Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ABFBCF4F99511EFBDCA21B5762E951A.roa
File: 9ABFBCF4F99511EFBDCA21B5762E951A.roa (raw, json)
Hash identifier: s/a0OaR3duAAylG6zoCZL6gurbsx2H/3DzdAMIZTSIw=
Subject key identifier: EE:D4:85:22:26:A3:3D:2A:AB:14:DD:EF:ED:17:DA:33:C9:66:7B:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01432C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ABFBCF4F99511EFBDCA21B5762E951A.roa
Signing time: Wed 05 Mar 2025 07:44:02 +0000
ROA not before: Wed 05 Mar 2025 07:43:57 +0000
ROA not after: Sat 12 Apr 2025 07:43:57 +0000
asID: 272887
IP address blocks: 45.192.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82732 (0x1432c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 5 07:43:57 2025 GMT
Not After : Apr 12 07:43:57 2025 GMT
Subject: CN=67c800c2-43e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:c8:81:0b:1a:5d:eb:f3:a6:de:67:ac:1e:
44:1b:eb:be:51:42:92:d7:97:cf:a9:be:b5:cc:76:
01:45:40:88:28:61:47:26:52:3e:d0:9a:b3:fd:c3:
1c:61:2a:f3:96:b2:34:4a:f7:05:1e:2c:8a:03:8a:
5f:c1:6c:df:78:49:c0:b3:b6:f1:72:7b:c9:17:56:
60:ed:7e:d2:e9:a8:18:d8:b3:3f:a2:2b:31:40:c9:
cd:43:5e:da:4c:dd:10:2b:da:3a:b7:72:a7:63:fe:
92:7b:a2:3e:4b:fb:c2:6d:91:65:4f:25:04:9f:8b:
21:0e:33:01:01:49:36:23:ab:7c:88:c5:ef:40:75:
40:11:f8:cf:4b:f1:83:b2:0e:de:d3:77:01:00:99:
08:b6:6e:de:ef:fd:22:3c:59:1f:1b:e6:82:70:c2:
09:b0:3f:1f:df:c1:48:06:4d:c6:ff:14:14:cd:33:
12:9d:ec:19:36:9a:ee:76:36:c7:a5:fc:83:3f:ef:
1a:1c:4b:25:38:d6:36:07:3f:62:ce:48:40:6a:62:
88:18:c4:82:28:df:50:b1:0c:0f:c0:3a:61:62:d8:
ef:68:8b:ba:57:c5:f6:65:c7:1d:ce:eb:3b:e3:fe:
a8:50:ff:07:b1:91:1b:79:e2:f9:29:20:de:02:73:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:85:22:26:A3:3D:2A:AB:14:DD:EF:ED:17:DA:33:C9:66:7B:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ABFBCF4F99511EFBDCA21B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a0:66:7c:94:02:35:bc:c5:b9:33:23:68:bd:26:27:bb:84:
20:27:3c:11:55:e5:0b:37:18:66:16:e8:c6:6a:db:90:81:8c:
e4:ab:2f:87:ff:76:18:31:f1:8d:73:82:a9:c7:6d:f6:48:66:
90:42:0d:41:01:ad:20:5b:61:e0:f3:10:33:bd:bc:6a:15:d6:
34:54:6a:ad:3a:2c:c5:3a:3e:d5:02:e3:1d:b8:83:d8:13:2d:
ac:37:40:01:9e:5d:a7:23:8e:17:bb:a3:18:ef:a8:b1:40:39:
28:85:6c:fd:0f:f4:c4:1a:ef:4e:cc:5c:f4:7c:82:06:96:4e:
c8:fe:ef:5a:8e:78:00:b1:79:1d:8a:d6:29:c1:47:e4:69:f4:
50:3e:73:c5:31:a1:e6:ee:a0:00:eb:66:55:7b:d7:6a:2f:d8:
4c:4b:7a:78:59:c1:fe:cb:61:d8:e4:dc:da:b9:6a:62:03:52:
9b:12:cb:87:df:c9:78:64:36:52:7a:a4:aa:eb:33:d1:3f:ff:
5b:88:58:d4:3b:ff:91:50:43:a4:8a:ed:58:82:84:d5:43:52:
f1:a6:cc:37:f6:3f:f2:a4:e5:51:db:ef:b1:73:02:42:b2:9c:
f2:60:a4:29:03:30:da:a1:2e:cd:14:b3:ab:a5:fa:19:a7:88:
9d:5b:9b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:59 2025 by rpki-client