Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92CE9DAAF39411EF95D85FA6762E951A.roa
File: 92CE9DAAF39411EF95D85FA6762E951A.roa (raw, json)
Hash identifier: 9T7NlYYqlCJUiu+UM81ndBiP91le9p39VrBGlmQ5gNg=
Subject key identifier: 82:A9:D3:F2:5B:CC:E4:43:76:50:03:36:79:F2:C5:AA:F3:29:23:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E95
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92CE9DAAF39411EF95D85FA6762E951A.roa
Signing time: Tue 25 Feb 2025 16:21:32 +0000
ROA not before: Tue 25 Feb 2025 16:21:28 +0000
ROA not after: Wed 09 Apr 2025 16:21:28 +0000
asID: 63139
IP address blocks: 45.197.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77461 (0x12e95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:21:28 2025 GMT
Not After : Apr 9 16:21:28 2025 GMT
Subject: CN=67bdee0b-aa83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:bc:a4:da:e3:03:e7:ba:fd:d1:48:8f:27:
c0:f0:ce:81:de:db:e6:7c:cc:e0:23:67:7e:a4:b2:
a4:59:cc:07:f4:d0:5c:39:1f:1a:98:7c:76:2c:ac:
e9:32:c1:3f:bd:dc:b2:a3:d0:3f:56:3f:f2:3e:73:
5d:e8:fa:70:46:d1:83:8e:17:44:ac:a5:11:ba:87:
1f:27:cf:b1:3d:c4:c9:16:1d:88:c5:bf:58:3e:7c:
2c:2f:f0:cb:4c:de:32:f9:0a:46:4a:e5:5f:04:2c:
e7:74:cf:09:50:a0:77:0a:14:c8:bb:51:71:3b:ac:
91:71:d6:21:9e:af:43:6a:2f:e6:ec:c1:ab:79:09:
e3:16:a7:5c:da:a4:26:5e:af:80:33:4e:93:37:f0:
49:28:e4:41:ae:ae:a2:09:a4:eb:8a:24:82:4b:44:
66:c8:6d:a7:e2:29:52:73:b9:27:85:c2:19:73:d6:
70:23:90:60:4f:95:af:8a:3d:4e:5e:bb:c3:f0:57:
d9:2a:11:92:f9:53:f2:8b:db:85:3f:dd:5f:6d:d9:
64:6e:44:ba:70:0f:f8:c4:94:b3:5d:fc:9f:e2:33:
14:8a:9b:ef:38:3d:60:2b:a6:af:38:ad:a7:a2:78:
18:bf:ed:44:57:ba:f6:76:ea:be:59:73:35:16:46:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:D3:F2:5B:CC:E4:43:76:50:03:36:79:F2:C5:AA:F3:29:23:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92CE9DAAF39411EF95D85FA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.118.0/24
Signature Algorithm: sha256WithRSAEncryption
28:13:48:3d:4b:10:08:73:12:17:d1:f9:da:d1:54:b6:77:09:
41:16:d0:45:52:39:b1:f7:fe:0d:96:02:bc:2b:89:b2:88:14:
c7:85:88:17:48:15:29:d6:26:6a:91:f0:8c:43:e7:03:93:84:
3f:66:e8:97:4b:52:c7:a9:6d:7f:a6:5a:be:ef:14:c2:06:82:
42:da:ea:26:1e:ca:50:a8:be:ea:d0:21:e4:cd:93:3d:e3:63:
8f:bd:c3:25:17:1d:0c:e4:3c:9f:55:b1:f4:64:c9:01:6f:42:
20:7f:a8:8a:97:1d:bd:c1:42:08:5f:da:2d:e2:91:da:08:b1:
2d:2b:86:da:92:e3:02:ae:b7:f8:a0:87:9d:31:c9:d7:fa:0a:
2e:0a:22:b2:44:9f:e8:9e:39:c3:32:5d:de:54:63:5f:60:30:
66:eb:f6:00:62:4b:24:c0:8c:6f:7f:67:d5:bf:63:bf:65:29:
50:f6:77:83:97:88:77:5f:a1:df:08:77:d7:3a:de:1c:62:0c:
78:78:bb:5b:e6:54:9e:31:01:6d:c8:ef:3f:c9:72:af:d4:96:
84:76:de:77:af:79:86:dd:da:4e:88:2a:c2:5c:c0:e7:8b:b4:
df:05:da:29:7b:35:06:20:4f:af:f6:41:ef:32:0f:af:cd:3d:
cc:96:33:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:09 2025 by rpki-client