Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E31A744E058411F09276DC72762E951A.roa
File: E31A744E058411F09276DC72762E951A.roa (raw, json)
Hash identifier: ZR0dxR1mL/kE7ri7yQfDGXHPHWci4hUFrTr4HHouLGQ=
Subject key identifier: AA:9F:D1:A5:B8:81:21:B1:D3:3C:6F:07:25:FD:27:E2:F1:A7:5B:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014759
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E31A744E058411F09276DC72762E951A.roa
Signing time: Thu 20 Mar 2025 12:14:35 +0000
ROA not before: Thu 20 Mar 2025 12:14:31 +0000
ROA not after: Mon 05 May 2025 12:14:31 +0000
asID: 7018
IP address blocks: 45.196.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83801 (0x14759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 12:14:31 2025 GMT
Not After : May 5 12:14:31 2025 GMT
Subject: CN=67dc06ab-20d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:cb:fa:5c:20:50:c4:d0:bf:e0:9d:90:72:
46:e3:1d:dc:d7:54:ae:cf:88:da:4b:12:30:d8:df:
2c:81:b3:2a:53:fc:c9:43:76:25:0a:19:fd:b5:11:
2a:ee:fe:95:5d:7a:e2:de:b2:5c:06:a0:62:84:0b:
4b:0d:c4:25:11:fb:7c:c8:5b:34:98:07:9f:6f:79:
b8:e8:8a:8b:29:d7:8d:9b:92:a8:51:ba:09:09:28:
4a:03:56:4f:24:40:8b:8f:0f:30:0f:05:b6:a3:0b:
e5:53:34:fa:91:1b:87:c6:5d:39:e9:6c:cd:38:69:
1c:2a:f0:33:ea:f9:a7:5d:01:db:a4:8c:16:f9:39:
bb:0f:a4:9c:59:66:91:78:23:df:7a:67:68:be:06:
93:4c:af:c6:b7:71:8b:5f:d0:85:a6:44:51:72:40:
6f:49:52:c1:ab:95:10:4d:25:eb:70:e7:34:31:f7:
0c:c8:e7:68:0d:bf:68:86:f6:ec:60:1a:64:4f:c3:
cf:9e:ae:90:3a:21:3c:52:95:8e:37:7e:7e:c0:79:
24:11:65:a0:fc:2e:d2:c2:a0:a8:1f:ed:fa:14:fe:
aa:c9:87:98:97:39:e1:09:fc:52:0d:88:fd:7d:7e:
79:71:1f:66:37:d9:5f:f9:ee:ea:36:33:67:94:aa:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9F:D1:A5:B8:81:21:B1:D3:3C:6F:07:25:FD:27:E2:F1:A7:5B:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E31A744E058411F09276DC72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.144.0/21
Signature Algorithm: sha256WithRSAEncryption
24:a5:d5:fe:60:e3:0d:c3:ae:84:11:bc:35:fc:a9:78:d6:65:
1c:03:b5:a4:00:72:d6:34:ba:63:cb:5f:58:e8:b1:fa:b9:87:
6d:c6:d9:13:bb:a9:0f:ca:fe:e7:47:2e:78:11:09:1d:65:d6:
50:4e:5c:4a:15:9d:6e:aa:f4:c7:c1:3d:16:84:21:31:be:a0:
0d:4c:01:aa:5f:8d:7b:3c:83:b0:da:81:54:5f:ba:b4:e2:10:
90:e5:9e:3b:5b:48:4c:58:f2:e8:b8:5f:d6:0a:fe:4e:fb:71:
3b:7e:0b:e7:ad:f4:ae:00:bd:f4:40:46:df:97:63:4e:00:35:
11:c5:cd:a6:52:44:e4:20:55:9a:9d:47:59:28:1b:12:75:6d:
e1:aa:d7:01:8c:90:d4:03:00:ef:75:71:51:4a:8c:3e:9c:6c:
ac:49:dc:f2:75:b1:54:67:b4:b7:5b:69:36:ba:32:8d:4a:0e:
72:f1:32:31:55:88:39:b7:2b:53:ea:23:1d:86:67:3a:67:b2:
1a:9c:39:64:25:e2:b9:df:b5:7b:72:13:54:1a:63:6a:7d:62:
35:3c:87:5f:bb:0c:f0:2a:60:7b:20:d9:6b:11:2f:24:b0:e4:
74:25:a2:4c:35:e0:a9:4d:2c:2b:d3:e2:86:de:7e:03:a2:ed:
31:ae:63:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:49 2025 by rpki-client