Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B35D3C00BA11F0A443D5A2762E951A.roa
File: A6B35D3C00BA11F0A443D5A2762E951A.roa (raw, json)
Hash identifier: T/Lju+rkbMzmQmHOB5InlZ+b9oVm/ULL+GPKqmn2MAo=
Subject key identifier: C4:6F:23:80:0B:DF:5D:E6:55:40:9A:7A:48:26:01:F6:A7:28:D5:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B35D3C00BA11F0A443D5A2762E951A.roa
Signing time: Fri 14 Mar 2025 09:56:51 +0000
ROA not before: Fri 14 Mar 2025 09:56:47 +0000
ROA not after: Tue 08 Apr 2025 09:56:47 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83410 (0x145d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 09:56:47 2025 GMT
Not After : Apr 8 09:56:47 2025 GMT
Subject: CN=67d3fd63-be8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:a3:63:da:ca:57:01:f3:81:dd:b2:25:a8:
fa:92:1e:93:a5:cf:39:7a:30:55:a7:46:f6:b1:ea:
34:f1:3b:c8:dc:67:81:2f:8b:8a:d7:ec:34:ff:dc:
fe:47:53:0f:2e:2d:41:24:d9:c3:7e:a0:5a:6a:e0:
0c:17:28:61:5e:d9:2f:e0:39:11:0d:e1:53:41:8b:
69:2e:40:60:6b:0a:51:c0:d7:8f:e6:47:76:9c:5a:
3d:72:9b:04:4a:dd:4d:84:ae:8a:44:ae:93:98:df:
cc:6b:49:8e:55:0e:8f:56:f0:a3:73:04:c5:0f:c0:
33:22:7b:96:39:b1:de:08:88:b6:9c:03:e8:dc:8a:
74:15:64:8b:de:a7:87:82:9b:85:92:e2:68:b9:14:
ff:97:a8:7c:00:03:6f:8b:e5:3c:2d:56:1e:76:b9:
27:3e:ab:32:df:93:83:fc:d8:2e:ac:45:fb:9d:8f:
06:12:32:cf:aa:63:7d:43:ac:e0:17:c2:8b:e9:d6:
87:80:fd:c7:fb:4d:d4:69:6b:74:43:53:71:9c:7a:
fa:eb:21:41:53:8f:d1:5b:a1:83:08:90:ad:04:c2:
c1:11:6c:b1:bc:e9:8f:7e:5e:4d:f7:e1:37:c1:a0:
86:f3:05:11:02:96:86:38:21:8d:9c:9a:d5:87:1f:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6F:23:80:0B:DF:5D:E6:55:40:9A:7A:48:26:01:F6:A7:28:D5:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B35D3C00BA11F0A443D5A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:62:34:48:a9:95:a5:bb:88:f8:05:ed:93:e1:ff:55:4c:e1:
5e:c1:03:3d:0e:69:3c:72:bd:d9:83:ef:a1:85:af:d7:d2:21:
f4:fa:f9:0f:ec:ec:f7:0a:e9:f3:9c:d4:7d:6f:00:86:5d:b6:
1a:8d:09:ce:4a:a3:d2:5e:8b:c1:a2:e5:da:7e:4f:bb:e1:9b:
30:05:8a:8e:20:fc:a3:29:eb:ac:c1:ca:a1:82:29:42:43:9e:
2b:7e:39:82:97:27:a0:b1:6a:90:60:e1:6b:62:c4:85:bf:1a:
5b:ef:b6:30:1d:d7:15:0a:b5:55:7e:b2:2f:af:54:ed:31:73:
9b:2a:24:e7:80:e7:18:44:a4:95:2d:fd:c4:13:b8:bb:10:d4:
e1:72:c2:7d:0d:fd:41:4f:28:a6:04:87:f1:b5:87:b3:e8:dd:
4f:ff:e9:e7:e5:67:20:5a:ec:e4:25:49:54:20:25:51:a6:a3:
45:c2:a0:9b:d8:6f:9f:c7:98:d3:91:86:99:5b:e1:4f:aa:47:
2a:a1:1e:01:74:87:63:c9:32:89:b0:4f:b7:12:f5:b6:79:99:
00:24:f4:ec:90:28:63:c7:91:b7:af:d4:e7:5c:7e:51:c7:9b:
9d:c5:52:b7:f7:58:0d:0e:a2:01:67:f9:b0:eb:38:ee:13:b7:
85:fa:b3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:30 2025 by rpki-client