Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F819FFBAFBE611EFA9280F5F762E951A.roa
File: F819FFBAFBE611EFA9280F5F762E951A.roa (raw, json)
Hash identifier: WueIUH5SW8aMwrktVhX/oz2hVu5305Pl+NF1jilW9fM=
Subject key identifier: 94:8E:22:CF:4D:E0:B2:A6:AE:4E:C9:35:37:BA:34:D9:EF:CF:E7:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014437
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F819FFBAFBE611EFA9280F5F762E951A.roa
Signing time: Sat 08 Mar 2025 06:31:30 +0000
ROA not before: Sat 08 Mar 2025 06:31:26 +0000
ROA not after: Thu 03 Apr 2025 06:31:26 +0000
asID: 61112
IP address blocks: 45.196.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82999 (0x14437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 8 06:31:26 2025 GMT
Not After : Apr 3 06:31:26 2025 GMT
Subject: CN=67cbe441-5efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:52:cb:98:c6:d0:80:56:14:2f:d5:a3:e3:
bb:d5:f5:cc:f6:00:d8:9e:b9:60:e4:ec:45:9a:5b:
3f:33:bb:5b:4d:0c:2c:28:15:2f:58:02:7d:a6:76:
e8:32:4e:64:c4:b9:ff:fb:79:b2:f6:fb:96:fa:54:
94:da:e9:e3:fc:4e:42:72:10:8b:ec:d3:51:ae:50:
5d:18:8d:d7:c5:8c:09:ba:5a:87:bf:f7:41:98:d3:
7a:ee:1e:52:b5:70:cb:cc:7d:26:dd:b9:86:11:87:
cd:a3:b3:8f:63:f8:61:0d:6c:c0:1f:b9:0c:34:0d:
94:20:86:f9:f1:c7:6b:70:4c:b4:09:04:d1:3f:f6:
0f:18:c5:ad:c2:6e:88:76:1c:99:93:1c:da:3b:c4:
13:71:55:cc:94:f9:fc:21:1f:6c:f6:ee:08:7a:fe:
2d:90:dc:05:3e:bc:be:d4:9d:f1:ca:05:cb:3c:19:
32:db:8c:52:98:d7:e9:50:e4:08:2a:5b:b0:0e:e1:
b5:c9:66:19:0e:4a:bb:cf:ef:ea:9d:61:20:87:4a:
4f:80:35:68:26:bc:48:89:49:cb:06:89:78:23:47:
f7:c5:e2:fb:39:96:9e:61:41:28:2f:8a:17:9e:c5:
eb:08:1b:cc:ac:38:e8:ce:7b:16:52:0f:c7:e7:3e:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8E:22:CF:4D:E0:B2:A6:AE:4E:C9:35:37:BA:34:D9:EF:CF:E7:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F819FFBAFBE611EFA9280F5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.215.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c4:47:dd:8c:9f:15:b8:fc:d8:34:cf:9a:60:55:43:c9:5c:
a2:00:1e:f3:06:04:a8:95:3f:6b:4e:3b:f7:ae:a0:18:24:3f:
28:05:f0:07:23:e3:a3:42:2b:1f:bb:ad:b5:5f:15:75:de:3c:
4d:fe:31:e8:09:c6:ae:88:74:55:0e:37:15:c7:f2:63:e4:3c:
1e:ef:c5:88:d3:19:03:96:ec:b8:3a:46:95:de:72:f9:ce:27:
1b:94:e5:cd:6f:46:05:d2:a3:11:37:e1:1f:48:aa:17:f8:c5:
a0:0e:7e:57:ef:82:e2:d8:6b:78:04:ac:5e:c4:19:64:ca:33:
67:1d:12:bb:f7:5c:08:0e:ca:e4:1f:5e:50:a3:28:3c:21:87:
7a:cb:de:62:c9:d4:11:6f:ba:06:30:b4:4c:57:c2:41:28:61:
38:e4:55:d3:e1:24:92:4d:0d:8e:51:72:a2:53:d2:8f:ad:4d:
ce:f2:a1:ef:0f:c9:9c:c4:1f:1d:15:31:75:88:55:0d:1f:81:
1e:de:8b:b2:19:51:f3:1e:eb:47:54:7c:19:f8:72:66:4d:77:
da:62:be:0e:17:44:99:4b:37:c1:fa:ec:c9:b2:d6:2b:01:b1:
cc:de:7d:a0:53:92:ed:20:12:75:bc:c7:13:01:c1:a5:69:b8:
49:cf:d8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:04:43 2025 by rpki-client