Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08DA47FADB4011EF916FF7A7762E951A.roa
File: 08DA47FADB4011EF916FF7A7762E951A.roa (raw, json)
Hash identifier: dBBVX1Ck38X+ZJp1FmkTXLybXJwYEMlgf1BbOcl/brA=
Subject key identifier: 96:BF:B7:68:FD:10:68:82:51:09:6A:33:E9:3E:F5:B5:AB:32:A1:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011299
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08DA47FADB4011EF916FF7A7762E951A.roa
Signing time: Sat 25 Jan 2025 17:15:54 +0000
ROA not before: Sat 25 Jan 2025 17:15:51 +0000
ROA not after: Sun 09 Mar 2025 17:15:51 +0000
asID: 63139
IP address blocks: 45.197.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70297 (0x11299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:15:51 2025 GMT
Not After : Mar 9 17:15:51 2025 GMT
Subject: CN=67951c4a-77a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a6:a8:85:0c:62:69:db:13:60:3d:6c:e0:3c:
22:a7:2a:25:5d:4f:4d:09:98:a8:0b:30:a4:ec:fe:
31:41:a7:42:02:91:a2:a8:2a:94:d8:cf:e5:7c:e7:
e2:16:2d:58:09:23:66:ac:37:2f:c4:74:b0:57:a0:
b0:88:6d:8f:8f:42:29:05:59:27:ea:96:0f:d8:d4:
89:dc:e2:6b:c9:66:ac:99:62:c5:0a:d6:d7:b4:37:
9a:df:00:bc:44:02:05:fc:e9:15:ff:ea:5a:97:5d:
c7:bc:0b:e3:09:c7:d6:59:ad:1e:13:b6:54:d5:8a:
ba:ad:b6:66:da:0c:7b:d5:09:93:6d:67:c1:66:17:
a6:37:86:a8:dd:d7:13:80:4f:ed:33:b4:ba:0d:f0:
92:43:42:b0:c8:a2:3a:39:b0:66:8e:53:5c:0b:4d:
8d:a0:3f:42:e3:61:8b:3b:79:0e:37:32:ae:b6:a1:
d4:96:1b:0e:85:90:db:46:96:0f:38:82:39:cc:eb:
22:02:c6:12:8f:41:63:c1:4f:6b:44:8c:29:b9:2d:
a6:38:fb:a5:20:83:cd:8b:df:1f:98:02:84:72:2a:
d4:f7:ad:ef:7a:c5:4b:b1:b4:40:8d:09:3b:ea:9d:
c1:e4:bd:82:60:c4:bf:d7:32:bc:d9:12:5e:e6:16:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BF:B7:68:FD:10:68:82:51:09:6A:33:E9:3E:F5:B5:AB:32:A1:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08DA47FADB4011EF916FF7A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.68.0/23
Signature Algorithm: sha256WithRSAEncryption
10:d5:ea:09:46:50:68:63:c0:f4:73:6f:8d:b4:3c:90:df:54:
af:a8:56:d3:37:f8:80:f6:fe:f6:89:3e:be:6d:9b:04:56:b8:
34:9e:d6:21:30:6a:6f:d8:82:17:7b:3b:4f:a6:43:bf:65:40:
0b:e7:25:50:e2:69:4d:f0:c1:88:53:d8:dc:7f:35:9b:08:04:
b5:b3:3a:1b:0c:ac:3f:2a:58:90:17:36:a8:71:14:0c:58:5b:
07:e9:69:9f:68:87:d5:78:13:cf:11:95:14:8c:37:c9:86:52:
34:ed:6e:4f:94:48:4b:d3:af:8d:82:ed:07:a4:17:bc:a7:01:
7b:59:a6:2a:ff:08:a1:c3:6d:09:6d:4b:96:39:bf:a4:ac:b3:
2a:0e:52:a5:1a:16:ae:a6:87:75:90:d6:24:1d:ab:ca:a6:3b:
85:c8:a8:63:53:21:e7:91:15:ed:db:70:cd:32:9b:d5:58:22:
bf:14:a2:a2:56:66:d4:cc:55:ec:aa:c9:43:84:20:aa:62:85:
34:e6:9b:7c:a3:53:3e:c7:f0:05:f4:fa:76:5b:f7:83:c6:0b:
22:94:e8:be:38:dc:0d:b5:34:91:80:12:f4:8a:bd:66:09:95:
66:81:f3:3f:5c:2b:a2:39:9d:86:92:85:3d:4c:f0:50:06:a2:
7c:d0:ed:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:52 2025 by rpki-client