Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ECE94C8F35F11EFA0D0C745762E951A.roa
File: 9ECE94C8F35F11EFA0D0C745762E951A.roa (raw, json)
Hash identifier: TCvuCE98kwOHI0IuIBixn8oFGnXs9hKnggo6fUazgEs=
Subject key identifier: 11:DC:A7:8C:06:B7:46:EB:49:DD:38:2D:43:E8:5A:52:4B:8E:E5:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ECE94C8F35F11EFA0D0C745762E951A.roa
Signing time: Tue 25 Feb 2025 10:02:28 +0000
ROA not before: Tue 25 Feb 2025 10:02:25 +0000
ROA not after: Wed 09 Apr 2025 10:02:25 +0000
asID: 63139
IP address blocks: 45.197.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77322 (0x12e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 10:02:25 2025 GMT
Not After : Apr 9 10:02:25 2025 GMT
Subject: CN=67bd9534-1d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:bc:0d:27:f5:74:09:38:ed:59:9d:d7:fe:
0e:b9:85:cf:76:cf:ff:11:a0:ee:fd:1d:8d:30:84:
57:77:72:bd:cf:d4:cf:ee:71:d7:11:23:82:f3:33:
c0:db:bf:8e:07:c9:ac:ad:41:46:04:e8:f3:be:8b:
4d:5d:56:a1:97:cb:c5:39:64:b9:90:b6:cf:64:73:
ef:d1:80:9a:47:c7:18:0a:45:7e:7a:af:11:09:68:
7a:32:c3:b0:a2:96:d7:b9:7e:20:12:be:5e:bf:d5:
b8:30:20:73:9c:e4:02:d4:4c:d0:ca:e7:fa:61:e6:
80:53:f4:05:73:86:56:0a:ee:f3:99:20:c2:e4:37:
8b:8a:51:42:f4:6e:6f:6b:c3:13:fa:7f:88:6d:50:
9c:87:86:ad:f0:a3:f5:69:f3:30:04:db:c0:fc:b2:
98:fc:67:4b:ed:7b:7d:63:66:1e:1f:d6:6d:55:59:
28:54:17:dc:dd:e1:e7:0f:eb:37:37:b3:20:94:ac:
ea:d4:13:2e:b5:a5:96:ec:e2:be:d8:1d:cf:4b:76:
17:bf:b1:c1:2b:51:1b:b7:87:0f:ba:c7:fd:6e:b8:
a9:a2:69:85:7d:d5:64:98:60:12:9b:f3:80:1d:ed:
12:6f:da:08:42:60:ec:0b:06:4f:1b:49:0d:ea:86:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:A7:8C:06:B7:46:EB:49:DD:38:2D:43:E8:5A:52:4B:8E:E5:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ECE94C8F35F11EFA0D0C745762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.66.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7e:32:5e:15:89:15:69:5e:6e:c6:d4:06:a1:e9:e0:cc:81:
6a:7d:16:62:56:20:76:ad:01:bc:c6:f3:94:3a:55:9a:a9:f9:
e3:9c:0f:56:14:01:b5:f0:5a:1b:e7:d1:da:8e:70:78:e4:cf:
5b:01:83:70:2c:4a:43:50:59:b6:06:5c:8e:75:94:cc:02:40:
40:83:23:ce:6a:85:dc:a1:9d:0d:b6:41:47:af:d5:7b:78:e5:
0f:2c:e3:d1:3e:d6:d7:ee:84:c0:71:9f:d1:e0:b9:89:b3:83:
d1:ce:ed:f3:ce:1f:96:1f:11:8b:72:db:c9:2e:0b:c4:c8:7e:
a2:01:5a:c2:40:51:b9:66:51:88:4e:01:90:3e:da:a0:ee:c8:
96:dd:11:06:33:89:90:9c:2c:b9:4d:9e:d2:16:25:cb:00:7d:
70:c8:e8:58:f8:17:eb:61:a5:10:85:62:d1:e2:cc:a5:9c:9a:
27:8e:a7:a4:57:b6:2d:77:dc:64:ec:a6:95:80:90:81:ba:71:
97:cc:99:74:70:9b:84:b6:63:62:86:c1:9a:19:58:f3:00:c5:
eb:b8:72:3d:f5:fd:cd:82:95:0a:37:d2:96:49:d5:f1:f2:71:
e6:71:94:d1:1d:a6:09:95:e6:e0:d6:1b:d6:3e:f6:35:cf:05:
d8:bc:25:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:30 2025 by rpki-client