Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96CA3DB4FF3911EF958BC875762E951A.roa
File: 96CA3DB4FF3911EF958BC875762E951A.roa (raw, json)
Hash identifier: YoF3nkw70OL/9qlCx9KU3P338EQGJLtGgIE7BYz4FXM=
Subject key identifier: 1E:87:57:B4:A2:1F:B5:68:38:DB:B3:85:C9:9F:A3:32:D8:F4:31:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014567
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96CA3DB4FF3911EF958BC875762E951A.roa
Signing time: Wed 12 Mar 2025 12:00:28 +0000
ROA not before: Wed 12 Mar 2025 12:00:24 +0000
ROA not after: Thu 08 May 2025 12:00:24 +0000
asID: 137443
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83303 (0x14567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 12:00:24 2025 GMT
Not After : May 8 12:00:24 2025 GMT
Subject: CN=67d1775c-f819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:57:e7:1f:27:19:dd:f3:33:c1:4f:4a:7a:
f5:d4:fc:03:1f:85:1f:19:9a:2a:70:40:a1:c8:52:
36:73:49:96:38:87:0d:a7:b1:6c:c5:de:d9:e3:54:
f0:b3:ee:1d:57:9f:ff:53:11:15:81:dc:dc:c4:08:
55:48:39:bc:45:ab:a9:6e:23:a5:90:21:82:fb:5f:
82:34:dd:2e:93:ce:cf:1f:e5:14:ef:bb:90:b0:11:
ab:6c:16:a8:4e:4f:9c:c0:c4:23:62:3a:a2:e6:00:
d0:c0:0e:e3:29:d5:0f:22:21:23:7b:5b:ea:61:90:
a7:57:36:48:8f:21:e7:ab:77:cb:6c:0d:71:d3:5d:
95:45:4b:ae:12:7e:88:c5:40:de:f3:72:f3:84:26:
9c:fb:01:0e:0c:04:0f:01:b1:96:9e:c2:9a:d8:0e:
7c:e3:1b:52:44:46:f5:ef:fe:73:f3:c4:8e:c9:99:
54:70:8c:e2:80:4f:09:74:2e:33:90:b1:78:42:8a:
c4:00:4c:13:e6:e7:2e:8e:6e:0d:26:34:b1:df:84:
36:bd:41:9a:d7:e6:68:40:a1:11:6e:9d:8e:c0:c5:
7b:d1:18:f6:a0:69:78:91:7d:4c:8f:2c:03:89:d7:
b8:9b:89:59:26:56:d5:e0:3e:7f:9c:0e:e5:89:3f:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:57:B4:A2:1F:B5:68:38:DB:B3:85:C9:9F:A3:32:D8:F4:31:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96CA3DB4FF3911EF958BC875762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0-45.192.176.255
Signature Algorithm: sha256WithRSAEncryption
63:04:a6:e0:30:ba:7a:5f:49:69:f1:58:49:4f:b2:3c:8d:5b:
ea:18:5a:db:40:6b:53:aa:9e:ee:db:3d:60:3a:f9:e5:92:6d:
10:be:e4:6c:18:39:d3:29:a5:74:af:78:89:10:67:8c:bb:da:
1d:d7:19:35:19:1c:7b:39:d8:1c:8f:d0:17:d8:38:4a:c3:d4:
da:ea:32:7c:65:84:6e:ec:cb:b8:5d:49:f2:8e:e2:f5:71:74:
4e:9e:98:88:a4:de:aa:1c:80:8c:ab:6a:df:d1:e7:b1:fa:86:
9e:18:6e:f1:18:5c:81:be:5f:ba:bf:24:d3:2c:b5:6a:02:17:
bb:42:58:4b:7a:18:da:3c:30:6e:b9:02:7b:13:6d:92:aa:88:
df:66:73:06:ba:22:2a:84:e8:d6:d7:aa:fe:20:2d:28:01:74:
5e:9a:df:cd:f7:7d:cd:5b:bd:8c:c4:8d:44:91:8a:dc:2c:36:
6e:08:f2:1d:ba:4b:e8:9f:30:46:5e:c1:82:9c:6e:97:ef:a0:
d8:b8:88:d8:87:83:9b:93:45:30:ce:4b:86:00:6f:30:f3:18:
b5:38:5d:d2:ff:a4:21:dc:5b:32:90:83:6e:50:4a:2e:2a:c2:
c9:88:b8:95:af:cc:ca:cc:5d:cb:86:9c:0a:16:d6:14:85:8c:
81:53:42:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:11:56 2025 by rpki-client