Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE1A36EAE54D11EF9D31EB7B762E951A.roa
File: BE1A36EAE54D11EF9D31EB7B762E951A.roa (raw, json)
Hash identifier: mCfgR5+o0kFD8EDxjJhB0LpIpbshoIPquEukl/c35QA=
Subject key identifier: 62:FA:8A:26:58:3E:BC:CA:55:F1:E7:F7:35:ED:53:E8:35:5D:FF:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE1A36EAE54D11EF9D31EB7B762E951A.roa
Signing time: Fri 07 Feb 2025 12:19:14 +0000
ROA not before: Fri 07 Feb 2025 12:19:10 +0000
ROA not after: Fri 21 Jan 2028 12:19:10 +0000
asID: 17561
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73057 (0x11d61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 12:19:10 2025 GMT
Not After : Jan 21 12:19:10 2028 GMT
Subject: CN=67a5fa42-927b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:ed:5d:56:fe:da:e1:ec:c6:82:98:78:1c:
42:76:89:e5:c9:57:27:e5:a9:53:f7:b3:d4:72:42:
64:71:f9:43:e2:4a:6b:1c:af:6b:d7:f7:20:1d:00:
70:1f:60:d5:97:b9:2f:3e:0d:d3:da:30:ea:00:1e:
13:7c:c3:41:83:61:7d:0d:5f:75:c0:0e:b6:61:b6:
9d:97:3f:4d:63:01:72:ae:e0:0b:14:2a:10:7d:db:
fa:4a:66:ac:78:42:2b:1c:da:42:80:80:aa:fc:66:
b9:c1:45:b0:93:5a:01:e3:84:d1:b9:23:3e:6f:14:
5c:42:01:18:47:52:89:98:72:aa:ee:07:d0:fd:94:
69:a3:5d:2c:37:15:f4:b7:df:eb:f5:d5:07:41:c0:
fb:01:e6:33:1b:93:dd:cf:4e:8e:f3:63:fe:da:24:
70:fb:79:1e:3a:cd:e9:17:8d:05:af:b2:d7:ed:fc:
13:c1:16:bf:60:cd:14:b0:a0:59:7b:4a:ea:e8:85:
bb:9a:f9:8e:73:db:4b:b2:c0:46:cf:47:52:f7:71:
35:de:40:12:e5:f1:f1:32:97:02:82:43:a4:ee:2d:
11:af:aa:a2:12:10:19:69:af:4e:b6:d4:35:86:68:
8b:20:d7:56:8e:54:6c:2a:49:6c:d5:ee:24:eb:5c:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FA:8A:26:58:3E:BC:CA:55:F1:E7:F7:35:ED:53:E8:35:5D:FF:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE1A36EAE54D11EF9D31EB7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:14:53:5f:a5:89:99:76:c7:a9:c3:1f:01:71:fc:25:5d:4c:
b1:ad:d2:1d:83:54:14:69:a9:18:11:f8:0d:8e:52:f4:87:8a:
a3:7c:29:7a:1e:83:59:96:3f:97:e6:09:1c:7a:7c:32:36:51:
87:a2:6f:0a:d0:ed:1a:41:88:19:4d:d9:68:35:bd:58:69:23:
c1:c5:1b:ee:de:fe:58:dc:01:85:09:d6:26:f1:80:09:91:d5:
da:2a:5b:28:09:7d:db:bf:a1:65:c4:f9:e3:f5:f2:d2:9c:a5:
e1:8a:71:1e:0e:ed:af:c4:de:ad:54:70:50:3f:bc:78:57:0a:
b0:29:9e:b1:3d:fd:f6:d9:44:71:13:87:d4:41:44:49:71:42:
b9:7d:20:76:39:c3:d8:e9:86:f5:26:0f:47:24:f1:c0:91:34:
c4:f1:4a:66:8e:9f:8f:44:b9:8d:99:fb:42:58:a9:da:3c:d0:
02:70:c6:8c:3b:d1:b6:45:23:53:44:df:52:56:f6:e8:bf:99:
97:c6:2f:65:5a:af:8d:cb:b8:d3:5f:da:67:0c:7d:ac:06:7c:
f2:4c:ea:61:5b:ab:60:38:1a:26:17:79:31:5a:6c:4f:99:79:
c8:c4:00:9f:f4:eb:b9:e1:f0:ac:ed:fe:98:07:9f:80:7a:30:
a2:3e:b3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:56 2025 by rpki-client