Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8DF39D0F5BD11EFB7A34794762E951A.roa
File: F8DF39D0F5BD11EFB7A34794762E951A.roa (raw, json)
Hash identifier: MiCxMyg/4jogFw/5kVsV4odAr9HMaOkqKbb/5AwUnAo=
Subject key identifier: 89:86:8C:9A:B4:59:C6:E4:D3:41:7A:6B:BB:28:C1:A5:A9:A4:0D:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8DF39D0F5BD11EFB7A34794762E951A.roa
Signing time: Fri 28 Feb 2025 10:22:54 +0000
ROA not before: Fri 28 Feb 2025 10:22:51 +0000
ROA not after: Sun 30 Mar 2025 10:22:51 +0000
asID: 138995
IP address blocks: 45.192.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81165 (0x13d0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 10:22:51 2025 GMT
Not After : Mar 30 10:22:51 2025 GMT
Subject: CN=67c18e7e-e6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:b6:7c:9c:50:70:c0:6f:37:56:fe:9c:8f:
23:0b:a3:d9:2c:39:1c:78:cc:32:ed:95:3a:fa:c2:
0c:65:78:f6:08:fd:fa:dc:d3:c9:21:da:ff:a9:c6:
5d:2a:cf:3e:e0:e2:6d:07:b3:f0:3a:db:73:0d:4c:
9a:bd:ed:2e:f4:27:a9:11:9a:cc:bb:32:78:a3:e0:
7b:04:f8:34:53:9a:6f:80:dc:97:15:2b:9f:cc:81:
85:2a:fa:de:91:32:3a:36:a8:da:59:0b:a8:60:63:
ec:b3:ee:76:18:ba:0f:a5:1d:ec:f2:dc:d5:ea:c6:
58:70:ba:d4:0f:f7:a9:e1:49:4d:b5:d0:b0:46:85:
7c:42:c8:24:f9:28:e2:1d:a3:b8:ba:40:ad:a7:22:
2c:db:71:01:8b:8d:ab:07:ab:bc:5f:ba:cf:f3:95:
bd:71:33:83:fc:40:e1:48:4e:dd:c8:f8:c9:75:f0:
2b:82:a3:d6:1b:6e:ae:b3:1e:0b:69:a3:59:67:1d:
2b:bd:3b:df:52:b1:28:9e:20:a2:25:5d:bb:d9:7a:
53:c4:8c:1d:4d:2c:e0:a3:ac:48:75:d9:ff:48:f2:
60:6c:77:48:bf:c9:43:3c:97:ae:2d:0b:cc:02:4b:
24:a4:fb:1a:38:a1:f1:75:1c:4e:29:21:79:48:7e:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:86:8C:9A:B4:59:C6:E4:D3:41:7A:6B:BB:28:C1:A5:A9:A4:0D:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8DF39D0F5BD11EFB7A34794762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f9:42:02:d7:17:ee:a8:9e:38:fb:95:df:68:12:4d:f9:ef:
61:9b:a9:f4:ed:a3:f3:92:46:49:b8:95:0a:3e:8c:ad:1a:6d:
98:45:a0:c1:ee:2e:bb:54:a1:0a:28:cd:9e:02:5a:43:38:36:
da:9b:db:bd:9c:fb:bc:ce:77:73:37:31:9a:55:eb:48:d4:a1:
9e:72:0d:f2:d4:a9:d4:14:9d:33:5c:82:eb:2c:96:82:03:0a:
a8:87:ec:50:57:db:3b:e4:df:17:dd:3d:a1:b1:36:72:c1:15:
07:1b:ec:e1:a1:d7:39:76:a5:54:ea:d6:91:08:97:26:e1:c5:
93:d3:8a:4f:8b:de:ef:be:b8:b9:7c:7b:fa:13:94:eb:1e:fa:
8e:de:96:93:f5:55:9d:00:2b:e3:06:b4:40:79:be:44:c4:99:
96:de:ed:6e:f3:1f:49:73:41:f2:f2:51:bf:ed:85:68:7d:af:
98:0e:8f:ca:a3:fa:0e:e4:45:ff:d0:8b:dd:16:43:d5:25:29:
3d:5b:56:57:11:75:2e:32:2f:32:bf:76:7b:f8:8a:11:17:a9:
eb:04:96:08:bb:59:78:08:4c:54:98:19:1e:c7:3b:70:97:9a:
5c:a9:0b:ea:9f:58:4a:6b:f9:60:df:c7:6a:9b:55:e4:2c:ff:
da:42:54:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:18:53 2025 by rpki-client