Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C11B4A4EE54F11EFBCEBE989762E951A.roa
File: C11B4A4EE54F11EFBCEBE989762E951A.roa (raw, json)
Hash identifier: B3CgByG8CAgcMxMi6nWd6Rzw7Okua9uZziCu4pM0ujE=
Subject key identifier: 31:72:EA:2C:26:1B:5A:11:A5:B9:C1:9F:CF:52:54:E6:56:BE:3E:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C11B4A4EE54F11EFBCEBE989762E951A.roa
Signing time: Fri 07 Feb 2025 12:33:38 +0000
ROA not before: Fri 07 Feb 2025 12:33:34 +0000
ROA not after: Fri 21 Jan 2028 12:33:34 +0000
asID: 17561
IP address blocks: 45.192.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73069 (0x11d6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 12:33:34 2025 GMT
Not After : Jan 21 12:33:34 2028 GMT
Subject: CN=67a5fda2-aa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:de:b5:99:07:0b:c7:45:d1:e3:43:ee:66:
fa:f2:3a:e2:34:47:bc:13:e5:c1:e6:8f:cb:59:65:
cc:4f:82:73:41:4a:a0:48:56:f5:8a:53:72:ee:c0:
28:f7:3e:a6:a1:d9:f0:83:8c:d8:88:9a:b7:ea:6e:
30:9d:90:11:9e:a5:2f:fd:23:fc:b3:00:68:a2:c5:
12:df:5b:d9:7c:fb:72:02:b4:b2:10:bf:1e:7a:bc:
74:29:0c:70:3c:39:54:d5:df:7b:bf:8f:ac:92:e3:
e0:04:f0:75:ea:9c:e0:92:d7:4a:b7:e1:ba:7f:2c:
30:01:c8:76:32:d9:fc:dd:de:14:61:b1:c6:1b:2b:
a3:85:57:bc:fa:11:cf:f9:9e:b6:4e:29:57:21:9f:
88:86:68:f8:56:cc:9e:88:4a:b2:e8:58:45:bd:d4:
f0:61:1d:7c:e0:61:ce:99:01:93:76:14:06:d3:08:
11:c7:09:82:44:b0:f6:6a:78:b0:88:e8:1b:21:dd:
23:58:38:c3:fb:1a:04:12:70:ba:c9:cf:dd:ab:97:
22:40:d9:4d:23:91:c4:3e:46:ee:4b:ec:ca:4d:f2:
5f:23:fa:a1:3a:e8:b3:31:3a:2f:2a:28:cc:17:85:
12:a4:3b:57:83:31:64:f3:19:27:ec:92:75:a7:99:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:72:EA:2C:26:1B:5A:11:A5:B9:C1:9F:CF:52:54:E6:56:BE:3E:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C11B4A4EE54F11EFBCEBE989762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.25.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3b:96:8b:02:f1:20:a5:90:61:9e:32:3a:6e:9d:cd:fc:b4:
ca:54:85:43:47:78:c0:88:4c:6a:6b:2b:ff:5f:45:1b:fb:4d:
75:01:c8:72:3c:7a:20:14:02:da:6f:7b:d9:95:39:6d:1f:8d:
9d:cb:d1:37:2a:07:05:25:d0:1e:58:16:99:8f:43:51:7b:41:
4d:55:fe:04:9f:c6:96:c1:83:43:89:9f:cf:59:39:ed:77:87:
f5:08:ea:af:23:33:75:5b:2e:b7:8b:09:b8:6d:6e:b0:63:b9:
68:3d:ff:e7:25:0b:c2:43:27:87:03:93:b2:a9:a9:c3:61:f9:
ac:f5:0a:bd:e0:29:a6:40:62:fc:d2:0b:a3:14:70:33:34:1d:
aa:ff:83:3a:e8:b2:76:d9:59:99:b5:5d:12:c3:07:64:fd:58:
1c:cf:ac:74:3f:f1:88:2c:10:c3:07:25:45:29:79:39:cc:56:
4b:3f:71:e7:a1:bb:ff:c9:62:7e:c7:0c:18:1f:06:73:93:5b:
fb:bd:68:15:4b:23:96:0e:33:4a:56:46:29:17:0d:fd:04:6c:
f5:24:c0:55:cd:04:42:84:3a:c9:65:05:51:d2:75:90:55:3b:
b6:be:44:b0:2a:9d:b0:df:80:55:bc:6d:1c:fe:da:90:ff:b5:
00:dd:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:40 2025 by rpki-client