:34:b6:94:b1:34:
80:10:50:1c:99:35:f0:50:9f:91:73:97:39:a4:cd:
34:82:14:1a:23:2c:21:e7:19:d2:b3:01:76:56:7f:
79:87:ea:56:5a:cc:d6:1b:cb:e6:3b:f9:2c:80:2f:
4b:ae:56:09:eb:3c:fe:e9:53:c1:08:30:f4:4a:3e:
e9:ff:28:d1:4d:6e:c1:1d:da:b8:e0:3a:f9:7b:88:
5c:15:cc:34:29:ec:be:82:5f:72:50:e8:2c:42:59:
df:47:c1:eb:74:50:fe:28:31:3f:62:bc:01:99:57:
a0:fa:72:64:b7:50:44:7a:e6:92:82:78:c6:8f:bf:
9c:0d:f4:ef:86:87:2c:7f:04:01:36:c6:ad:a1:bf:
57:5b:a3:21:07:a0:11:49:44:e1:32:d2:4f:22:7a:
2c:15:08:65:bc:cc:c5:18:e9:58:aa:28:df:78:6c:
f9:17:66:73:7a:02:34:c4:54:2f:16:f1:b5:96:f0:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6F:2A:EB:22:E0:96:E5:7B:EC:04:34:AD:CD:C8:7B:D9:BE:59:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9100BCD2F43511EFB6291D7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:93:16:7d:6e:15:f4:8b:d7:8b:1b:d9:72:00:a0:5a:37:97:
72:c3:de:61:03:0b:06:81:b1:d4:bd:5e:54:f8:6a:8e:dd:68:
82:5a:30:31:ac:f6:64:98:fe:b7:09:74:f1:96:85:1c:12:3b:
42:f1:4b:b6:38:1d:0a:d8:86:14:0e:4d:89:82:c1:9e:fa:8b:
27:3c:68:a1:8c:97:87:99:f5:be:cc:71:f3:f8:22:48:ad:4b:
e9:e4:62:f6:01:07:dc:a2:60:66:59:de:c7:a4:9d:e8:20:51:
b0:4c:66:32:7d:60:ee:a8:c4:b2:e7:1f:30:39:fa:8d:55:47:
3e:8e:7e:ec:d4:51:3b:39:e8:12:41:c1:bb:dc:78:d9:e6:8e:
b4:87:f8:3e:92:1e:92:0f:a2:72:fa:88:ba:38:da:33:bc:28:
1e:73:10:a7:e3:4b:ba:6e:19:23:64:20:61:d9:16:56:ac:87:
60:fa:fe:a5:9d:95:ca:6c:d2:5d:14:f1:7e:bd:bd:8a:96:c2:
60:76:c4:32:5f:71:e9:a1:d0:7b:73:6b:2a:26:07:dc:95:8d:
8a:35:8d:29:bd:a0:a2:9b:1a:b0:96:b0:53:7b:3c:25:e5:7e:
73:7d:49:b0:36:14:30:e7:7b:e8:9f:78:94:04:ab:48:eb:b4:
d9:4f:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:27 2025 by rpki-client