Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C06D031CF5C111EFA6498FAC762E951A.roa
File: C06D031CF5C111EFA6498FAC762E951A.roa (raw, json)
Hash identifier: qwR3TBg9XVdi5mV4CFrs4nIAoCjEJlX+iH86ObJZ1w8=
Subject key identifier: C3:57:BC:C3:0D:A5:A5:9B:18:B3:96:49:7D:A3:FE:7E:9E:E1:3F:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C06D031CF5C111EFA6498FAC762E951A.roa
Signing time: Fri 28 Feb 2025 10:49:58 +0000
ROA not before: Fri 28 Feb 2025 10:49:54 +0000
ROA not after: Sun 30 Mar 2025 10:49:54 +0000
asID: 138995
IP address blocks: 45.192.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81183 (0x13d1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 10:49:54 2025 GMT
Not After : Mar 30 10:49:54 2025 GMT
Subject: CN=67c194d6-f937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:9b:e6:6d:ff:f6:ec:20:e5:e8:90:cb:7b:
0c:77:ba:9e:8d:a3:73:80:b0:2b:de:66:f7:50:31:
cb:dc:70:31:05:99:31:a0:5f:13:e4:09:03:10:d5:
3e:42:65:5f:88:cc:a6:eb:1b:97:a1:90:90:50:e3:
43:2f:01:72:1a:a8:07:f8:94:9a:be:23:ef:76:59:
78:b1:cc:97:e4:f4:25:b3:d3:ea:a8:70:9c:51:7f:
40:c7:3c:8f:46:45:ac:f6:90:f5:dd:95:e9:cb:50:
b0:07:a4:f1:3b:ea:10:d8:93:61:c7:04:d2:7b:34:
b2:17:b7:b9:2d:41:68:13:78:29:4f:73:0a:49:c5:
a3:0b:f6:c1:19:cd:ca:61:c3:69:c6:20:41:a6:e6:
aa:e3:cc:a3:a4:1e:8f:aa:9b:66:66:40:2a:28:07:
b5:ba:7f:26:ff:fe:ba:42:3c:af:b6:2e:31:1c:ee:
53:ef:87:e5:b4:a1:32:1e:34:58:b2:d8:1b:b5:a5:
5a:8d:71:45:57:9f:54:b9:ba:cc:f3:8d:1d:16:93:
0e:95:e9:63:ba:e3:e2:01:d1:5d:a0:1c:31:8a:61:
73:c0:9a:60:97:f5:7b:09:3a:b1:33:ae:57:29:36:
b2:00:84:18:4e:8d:d0:63:36:84:3b:5c:9c:eb:8d:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:57:BC:C3:0D:A5:A5:9B:18:B3:96:49:7D:A3:FE:7E:9E:E1:3F:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C06D031CF5C111EFA6498FAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:53:f4:3d:31:c8:23:2a:e3:cc:c8:3b:fd:28:3a:5c:ce:6a:
21:ad:2e:22:f8:63:32:7f:1f:b2:82:30:7c:d0:35:df:70:9a:
66:d4:ed:96:db:35:ae:26:10:7c:e7:83:4e:b7:3d:5c:32:76:
cf:11:07:ea:8c:2f:d8:fe:16:37:a8:87:71:73:e2:a5:83:db:
d2:fe:a8:b5:27:e2:4c:c6:c8:0d:73:54:18:54:f1:c8:5f:8a:
92:f0:9d:04:ea:07:b1:ae:43:33:59:a7:77:83:7c:11:d2:ab:
ad:ea:3b:b2:91:a5:c0:04:58:3c:d5:b9:88:80:ef:30:c2:17:
19:ca:6f:fa:a0:60:db:a5:a6:82:c0:29:f0:66:94:22:86:74:
4a:f8:a7:62:38:f0:50:fa:1a:32:19:47:43:5e:3e:aa:b4:3f:
7e:bc:50:d7:75:f2:c2:04:7a:5c:36:82:f0:47:b7:67:8a:e9:
37:ad:00:38:89:15:e7:da:ee:0d:61:e3:21:54:b6:b3:aa:0b:
e6:9d:4a:46:49:27:b2:ff:e9:0d:b0:d9:d9:dc:f0:77:c2:4b:
a2:d3:fd:1d:73:7b:06:ca:6f:be:91:9e:d9:8a:6a:c4:09:a1:
ce:74:2f:1f:d0:e5:d8:3c:5d:41:f3:ce:2f:44:8a:69:7d:89:
15:8f:82:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:57 2025 by rpki-client