Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ABD2966DB4411EFA53E6144762E951A.roa
File: 1ABD2966DB4411EFA53E6144762E951A.roa (raw, json)
Hash identifier: zB873hL6SDn8PobQ5AnxTpJsaoaz1ctZ+/BQ5zcD4q8=
Subject key identifier: A6:30:05:48:E3:F0:9B:65:FB:E7:BC:81:39:D1:1F:4D:5C:C6:4A:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ABD2966DB4411EFA53E6144762E951A.roa
Signing time: Sat 25 Jan 2025 17:45:03 +0000
ROA not before: Sat 25 Jan 2025 17:44:58 +0000
ROA not after: Sun 09 Mar 2025 17:44:58 +0000
asID: 63139
IP address blocks: 45.197.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70323 (0x112b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:44:58 2025 GMT
Not After : Mar 9 17:44:58 2025 GMT
Subject: CN=6795231e-e69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:91:e1:af:31:97:db:b4:45:bb:81:37:87:
65:05:1e:20:03:33:3e:0f:eb:f8:41:b8:65:bf:35:
8e:61:13:c1:02:58:ad:1a:a6:bd:7c:cc:f9:b3:13:
57:d5:82:bc:93:2a:78:a1:36:4c:cc:21:3f:01:4f:
0c:d5:06:fe:e8:f9:9f:11:a0:53:af:02:9e:b9:74:
bd:ec:af:2b:e6:c3:fa:a8:49:4e:ff:8d:70:db:bb:
11:95:e0:23:47:09:6b:7a:fd:a8:9b:10:c5:ed:84:
14:ce:c9:69:48:bb:1a:3c:6e:e5:e0:a6:ae:d1:a4:
cc:1d:34:be:d4:81:5d:1e:86:a3:c7:57:a3:ad:f6:
94:3e:47:1c:68:33:4b:aa:bc:84:ad:c2:77:d3:fa:
be:58:fd:e7:74:57:9c:d9:1b:ed:f3:3f:eb:5c:59:
b6:7e:20:4b:c8:b2:ba:e2:56:40:b3:3e:b7:f8:c3:
dd:35:46:a3:f8:fb:59:83:f4:00:68:90:7f:3a:9f:
91:87:fe:aa:ff:de:9c:1a:11:b6:84:91:67:10:00:
db:61:cc:63:4a:c7:24:36:d3:2b:8f:d3:f7:ed:03:
e0:29:d8:59:4f:19:a6:57:a2:80:b4:47:e8:df:39:
da:ce:2a:e1:86:59:5a:82:bc:17:72:04:56:97:c7:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:30:05:48:E3:F0:9B:65:FB:E7:BC:81:39:D1:1F:4D:5C:C6:4A:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ABD2966DB4411EFA53E6144762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.81.0/24
Signature Algorithm: sha256WithRSAEncryption
af:67:07:cc:5f:6d:cd:20:8d:31:66:b7:10:a1:48:6e:cf:76:
24:dc:d0:9d:fe:45:76:7b:33:db:6f:39:79:e2:a4:e2:d7:c8:
86:ca:81:45:4a:bf:d8:61:05:f4:08:4d:0c:ce:c9:10:c7:66:
69:29:fd:47:9c:50:59:22:8a:b8:ba:fe:fa:f3:12:ac:60:ef:
5f:52:12:49:a5:17:ac:2e:bd:e4:b0:dc:39:ce:e2:25:4f:01:
11:e8:d4:74:ae:54:b9:e4:1a:d5:a8:5a:3a:52:48:4b:95:23:
ce:ab:a3:77:c5:90:8a:7f:e1:63:da:34:92:5a:b9:f5:ae:23:
5f:28:e9:d1:bf:3d:83:f2:da:ba:01:3b:7c:27:9c:3d:e7:7d:
e3:a5:16:29:53:44:1c:43:21:4e:52:d3:12:01:19:7b:6d:0c:
cd:dd:2a:bf:91:f7:c8:45:de:3d:54:aa:60:95:9b:a1:94:0e:
fb:ea:0d:01:ae:2a:59:12:e9:9a:76:81:7c:c6:e0:d7:51:30:
1d:c8:8d:0b:d8:d0:83:5f:fc:30:96:b0:89:a5:f0:25:6a:f6:
3d:f0:6e:dd:c9:c3:57:4e:56:19:57:74:bb:5f:57:0f:e8:f2:
af:bb:2d:0d:61:12:61:54:a1:33:f1:14:84:70:af:6b:b9:3c:
51:a2:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:28 2025 by rpki-client