Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4812238094E11F09AF83398762E951A.roa
File: E4812238094E11F09AF83398762E951A.roa (raw, json)
Hash identifier: D+Pc3MNVbX7ZZVJQWux8mARR7Nwa6ErwVBZaeqKkpks=
Subject key identifier: 0E:F8:50:C6:9F:8E:35:8E:23:FD:D6:2B:AA:2B:2F:07:E7:5B:02:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4812238094E11F09AF83398762E951A.roa
Signing time: Tue 25 Mar 2025 07:58:09 +0000
ROA not before: Tue 25 Mar 2025 07:58:06 +0000
ROA not after: Tue 13 May 2025 07:58:06 +0000
asID: 63139
IP address blocks: 45.197.125.0/24 maxlen: 24
45.197.126.0/24 maxlen: 24
45.197.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83959 (0x147f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 07:58:06 2025 GMT
Not After : May 13 07:58:06 2025 GMT
Subject: CN=67e26211-e92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:8a:02:c6:d3:5e:e4:71:d5:99:9e:36:79:
26:5c:41:d3:2a:a4:6a:e9:d3:4c:91:92:b7:47:aa:
ff:96:77:72:78:56:46:ac:dc:e4:b4:9c:fd:0c:9b:
b1:49:09:16:40:ed:0c:51:99:bc:a4:8b:3d:6e:be:
63:8a:e5:75:89:0d:2a:3c:55:67:25:c5:08:9f:e5:
9d:8f:5b:be:9a:b5:7c:b7:1a:e4:5e:2d:1b:c9:23:
03:39:a3:19:82:97:70:28:50:ac:2f:20:fb:dc:00:
8c:fe:ad:5f:9a:d4:ea:40:26:f1:2f:4a:70:bf:24:
3f:d0:1d:83:f7:3d:4a:7c:4e:3e:a1:b2:01:23:1e:
39:ca:fc:2d:52:3f:99:dd:19:b0:df:85:47:ef:33:
11:29:84:5d:da:fa:0f:8c:f0:fb:66:ff:b5:d2:5d:
a1:db:0d:d5:54:c9:94:fd:3b:cc:79:19:4e:a1:ab:
6e:08:ee:cd:1d:8c:5e:14:c2:f3:51:af:b5:b6:c3:
68:18:b9:59:49:14:b9:f6:c2:36:da:78:3b:07:dc:
80:ce:34:b7:fa:26:c2:44:42:06:40:3f:b6:4d:98:
8a:9b:1e:52:db:29:bb:e4:d2:80:17:48:bc:b0:ce:
c6:99:da:89:d3:ef:8b:de:3a:df:ce:0d:69:9c:de:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F8:50:C6:9F:8E:35:8E:23:FD:D6:2B:AA:2B:2F:07:E7:5B:02:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4812238094E11F09AF83398762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.125.0-45.197.127.255
Signature Algorithm: sha256WithRSAEncryption
5e:94:07:29:7c:c5:44:cd:56:fb:19:1e:bb:f6:72:dd:38:4f:
a1:a6:76:6c:37:79:45:ee:1c:24:bb:c1:8a:75:b5:f3:a6:27:
55:22:d4:6e:3b:18:ab:1c:de:14:d0:35:65:ce:d6:71:ba:01:
b0:b9:06:ca:23:c3:15:c3:12:59:49:59:13:bb:be:43:e4:c5:
9f:ed:54:26:d7:19:50:22:e7:fd:ec:9b:ba:11:21:09:5c:b8:
14:65:58:bf:5b:28:92:4d:0b:1a:aa:7c:7d:27:a7:f9:d9:3f:
56:cc:d4:e6:1b:d5:a7:df:a4:9a:e7:6b:f3:39:16:e1:a1:6d:
e4:b8:af:08:f8:a1:3f:e2:ed:37:e8:8c:95:99:ac:2b:5a:a3:
43:61:c4:9c:4d:04:91:33:90:ee:76:6a:c8:9b:f2:ca:d7:6c:
ff:e3:fd:13:5b:02:07:00:dd:8a:80:e7:8e:3b:d6:db:1d:0e:
26:e0:15:fe:57:9b:38:bf:50:ff:1a:65:13:e1:5f:4b:67:3c:
9f:35:f3:32:0d:43:eb:e0:ce:67:57:13:91:3a:e3:1e:08:15:
c1:aa:0b:f8:bd:e0:a8:da:f1:2e:7e:d8:7f:72:a7:53:e0:55:
01:ac:ed:1a:eb:60:4c:b8:1e:37:6c:f1:6a:94:2c:d6:06:df:
85:e8:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:05 2025 by rpki-client