Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D51E3B64F5D511EFAB66EEB6762E951A.roa
File: D51E3B64F5D511EFAB66EEB6762E951A.roa (raw, json)
Hash identifier: KSKGYLa4cJSqkUcCpqVtbxCOhshIZbmYHoWVLZpyMbY=
Subject key identifier: 11:00:05:81:09:4E:8C:16:E1:2A:06:34:97:FF:53:A6:70:42:27:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DD9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D51E3B64F5D511EFAB66EEB6762E951A.roa
Signing time: Fri 28 Feb 2025 13:13:42 +0000
ROA not before: Fri 28 Feb 2025 13:13:39 +0000
ROA not after: Sun 30 Mar 2025 13:13:39 +0000
asID: 203020
IP address blocks: 45.198.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81369 (0x13dd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:13:39 2025 GMT
Not After : Mar 30 13:13:39 2025 GMT
Subject: CN=67c1b686-82c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6f:39:ad:e0:68:60:10:ed:ee:78:68:9e:3d:
7b:95:a3:d6:10:20:09:d1:83:17:b6:fc:06:aa:8a:
37:45:2e:b5:50:e9:f8:b9:8c:ea:88:6d:d7:5a:15:
49:4f:17:78:5d:4a:5f:85:87:9e:46:d8:53:f6:97:
9e:52:0b:ce:55:7a:37:4d:dc:ff:48:29:2f:f4:01:
b5:57:aa:ef:4d:72:36:33:32:fa:73:4b:78:8f:06:
d9:c2:f3:89:92:87:b6:dc:85:91:25:6b:9a:e5:0c:
b4:7f:46:89:f6:e5:85:21:ec:3c:59:e8:fa:d6:1c:
5f:95:bf:03:24:a3:7e:d7:ec:d5:1b:e5:b2:3f:95:
d5:ad:5b:22:cd:49:de:3e:30:f3:9c:c6:98:67:98:
02:a6:15:81:cf:14:e9:8b:75:c7:51:32:50:05:4e:
bf:97:f6:b5:86:fe:7f:91:33:55:1d:ee:32:6d:23:
3d:08:a7:c9:c7:b4:5d:d2:4c:07:8a:9f:d9:cb:84:
ab:4b:b3:3a:01:36:19:20:34:bd:27:b8:b4:3b:a3:
c5:3b:93:77:97:22:ec:0d:f9:c8:b1:82:04:da:35:
5f:ff:7c:79:c3:0a:e6:7f:f8:b0:4a:09:da:17:24:
7e:5a:66:d2:7b:df:d9:87:93:3f:af:bf:8a:e9:a7:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:00:05:81:09:4E:8C:16:E1:2A:06:34:97:FF:53:A6:70:42:27:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D51E3B64F5D511EFAB66EEB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.48.0/23
Signature Algorithm: sha256WithRSAEncryption
47:7e:c3:31:63:bf:84:16:0f:13:20:00:c1:dd:b3:19:c0:4d:
7b:45:24:26:ef:b0:06:fb:71:91:3b:9c:12:13:74:2e:05:e1:
ed:7f:51:c2:f1:4c:43:45:3a:55:51:56:3e:de:35:76:85:6e:
ac:92:a6:62:2d:07:8d:9f:66:74:82:88:b9:66:ee:26:0f:f8:
ff:25:ed:d6:18:a7:a6:a8:c8:17:cf:8c:6d:07:5c:45:25:71:
8a:26:80:10:34:6a:12:a0:0c:fb:34:07:fc:d3:b5:ff:11:80:
77:6d:bc:6f:e7:60:4c:ac:95:83:a3:4d:7e:87:87:42:27:c6:
d0:09:8b:3b:62:47:66:84:04:3d:18:60:02:b9:4b:28:19:9e:
f8:be:ac:07:de:03:e4:03:5a:16:ff:ee:61:60:6e:b5:a0:c2:
b6:58:23:1d:a8:30:f7:3a:78:1e:9a:b9:23:55:c0:8b:4d:cd:
4f:4e:1b:ce:7a:5b:7e:3c:a2:1b:f0:e0:48:75:29:97:68:33:
d6:e9:0f:f1:39:db:e0:d4:ad:4e:5e:c7:ea:fc:be:51:80:53:
af:25:d6:b6:db:24:ae:81:f8:f3:60:6e:1b:5f:d5:6a:0a:a3:
a7:bc:e6:c9:f0:39:33:57:6e:31:2b:b2:fa:aa:c4:de:8d:a8:
a3:df:67:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:08:35 2025 by rpki-client