Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1AED8C8F43911EF80A81999762E951A.roa
File: D1AED8C8F43911EF80A81999762E951A.roa (raw, json)
Hash identifier: LjQEG7TfphqJClNpyg2uFV+Vh1/xAZaXgpEToK3szII=
Subject key identifier: 9A:08:B8:8D:2A:3C:36:42:77:1F:66:07:04:D1:A3:10:81:9F:3E:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013223
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1AED8C8F43911EF80A81999762E951A.roa
Signing time: Wed 26 Feb 2025 12:04:24 +0000
ROA not before: Wed 26 Feb 2025 12:04:20 +0000
ROA not after: Sat 19 Feb 2028 12:04:20 +0000
asID: 17561
IP address blocks: 45.198.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78371 (0x13223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:04:20 2025 GMT
Not After : Feb 19 12:04:20 2028 GMT
Subject: CN=67bf0348-a632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:61:2d:80:71:ce:ff:2f:e7:57:90:79:59:
21:92:e9:f0:b7:ef:22:ff:47:d5:bc:6d:03:ed:da:
23:f4:56:76:c5:71:5f:ba:1f:56:93:55:e5:fb:46:
e3:df:6c:ae:35:0f:70:00:40:e0:21:96:db:42:59:
dc:8f:a7:8d:f5:69:54:aa:5a:3c:c1:16:17:51:2b:
ad:d2:1c:b4:92:36:87:b1:87:5e:0a:c4:e8:dd:71:
12:22:6d:d1:9c:7c:24:c6:94:d9:63:d3:bd:20:f3:
bd:70:cb:ef:04:4a:72:94:ce:53:ec:1c:0e:b0:e7:
bd:ce:a5:f9:88:b4:af:87:4f:19:a5:88:9e:a1:76:
85:cb:cb:50:c6:02:ea:fd:ef:20:e4:db:6f:98:b0:
03:fa:6e:f8:c3:c4:5e:80:a0:21:1d:18:b6:ef:0a:
9d:1d:e4:28:d1:85:7b:fb:79:45:ce:1b:aa:b0:ab:
d0:77:e6:bd:d4:4c:0b:de:52:e2:3f:41:ec:b1:96:
de:ad:ed:f8:0f:c7:70:d4:79:02:d3:dd:f8:6b:ce:
f0:5c:e0:e6:fb:87:29:d8:58:a2:09:82:92:91:96:
f7:7d:d8:9f:42:74:6c:eb:fb:e0:f0:80:2f:d7:00:
4a:e1:fe:b6:cf:87:7a:7b:48:5e:ae:75:4d:da:69:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:08:B8:8D:2A:3C:36:42:77:1F:66:07:04:D1:A3:10:81:9F:3E:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1AED8C8F43911EF80A81999762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.8.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9e:1a:39:05:9a:df:d1:b1:c0:eb:c0:56:5a:20:79:f6:56:
aa:a0:46:27:ac:b2:cb:24:9f:b8:46:a5:d6:4e:a4:07:40:63:
56:b1:33:83:63:92:84:50:0a:6c:82:0b:81:78:2d:60:3c:c2:
65:52:a6:dc:c5:74:44:cb:4c:75:64:80:ab:3f:b5:ff:1a:3d:
17:1f:5a:aa:98:5a:fc:70:bd:c5:66:93:cd:d8:85:66:38:73:
7d:6b:59:06:e4:a9:a6:56:8a:e6:27:a3:cd:75:9e:df:2b:78:
2b:b5:22:47:d7:a0:b6:6a:11:3d:48:92:4b:55:6c:5c:72:d7:
9f:77:12:80:c0:1d:9a:fa:2e:24:d7:34:f7:dd:72:c8:be:04:
ef:1f:95:5a:96:29:68:af:0b:36:90:ec:33:2c:00:2f:13:6d:
c4:6e:a9:4c:bb:c3:ab:b5:76:23:0f:e2:f0:6d:4a:d9:0e:0c:
c2:71:49:68:3f:39:95:38:fa:43:93:9b:42:04:2d:e2:99:13:
8c:56:d9:13:fd:e3:6b:b6:69:0e:07:c8:69:ab:2c:36:d4:38:
da:fa:37:12:5b:a9:44:4e:c4:59:d2:e4:8e:43:95:3c:3e:6a:
06:ce:82:0e:58:4a:74:3b:91:af:9e:8f:52:65:b2:d3:b8:0d:
22:d9:ee:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:43 2025 by rpki-client