Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7A1ACBEF39811EFB03BE441762E951A.roa
File: A7A1ACBEF39811EFB03BE441762E951A.roa (raw, json)
Hash identifier: xdOOOd4Y2zWndaT9SbTo/Gksp21vMz3qWtFS6bpLM/w=
Subject key identifier: C1:84:B6:44:B0:AC:E3:F2:49:37:BA:DA:61:6B:18:A1:5C:9E:02:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012EAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7A1ACBEF39811EFB03BE441762E951A.roa
Signing time: Tue 25 Feb 2025 16:50:44 +0000
ROA not before: Tue 25 Feb 2025 16:50:41 +0000
ROA not after: Wed 09 Apr 2025 16:50:41 +0000
asID: 138915
IP address blocks: 45.197.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77487 (0x12eaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:50:41 2025 GMT
Not After : Apr 9 16:50:41 2025 GMT
Subject: CN=67bdf4e4-761c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:fc:1a:5c:6d:03:91:b7:b0:2f:ba:b8:cf:
b7:18:88:12:52:ad:db:97:8c:d9:d2:50:7b:63:ab:
2a:a7:df:a6:a4:93:56:b9:d2:f5:49:08:30:0f:75:
47:4e:84:a2:ae:96:dc:95:f4:60:15:73:e7:b2:ec:
9b:bc:82:87:cd:8b:f3:25:55:4a:3c:bc:38:ee:ce:
92:a1:8e:91:2c:88:27:12:6f:6a:77:ee:1d:64:f9:
09:66:47:1a:2f:29:54:5b:35:86:a4:30:e3:9b:98:
c3:55:f3:60:30:b7:52:ab:14:e3:98:19:fc:a5:7f:
2d:b4:f3:2e:ff:1f:67:fc:18:78:72:85:d0:4f:3d:
aa:07:31:a4:da:20:2a:29:7d:69:d2:70:7d:15:48:
c1:16:57:62:4b:15:a8:45:f5:d4:dc:fc:ff:71:38:
91:f8:77:0c:89:74:64:a9:0b:64:7f:72:9c:dd:00:
0b:29:74:95:c8:16:e7:4b:24:3b:bb:eb:75:28:56:
91:c7:6a:2a:3d:80:02:49:e1:be:6d:6b:38:ed:7b:
08:6b:50:3c:38:70:50:ca:48:c2:20:c1:03:87:c2:
b1:8f:1c:bb:c5:25:e3:d8:42:47:2e:b1:da:11:94:
a5:07:3b:64:25:68:0b:96:95:7e:60:07:75:77:78:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:84:B6:44:B0:AC:E3:F2:49:37:BA:DA:61:6B:18:A1:5C:9E:02:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7A1ACBEF39811EFB03BE441762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:45:1a:90:c5:84:55:e5:91:86:cd:c3:76:48:8c:ca:e6:ce:
96:de:18:ac:a2:7f:ea:32:e6:37:37:1d:84:03:0f:85:64:9c:
83:55:f7:fb:17:97:88:3f:07:53:a9:e6:16:e0:49:fd:59:5d:
a0:f2:fd:10:d1:f9:eb:45:ff:00:9a:56:10:c8:99:34:34:14:
9d:a9:b4:a4:75:f3:bc:f5:87:b9:0a:b6:4c:70:10:52:b6:a0:
9a:92:ea:54:5d:22:a5:6c:53:f3:b3:6d:a8:91:4b:8d:27:65:
d3:bc:dc:f7:ee:46:da:0a:7e:cf:bc:31:d1:fd:98:05:b1:17:
d8:90:aa:52:2f:2c:66:08:d7:35:1c:f7:b5:db:e8:9c:66:3b:
a4:f1:19:99:37:91:64:a6:5c:d3:b6:6d:ea:b5:d7:91:f9:1a:
26:fa:47:5c:2d:f9:59:26:ff:b8:6a:63:be:b5:28:17:19:8c:
cd:ad:e7:1c:c0:37:14:13:b5:0e:a6:26:03:7b:fe:32:04:a5:
03:43:ef:3a:77:7e:60:1e:ad:c9:2e:d5:66:9c:d9:cc:94:32:
7a:c7:89:75:d7:70:d8:f4:f3:6d:21:7e:be:d5:af:0a:89:c6:
de:23:be:fa:60:d6:5e:ac:ee:37:57:c7:73:d6:0b:1a:72:38:
56:09:76:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:56 2025 by rpki-client