Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA97CB34F4D011EF94D29AB9762E951A.roa
File: CA97CB34F4D011EF94D29AB9762E951A.roa (raw, json)
Hash identifier: vPbxLCONH6+pvzRvzWYo95Wnowmc9xBPN1JGyMHVNzg=
Subject key identifier: 46:BD:44:66:94:09:C6:BC:5F:AA:94:47:9C:52:D6:CE:19:B6:DB:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA97CB34F4D011EF94D29AB9762E951A.roa
Signing time: Thu 27 Feb 2025 06:05:06 +0000
ROA not before: Thu 27 Feb 2025 06:05:03 +0000
ROA not after: Sat 19 Feb 2028 06:05:03 +0000
asID: 17561
IP address blocks: 45.204.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80119 (0x138f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 06:05:03 2025 GMT
Not After : Feb 19 06:05:03 2028 GMT
Subject: CN=67c00092-79ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:4b:f1:4a:3c:57:cb:b0:b3:3b:0e:cf:83:
4f:a2:99:12:4d:bb:e7:1c:87:1d:ed:5e:fb:66:35:
79:98:22:59:10:32:ec:d0:df:56:f2:6d:cf:80:d0:
9f:db:9e:fd:5d:3a:55:16:b0:53:8e:01:7f:b5:5e:
56:a5:23:18:ab:39:7a:90:ce:d6:12:16:7b:06:57:
59:bb:f3:af:71:f3:89:dd:e3:75:76:52:ab:0d:c7:
6d:16:9d:f7:a5:1f:d5:20:19:ef:9f:e7:c6:41:a7:
f4:26:55:4f:18:23:37:42:f9:4e:33:73:e7:23:57:
76:d1:5e:8d:05:b6:2f:de:84:0c:a4:4a:7e:c6:cb:
32:5a:93:f2:18:38:34:97:cc:51:e4:0a:b0:4a:cc:
1a:46:81:a8:7e:77:66:d3:5c:c9:ba:5d:f7:99:05:
76:ec:29:07:27:9e:fe:20:a1:cf:f9:59:31:fb:db:
e3:65:19:dc:96:44:3e:b1:b8:3c:bc:14:c2:96:01:
a7:67:b7:3f:ed:a6:2e:0e:21:8a:4d:ce:38:71:04:
19:58:18:30:a0:d4:7a:fe:11:18:d7:e8:7c:65:6a:
d4:c8:17:f1:4c:6c:59:8a:31:d1:41:d1:e0:0c:9a:
96:f5:b5:e0:b6:97:4f:e8:86:f4:70:92:51:75:e2:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:44:66:94:09:C6:BC:5F:AA:94:47:9C:52:D6:CE:19:B6:DB:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA97CB34F4D011EF94D29AB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.83.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c6:25:be:3a:ef:bb:62:d5:f4:78:d6:2f:db:6e:0f:a3:c9:
89:24:df:f7:a5:d8:aa:8c:35:dd:71:1f:ca:e0:52:ed:90:98:
71:2d:23:ce:bd:3d:69:28:85:4c:47:db:af:64:fe:ce:af:86:
9d:94:aa:66:7d:c4:fa:26:fb:93:16:3c:2e:6f:2b:57:02:bd:
ef:5a:8e:a0:02:30:1d:d2:06:ef:b0:92:a2:13:04:af:2e:1b:
96:d8:81:e4:34:9e:4c:6a:85:dd:7a:08:6a:e1:db:45:2a:00:
60:55:b7:66:82:cd:e2:1e:9c:8c:28:09:85:0f:d7:c8:cd:2f:
b1:d2:d6:90:91:43:d4:ab:23:bd:55:c6:ef:9c:2c:a6:46:af:
ad:df:e2:6b:b5:9d:71:d3:7a:95:22:fc:1c:3a:44:ea:fe:08:
a4:a6:62:0f:fe:21:ff:1e:63:87:91:28:05:27:f7:cb:80:82:
d6:44:f4:ef:94:aa:de:c5:8b:27:89:1c:9c:4f:45:94:dc:00:
26:ec:f4:67:8f:4d:82:8a:d0:02:7e:77:34:61:7d:37:0c:fe:
e1:17:b8:0f:35:f8:c9:5c:ed:a1:64:c3:31:60:d6:71:7e:df:
ca:86:17:b0:84:74:2d:04:73:b5:29:07:e3:26:46:ea:c1:f9:
06:69:12:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:10 2025 by rpki-client