Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF023B6CF5BF11EFB0B91E9E762E951A.roa
File: AF023B6CF5BF11EFB0B91E9E762E951A.roa (raw, json)
Hash identifier: X8gA7ZwaW08jtvBhAsEiZO/6at+P2H17+CknXX2SuO0=
Subject key identifier: B7:11:53:D4:6A:63:63:51:E4:B3:DB:28:B0:8A:DE:24:93:92:09:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF023B6CF5BF11EFB0B91E9E762E951A.roa
Signing time: Fri 28 Feb 2025 10:35:09 +0000
ROA not before: Fri 28 Feb 2025 10:35:06 +0000
ROA not after: Sun 30 Mar 2025 10:35:06 +0000
asID: 138995
IP address blocks: 45.192.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81173 (0x13d15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 10:35:06 2025 GMT
Not After : Mar 30 10:35:06 2025 GMT
Subject: CN=67c1915d-81ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:a6:86:e4:19:e6:aa:31:c6:d7:27:2b:0f:
bb:26:7f:8c:55:3d:2d:50:68:03:62:1e:75:d3:33:
07:87:4e:16:eb:10:5a:fc:5e:ff:59:39:c5:71:ed:
65:ab:f7:77:d9:9b:81:e8:3c:19:4e:c8:4d:60:bc:
40:27:b8:67:b8:a9:4c:5e:93:5a:e1:0d:18:5a:df:
28:9d:18:b5:06:b4:54:64:34:62:36:79:b8:55:52:
3e:12:bb:b4:ce:fe:1a:9a:a3:0d:bc:aa:82:a0:c0:
50:4a:ea:18:4c:b8:13:de:d9:f4:04:4a:e2:b4:fd:
ca:08:77:3b:ae:e7:a5:b0:2a:fc:d4:0a:a8:45:c0:
2b:d5:00:3c:1f:38:8f:0f:1d:8a:30:32:1d:eb:15:
73:e4:c3:8d:26:1b:7e:74:f4:f1:13:ca:5f:eb:7d:
01:eb:b4:10:63:79:c2:a9:6d:c0:69:e6:c8:0f:99:
52:04:9f:cc:d0:5e:86:59:f7:fa:c3:6a:86:2d:ad:
80:1a:f3:27:aa:e3:52:74:c0:d4:16:cc:5c:31:16:
ee:ee:49:4a:2e:63:01:98:48:e6:3d:22:60:5b:a5:
96:9a:7f:08:4d:09:47:8b:a8:66:34:46:a5:9b:af:
fb:9c:12:7c:8d:18:88:b4:1e:79:2e:d2:6b:f3:a8:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:53:D4:6A:63:63:51:E4:B3:DB:28:B0:8A:DE:24:93:92:09:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF023B6CF5BF11EFB0B91E9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:68:57:9d:bf:ab:77:cb:12:de:68:68:06:d2:59:5c:8a:1b:
a2:50:51:09:71:c5:db:44:fd:0b:6e:64:ba:28:a0:b4:9e:6b:
12:21:12:10:fe:36:8c:5a:ee:2a:c4:50:e0:1d:3d:d3:50:ed:
6c:85:30:a2:fd:2c:76:ee:1f:fc:04:86:6e:17:6b:15:94:f5:
f8:f3:0d:1c:18:dc:dd:16:ed:68:0f:a9:da:94:23:75:2b:a2:
20:5c:d5:5c:03:bb:b8:fa:a1:55:25:5e:b6:66:a4:4e:45:76:
05:4c:d9:a3:73:6b:82:87:6e:43:b7:5a:d9:28:85:97:83:67:
be:8d:f9:47:5b:50:72:30:7f:53:cf:eb:85:0b:b4:26:23:f3:
df:36:98:10:72:c2:88:ce:c0:39:61:95:0c:f3:4f:f4:d3:b0:
d6:65:17:cd:8b:a3:e1:5f:fc:af:38:08:db:38:ab:04:b6:74:
0f:95:c2:7f:35:ee:f0:57:90:74:7c:0c:2e:80:ec:13:6b:5d:
13:af:87:0f:8a:3a:a1:46:e9:38:18:05:df:0d:e1:99:de:9e:
cf:0b:3d:81:4f:5f:03:ef:67:ed:13:c6:f4:0e:22:c6:3b:b7:
05:17:ad:66:3c:13:07:7f:92:d9:d6:8d:a9:32:cb:e1:68:92:
eb:5f:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:18:55 2025 by rpki-client