Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B296470DB5611EF98F6D6BA762E951A.roa
File: 1B296470DB5611EF98F6D6BA762E951A.roa (raw, json)
Hash identifier: TYTnY7RNIEy65ZMyGgS33QXkVKjwuFVN4LDALih2Q3k=
Subject key identifier: DA:07:EA:5C:48:99:BD:E9:75:16:F0:44:DB:7D:26:06:24:7E:56:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B296470DB5611EF98F6D6BA762E951A.roa
Signing time: Sat 25 Jan 2025 19:53:54 +0000
ROA not before: Sat 25 Jan 2025 19:53:51 +0000
ROA not after: Sun 09 Mar 2025 19:53:51 +0000
asID: 63139
IP address blocks: 45.197.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70379 (0x112eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 19:53:51 2025 GMT
Not After : Mar 9 19:53:51 2025 GMT
Subject: CN=67954152-621a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:96:b3:49:c5:51:ee:a2:d0:c9:fc:17:e0:
cd:c0:b6:03:85:c5:c2:50:53:22:70:86:67:ba:3b:
aa:ee:0a:ca:de:ac:22:9b:6c:e3:b5:05:ae:f5:6a:
36:0b:5e:e1:fe:50:1f:1b:42:65:bd:32:da:7b:26:
a3:57:9c:e6:c3:61:28:2d:2f:6b:16:0b:54:bc:c7:
7b:8e:c1:b6:00:6f:4b:6f:59:0b:97:7b:27:09:a4:
14:3b:20:a8:48:c9:61:ca:b4:a8:99:a9:53:a6:32:
39:ae:bb:51:a8:2a:7b:4b:86:12:de:ac:54:a2:60:
d8:23:72:27:1c:e7:e3:82:8c:f3:ed:00:99:01:b9:
0f:8d:4a:03:9b:af:8c:9c:d0:53:d0:27:47:81:8e:
10:a4:a0:15:1b:a4:79:a1:7f:6a:bb:e1:b6:3e:ea:
ad:3d:0c:c9:fe:56:26:c7:19:f3:47:1d:4e:ae:aa:
8f:ca:13:eb:7f:a1:47:4d:f9:e7:45:cc:44:f0:2c:
7a:b6:9b:a2:b2:ab:da:87:cb:a5:bf:eb:ea:36:e0:
26:e6:82:cc:47:08:63:75:cf:6e:60:0a:5e:63:ca:
06:09:19:52:3e:dc:7c:27:0b:47:dc:a1:30:91:6c:
0e:99:c2:7b:97:c3:e6:02:c4:04:c7:84:31:c4:54:
72:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:07:EA:5C:48:99:BD:E9:75:16:F0:44:DB:7D:26:06:24:7E:56:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B296470DB5611EF98F6D6BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.109.0/24
Signature Algorithm: sha256WithRSAEncryption
75:18:7e:21:14:88:d9:70:d6:4d:01:e8:44:44:2b:d1:7f:18:
c8:5b:58:9e:02:8d:89:04:b0:d6:09:85:b6:d2:4c:60:95:ed:
8c:a4:12:f4:c5:9e:10:8f:e6:f3:45:96:d1:10:67:82:fe:95:
2f:8b:7e:46:c6:7f:bd:1c:1d:36:ec:6d:80:72:e6:7f:0f:66:
d4:53:ca:c6:c8:a2:fe:d1:ae:1f:0f:9b:e9:40:76:dd:03:85:
8e:9a:1d:dc:c4:5c:8e:a6:df:72:13:7b:bf:22:71:f2:19:c0:
17:17:42:92:d2:21:db:8e:f1:fa:bd:98:42:f4:60:c5:6f:f3:
8f:74:02:cc:dc:f0:2d:66:40:a5:e8:85:2e:f2:06:db:a3:36:
d9:cd:9a:27:e5:4e:f7:43:3d:04:a3:e3:bc:b8:11:ec:80:95:
65:97:69:b4:26:a8:e6:91:a5:bc:74:be:95:af:df:82:d8:f0:
57:a2:ba:2c:cd:19:2d:db:e5:2c:71:3f:de:0e:c4:f4:25:4d:
5e:e5:bf:00:7a:68:8d:46:1d:f3:8f:51:81:16:34:64:ce:b1:
87:46:ff:2f:31:26:fb:71:a3:15:ff:00:b2:83:f4:74:80:a0:
f2:b6:ee:b8:03:bc:55:5c:3c:bd:cb:1b:81:28:96:cc:1a:d2:
4a:10:90:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:09:01 2025 by rpki-client