Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AEA2A00F5C811EFA00DBA5C762E951A.roa
File: 9AEA2A00F5C811EFA00DBA5C762E951A.roa (raw, json)
Hash identifier: 7rkKqI//gYfaclcsM+2R26WMWBom90JGTTUem5dEWFs=
Subject key identifier: AF:0F:48:D9:C6:C6:16:81:2D:BE:2C:52:74:9C:FF:74:7C:F8:BA:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AEA2A00F5C811EFA00DBA5C762E951A.roa
Signing time: Fri 28 Feb 2025 11:39:01 +0000
ROA not before: Fri 28 Feb 2025 11:38:54 +0000
ROA not after: Sun 30 Mar 2025 11:38:54 +0000
asID: 138995
IP address blocks: 45.192.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81209 (0x13d39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 11:38:54 2025 GMT
Not After : Mar 30 11:38:54 2025 GMT
Subject: CN=67c1a055-911b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:29:4c:bf:85:78:2d:aa:1d:b6:a9:ab:58:
c5:23:46:da:c9:dc:b0:32:96:67:27:52:eb:2e:a3:
cc:db:72:2d:3c:b4:39:db:06:3b:ae:05:6b:60:5f:
56:19:93:25:a6:08:bd:70:76:ad:58:3f:cf:33:b4:
40:62:cc:f0:16:fd:c4:73:27:96:af:99:78:fd:9e:
7f:37:e9:af:ca:56:93:8d:6c:6e:39:3b:f3:6d:c9:
12:a4:09:82:9a:8a:b5:c4:37:0f:1d:d7:57:c2:c9:
04:1b:80:80:f5:c4:63:2b:5e:9d:61:26:e2:82:d0:
15:e6:bf:bb:7d:01:73:e3:b2:6a:0d:85:06:86:a9:
eb:2e:57:7c:96:e1:bf:dd:af:d0:5c:53:74:81:65:
21:63:61:38:22:fd:30:9e:3b:b3:72:31:b2:23:e6:
fd:60:97:8f:a3:12:b3:b8:78:89:b1:62:46:5b:39:
26:61:d5:c8:79:96:f9:83:14:8b:08:9e:fc:04:f5:
71:04:05:ac:81:1e:5f:94:c3:b6:b2:36:69:50:03:
1a:cc:3c:a2:10:d1:a9:bb:05:69:34:c3:e0:79:cc:
2e:d6:8c:a5:56:b3:91:b2:4f:8d:7c:3c:6b:29:8b:
53:3e:9e:f3:f7:3f:af:6e:e5:ed:04:58:11:2e:6b:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:48:D9:C6:C6:16:81:2D:BE:2C:52:74:9C:FF:74:7C:F8:BA:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AEA2A00F5C811EFA00DBA5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c8:69:1f:b6:59:1f:7d:40:ef:7c:69:58:17:47:8e:10:56:
95:bb:8e:e9:49:33:96:55:60:16:3c:35:fc:ac:63:f5:99:ba:
a3:56:7b:41:ef:c2:09:63:75:c4:31:0c:ef:d4:32:40:c6:c7:
49:93:f2:50:29:bd:bd:f0:ad:ab:3e:f9:33:25:ea:d8:b0:ee:
62:94:75:2a:fe:df:05:91:a8:7c:c5:66:03:4b:b2:80:c8:da:
ff:39:72:e5:ab:75:e5:58:60:ef:4b:cd:bc:56:9d:74:d9:13:
d6:80:22:68:89:38:38:7b:59:f6:87:f7:b1:94:55:04:84:dd:
6c:a6:ea:d4:de:d4:79:08:e2:8a:51:f0:96:22:41:cb:bb:23:
68:d0:5b:af:d6:3b:a2:83:76:9d:f7:0b:b4:2f:5d:f4:a7:27:
83:cb:29:51:f2:50:78:47:47:56:48:f8:d9:b3:52:9d:9a:f5:
26:65:28:39:47:f7:cd:e9:a3:53:e3:5e:9d:a2:f6:fb:1a:fd:
60:af:8b:32:2c:0e:34:f7:5e:16:0d:f6:16:3a:e4:0c:cd:ea:
6d:a9:8a:c7:fb:fa:e9:f3:b5:7d:53:ed:43:7c:82:ff:28:5c:
f8:04:95:06:66:a1:39:5c:ba:9b:ec:8a:3d:cf:04:07:16:48:
8c:d2:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:14:25 2025 by rpki-client