Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA0D0598F39611EFA64115B6762E951A.roa
File: CA0D0598F39611EFA64115B6762E951A.roa (raw, json)
Hash identifier: V+EqJRpBWmMJaTjP/KFx6U739kRKeeIYx3zpoOtPOX4=
Subject key identifier: 4C:99:84:23:57:A6:45:B3:A3:7D:2B:7C:F0:89:9D:07:A3:65:EC:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012EA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA0D0598F39611EFA64115B6762E951A.roa
Signing time: Tue 25 Feb 2025 16:37:23 +0000
ROA not before: Tue 25 Feb 2025 16:37:20 +0000
ROA not after: Wed 09 Apr 2025 16:37:20 +0000
asID: 63139
IP address blocks: 45.197.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77475 (0x12ea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:37:20 2025 GMT
Not After : Apr 9 16:37:20 2025 GMT
Subject: CN=67bdf1c3-3bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:30:7c:df:ba:6a:6d:d6:58:d0:84:2e:8a:
fd:6a:9c:2c:3f:69:0f:f1:83:6a:c0:5f:68:d3:28:
2d:63:1a:ce:15:6b:dd:7f:95:0a:ad:41:ee:66:70:
21:c0:05:b2:b1:f4:03:41:2e:d0:92:51:42:2e:45:
ad:25:13:5b:cf:b6:4d:18:2d:10:b8:20:48:51:f9:
32:f1:8a:f2:8d:b5:f3:f8:3b:c7:c3:29:5f:c0:6b:
da:7e:63:82:df:07:76:b3:7d:42:3e:05:09:67:46:
36:94:28:3c:8a:8e:df:91:88:5e:18:96:c5:1a:a3:
ba:49:f4:25:b1:36:24:be:32:ae:08:c2:27:06:ca:
39:bb:36:3a:50:32:48:8d:8b:17:46:4b:df:fe:a8:
d5:00:1c:27:15:71:28:34:3c:db:9b:2a:7a:a7:af:
10:94:ba:8e:db:85:35:fb:95:51:80:74:38:e2:90:
55:c9:31:21:cb:e7:0d:de:2c:ff:1f:70:e5:f6:aa:
f4:f8:cd:d8:c6:2b:5a:39:48:4f:16:9f:ce:bc:9f:
35:7d:56:e2:63:ec:a8:c6:2b:9a:63:e8:07:63:28:
be:50:2e:de:1d:7d:3a:99:bf:a4:1b:24:9c:0c:ce:
80:fd:a5:df:da:6e:3a:82:b3:d4:9e:c0:39:f3:44:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:84:23:57:A6:45:B3:A3:7D:2B:7C:F0:89:9D:07:A3:65:EC:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA0D0598F39611EFA64115B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.125.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5c:2f:36:9b:9a:f3:40:f4:ca:0a:6c:25:fa:23:15:6f:d1:
5e:12:3a:2b:37:c7:49:5b:b5:e9:45:61:a4:ec:74:da:a4:4e:
9e:fd:cc:2c:14:45:9b:21:13:a6:23:3c:00:3c:0b:63:c4:50:
5f:af:eb:12:e9:6b:0d:1b:57:b8:e5:98:d4:92:b4:19:49:4a:
c2:44:5f:9f:ea:84:d9:54:21:e2:c8:97:c4:1e:80:3c:1e:fe:
ee:78:98:1a:f0:7a:c1:87:a1:f0:a6:92:e9:2f:dc:c1:6e:7b:
65:11:66:e2:1f:58:4c:69:77:4a:e3:95:79:d0:44:0d:df:5c:
3e:e0:63:3f:be:26:18:b6:4d:58:87:94:04:1f:db:e1:79:d4:
c0:c2:e4:ae:d9:71:64:b4:81:43:8b:db:8d:78:45:27:6a:9d:
5e:f2:90:9f:3f:90:3e:dd:bd:85:0d:b1:ae:54:a6:84:82:f9:
f3:ce:25:f4:8d:a7:e8:79:ca:a8:30:47:98:f3:e8:45:fe:ce:
29:2b:4f:06:15:e2:71:05:2d:a3:6a:d8:aa:d9:f9:e4:cb:c8:
61:f3:46:af:06:2d:03:e8:01:4c:07:f7:48:dd:72:8a:81:bb:
fd:e5:12:17:bb:3d:88:93:7b:e0:19:c6:01:b4:fa:33:87:4c:
b1:7e:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:32 2025 by rpki-client