Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C3DDF1AF5BD11EF81CC3590762E951A.roa
File: 9C3DDF1AF5BD11EF81CC3590762E951A.roa (raw, json)
Hash identifier: Ffi4LvdAAROF8phZailsp8o0SNrprCs404iFnXGNmWM=
Subject key identifier: D2:F5:38:1F:D0:72:7A:7C:CE:BE:4F:AD:7F:78:B1:A9:49:B5:9D:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C3DDF1AF5BD11EF81CC3590762E951A.roa
Signing time: Fri 28 Feb 2025 10:20:19 +0000
ROA not before: Fri 28 Feb 2025 10:20:15 +0000
ROA not after: Sun 30 Mar 2025 10:20:15 +0000
asID: 138995
IP address blocks: 45.192.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81163 (0x13d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 10:20:15 2025 GMT
Not After : Mar 30 10:20:15 2025 GMT
Subject: CN=67c18de3-d03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:1b:cf:6b:68:a5:8d:73:7f:56:52:1d:df:
3f:7f:bb:57:f4:89:35:e5:65:8e:7b:13:c3:a8:42:
99:5e:7e:99:6d:71:77:30:6d:a4:a3:c6:af:98:1f:
4e:bf:1f:0b:4c:bc:8e:3c:d8:9e:1a:79:0b:5c:e2:
67:05:83:b3:39:b8:9a:b5:04:58:7e:14:df:ff:68:
22:eb:bc:cf:81:e8:18:0c:00:ff:75:02:a5:fd:c9:
61:29:d4:26:4b:2c:b5:0a:f3:b4:0a:b8:c8:52:42:
9e:bb:76:09:4d:4c:4f:be:4d:a7:45:70:80:d1:18:
5f:d6:4f:ae:82:5c:a1:47:d5:9f:f1:f3:b7:91:c9:
e6:3e:4f:6c:96:a0:26:80:07:3a:2d:de:22:2e:4f:
59:26:51:e4:ae:67:ad:bd:cd:40:26:51:56:d1:d4:
0c:e6:f7:31:f7:e2:d5:33:d9:bc:5d:83:1f:94:08:
d1:9b:66:93:97:3d:ac:33:33:e0:00:11:58:e0:b6:
c9:19:b3:7f:86:8f:a3:fb:dd:cf:6d:b4:8a:39:90:
80:4e:2d:d1:ff:b8:2a:63:f1:77:42:94:39:46:2f:
55:42:9b:8b:cc:a6:08:27:cc:88:98:79:9f:3a:84:
85:90:6b:5c:22:f1:3f:39:10:06:de:d4:d7:cf:76:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F5:38:1F:D0:72:7A:7C:CE:BE:4F:AD:7F:78:B1:A9:49:B5:9D:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C3DDF1AF5BD11EF81CC3590762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.224.0/24
Signature Algorithm: sha256WithRSAEncryption
07:16:d2:1f:0d:21:9a:69:1d:8d:a5:06:6c:4d:0f:e3:dc:da:
3f:3a:68:cb:ec:40:fa:86:8a:69:5d:88:26:c6:78:e0:4d:8f:
5d:cc:96:3b:fe:84:a0:3a:ad:dd:a2:57:13:61:61:c3:d9:04:
2e:22:be:97:11:db:83:54:d3:96:c9:12:ba:50:40:d2:c7:01:
13:73:97:72:12:96:19:7b:70:b7:68:9d:d6:a3:54:2c:5f:29:
3f:f3:1b:25:da:a7:4c:ed:5d:4a:15:c8:6e:b5:39:5e:bf:71:
f4:e3:2a:08:3d:4a:d8:91:1a:54:29:78:ec:14:5d:c3:71:52:
b4:93:45:75:47:7e:c0:90:9b:9f:bd:46:b7:14:e5:02:c6:a0:
c7:ef:36:01:51:4b:9f:e0:57:95:53:b9:1c:c8:54:2c:c6:81:
98:15:37:c0:40:56:a5:4c:b7:0e:4d:30:63:7e:b1:be:fe:79:
60:8a:70:97:46:8b:53:b0:58:7b:90:f8:bc:d9:f7:a3:88:08:
c9:d9:1a:63:c0:38:a4:a4:32:72:de:bf:7b:e0:a6:11:6d:3c:
73:c5:ec:51:84:51:b6:ea:bc:3a:13:a1:58:82:09:dd:b8:92:
a4:63:03:a6:15:79:d9:ee:8c:2f:88:72:55:53:be:64:06:4e:
8e:a8:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:15 2025 by rpki-client