Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3420E26F39711EF8401C6BB762E951A.roa
File: F3420E26F39711EF8401C6BB762E951A.roa (raw, json)
Hash identifier: shTjM5awwDhVyBlOJUh2xx7zVx0GFK5PZiwsA5GzmWM=
Subject key identifier: 3B:B9:AE:7F:49:0C:1A:1A:C6:90:3B:35:86:8D:D5:F1:AA:89:DB:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012EAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3420E26F39711EF8401C6BB762E951A.roa
Signing time: Tue 25 Feb 2025 16:45:42 +0000
ROA not before: Tue 25 Feb 2025 16:45:38 +0000
ROA not after: Wed 09 Apr 2025 16:45:38 +0000
asID: 138915
IP address blocks: 45.197.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77483 (0x12eab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:45:38 2025 GMT
Not After : Apr 9 16:45:38 2025 GMT
Subject: CN=67bdf3b6-6591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:26:dd:8b:cb:a4:78:f2:fa:38:00:a8:32:30:
66:b5:b0:54:86:76:6d:61:ed:29:61:06:f4:61:94:
b6:f8:e7:2a:3b:b5:7c:d1:d5:e6:35:f2:6d:8d:9c:
9b:90:10:b9:8d:08:26:72:0e:45:d2:c2:69:d3:17:
34:f5:b5:23:f9:66:b3:5a:c7:b9:e8:61:3e:ec:1a:
b2:fb:be:20:f8:7c:34:62:bd:c5:fa:e6:70:32:6d:
59:bb:e4:d1:52:bc:4d:10:d3:e2:ac:f3:90:1e:27:
f8:ec:8a:e0:36:28:9f:c2:46:52:34:50:c1:fe:e8:
ce:ea:c6:f1:15:0d:08:f7:45:45:66:ce:52:47:39:
de:a3:17:cc:9b:db:04:9f:be:e0:0c:24:c8:58:d1:
35:ac:09:a6:6d:96:85:4a:be:2e:17:71:f1:a1:da:
08:4c:8f:02:66:6a:c5:45:89:d1:92:68:8f:79:27:
38:d3:19:b7:f5:97:f0:8f:99:01:f9:4c:e7:a0:02:
44:79:17:b6:84:0c:ff:87:f3:1d:0c:97:22:69:3d:
f9:de:19:4a:6d:41:0b:15:77:85:f6:2f:54:6e:d2:
8f:61:c8:2e:dd:9c:56:f8:a7:fd:a8:30:a8:a6:0e:
2e:17:c0:47:ed:6d:92:6c:b4:3e:54:0b:04:d0:79:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B9:AE:7F:49:0C:1A:1A:C6:90:3B:35:86:8D:D5:F1:AA:89:DB:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3420E26F39711EF8401C6BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.107.0/24
Signature Algorithm: sha256WithRSAEncryption
31:47:02:d8:5b:3f:96:a1:2f:90:73:85:d6:98:f7:fe:1e:ed:
5d:14:0b:88:43:8f:79:71:59:e0:44:06:70:22:9d:c3:2e:1b:
00:d8:f4:88:dc:96:56:3b:d6:11:ef:45:a0:a0:02:c7:fb:75:
46:45:21:94:5b:c6:4f:b9:a6:fc:a4:cf:b4:4f:c0:b2:14:16:
5e:16:83:cc:a4:ad:42:4b:5e:e5:5b:a7:44:0d:65:a9:8d:8d:
a6:ae:dc:a9:db:08:14:06:63:c0:5f:35:b7:ba:17:d0:5f:69:
ee:5d:ef:e1:fd:b9:aa:b5:3b:8d:d5:aa:1c:44:1b:ef:3c:1a:
6f:86:c5:1b:25:0c:ea:7a:58:6f:f9:43:1b:27:fb:80:fd:44:
37:0f:85:13:a8:57:02:b8:77:20:ce:8e:b8:98:e6:34:b0:21:
d0:6c:3e:05:62:6e:75:4e:6d:39:14:b8:3e:d6:51:a0:3a:19:
dd:51:d2:0b:32:39:03:10:43:14:21:80:05:87:b1:be:b3:fb:
70:cf:2a:ac:f1:84:79:16:24:c0:06:0f:b0:56:93:21:6d:64:
38:36:23:7d:4a:2a:ef:87:43:5c:c8:0c:fe:be:0d:41:41:5c:
91:39:5f:5c:a4:41:37:67:16:6f:aa:f3:ba:df:bd:b9:e9:c3:
ef:17:50:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:29 2025 by rpki-client