Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE2F0A8EE55D11EFAD283F65762E951A.roa
File: FE2F0A8EE55D11EFAD283F65762E951A.roa (raw, json)
Hash identifier: Hl7drt5uqtPxQmNrmO9ad2faTPZf+oHpzUbR7PE3uXA=
Subject key identifier: 7F:44:E4:DB:E4:B3:1A:40:86:9A:BD:49:7A:B2:60:86:BD:5A:4D:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DE6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE2F0A8EE55D11EFAD283F65762E951A.roa
Signing time: Fri 07 Feb 2025 14:15:33 +0000
ROA not before: Fri 07 Feb 2025 14:15:29 +0000
ROA not after: Fri 21 Jan 2028 14:15:29 +0000
asID: 17561
IP address blocks: 45.196.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73190 (0x11de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 14:15:29 2025 GMT
Not After : Jan 21 14:15:29 2028 GMT
Subject: CN=67a61585-f3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:27:4b:f3:7e:9a:02:fe:9f:c4:d1:4a:4f:
21:dc:53:e9:07:12:7f:c2:4e:03:40:50:91:5f:f3:
f5:2b:5a:64:53:34:56:4b:32:48:8f:a3:79:3a:7e:
ec:5a:a8:d7:a2:00:f2:2f:aa:1d:9d:db:db:c1:15:
08:48:bb:b1:9e:22:a3:a7:98:c7:51:55:bb:f4:55:
40:12:94:11:4b:c0:86:c1:18:a9:15:f5:90:2b:44:
c6:0f:07:c4:4e:9f:ca:c3:fc:62:82:6e:99:67:f1:
0d:05:38:46:1e:bb:b7:86:7a:98:54:5d:90:90:81:
0e:81:1a:22:fa:03:85:5e:11:7b:85:64:c1:4e:87:
41:64:8a:fb:7e:5b:ab:67:25:6e:66:c3:f2:18:a7:
2d:bd:3d:e6:41:2a:c3:c2:9a:3b:66:1c:8c:fa:26:
9d:79:fb:e4:9f:de:d6:79:9e:dd:f9:64:04:a4:76:
05:7b:86:a7:3b:7c:3c:c2:63:c6:20:32:db:3b:05:
4a:c3:3f:3b:70:05:8d:11:a5:01:41:f5:60:a8:cf:
2a:17:e2:36:4d:6a:67:f3:94:b5:e9:a3:3e:ac:7c:
75:3b:01:4c:f8:61:e5:ad:05:05:2c:d8:30:92:73:
3c:38:d6:24:b5:e6:dd:07:23:d0:f6:b7:7b:ef:0b:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:44:E4:DB:E4:B3:1A:40:86:9A:BD:49:7A:B2:60:86:BD:5A:4D:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE2F0A8EE55D11EFAD283F65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fa:45:66:ad:a8:58:33:ad:2f:94:91:10:1e:ac:a3:2c:4f:
10:3f:5e:74:a5:3d:96:88:a9:56:ae:1b:f8:3a:36:38:96:ff:
96:f2:03:4a:44:88:84:de:92:98:d0:c4:c2:83:10:4f:e5:7d:
fc:8a:48:27:e3:bb:e0:1a:3d:2f:fd:68:e2:ea:a9:69:94:e3:
84:0a:cc:d7:c2:44:cc:0a:d4:1f:d3:2a:d1:55:f3:20:0a:d1:
38:a0:45:6c:be:47:e5:a4:94:d0:37:e2:e9:cc:4d:67:26:4b:
3d:34:bb:ef:18:93:21:fd:7b:5c:dd:49:af:6a:d0:06:a9:ba:
b7:7e:49:7e:c3:75:6c:b9:b1:11:16:d9:8b:64:05:77:13:b1:
a7:18:61:e1:88:3e:5d:57:94:87:4c:cb:6c:e9:4f:bc:04:31:
a9:bc:f7:4e:38:09:25:f5:9e:be:9d:07:8f:a8:e7:86:91:ec:
35:ad:6a:61:48:f4:15:0a:64:55:8f:1c:69:bc:bd:12:f7:6f:
1f:a7:b9:9c:a0:53:f1:0e:00:2b:c5:ce:ad:ca:3c:48:8f:63:
53:35:19:12:69:c2:e9:e2:09:12:2b:da:82:01:4c:4a:bb:c4:
2d:70:c4:8b:c8:03:fb:11:c6:4f:05:a3:1b:94:38:92:d0:fb:
6d:27:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:57 2025 by rpki-client