Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A42A4A0C39911EF81559A66762E951A.roa
File: 2A42A4A0C39911EF81559A66762E951A.roa (raw, json)
Hash identifier: P5VJvtUhdtT+yuyDceXDA5fhhX/qbZaw094GIpIqdVY=
Subject key identifier: 99:10:8D:0E:BF:B6:F7:EF:49:8B:AD:12:BC:C9:20:1B:74:96:EA:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A42A4A0C39911EF81559A66762E951A.roa
Signing time: Thu 26 Dec 2024 14:53:28 +0000
ROA not before: Thu 26 Dec 2024 14:53:24 +0000
ROA not after: Fri 12 Dec 2025 14:53:24 +0000
asID: 984
IP address blocks: 45.197.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60739 (0xed43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 14:53:24 2024 GMT
Not After : Dec 12 14:53:24 2025 GMT
Subject: CN=676d6de8-7e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:7e:11:8a:8f:d3:d5:7f:5d:5e:50:f6:dd:
56:6b:37:7b:3d:aa:90:39:fe:d7:c0:3a:e1:75:2d:
b4:84:fb:ef:48:75:18:d0:9c:fd:17:dd:c4:0b:5e:
58:7d:3c:34:9e:59:00:d0:d1:b1:f6:19:2a:51:2e:
78:b5:89:16:cc:9d:ef:b5:ca:68:39:8b:c9:45:e0:
67:13:5d:80:4a:e7:fe:96:a7:53:73:8c:ae:2a:2c:
e8:8f:97:d8:93:8f:07:3f:37:f6:2b:db:13:8a:e7:
9d:28:2e:bb:a0:0b:54:d7:56:70:80:b1:6d:4b:42:
5b:13:c3:be:b5:33:87:92:21:63:d4:5f:c6:25:ca:
fc:a3:d9:0b:57:eb:94:6f:e9:46:28:49:25:3a:40:
8b:95:1f:5f:df:08:b6:70:5d:76:c0:1e:e7:f0:9d:
5f:86:7a:86:b3:83:ba:e6:15:e1:34:a6:af:40:d2:
5c:c1:1d:47:16:37:e3:9e:97:80:5f:d4:3b:5d:ad:
87:80:11:cd:af:6a:c7:90:c6:fd:e3:ec:2a:58:59:
2c:ce:0c:14:49:6f:db:90:f6:e0:a9:49:63:bf:4f:
e9:1c:eb:a9:a5:b4:e3:90:15:fe:60:49:91:59:d7:
86:58:ff:15:6c:27:f3:65:9b:56:45:e2:f6:4f:b6:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:10:8D:0E:BF:B6:F7:EF:49:8B:AD:12:BC:C9:20:1B:74:96:EA:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A42A4A0C39911EF81559A66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.137.0/24
Signature Algorithm: sha256WithRSAEncryption
79:47:ea:65:45:54:2c:6f:7c:06:66:b9:47:52:19:39:c4:30:
4d:80:b1:e1:56:af:ad:ba:36:b1:14:30:bf:9e:cf:ef:97:9e:
f5:30:46:94:fc:c1:44:b2:be:04:ba:7c:b5:16:f0:03:87:2d:
a0:10:9c:df:33:53:b5:52:9f:e9:37:66:01:b0:6e:30:bb:e1:
8e:35:3f:fb:70:35:a5:73:37:f2:da:3f:2a:95:d9:ab:5c:92:
a3:09:67:cc:36:8b:77:b2:ff:a3:a4:56:ea:85:6a:ad:d9:68:
a4:54:01:11:ea:89:e0:47:b9:5c:ba:d3:a8:9c:a4:ff:6f:ef:
68:96:d2:df:75:3e:b8:ec:b8:49:65:3b:91:4d:0b:ba:49:0c:
81:10:ff:e3:3f:0e:7b:8b:fe:68:a3:1f:6c:86:84:6f:26:22:
c6:af:36:57:36:53:31:5c:c2:d4:f2:0b:a6:55:73:a9:a1:51:
f6:34:2e:5e:8d:da:8e:cd:ea:bf:a2:40:0c:ae:3e:01:ad:72:
3a:a4:fc:49:47:c7:e5:50:e8:65:c2:9a:38:50:f2:8f:70:57:
37:79:81:36:de:b0:cf:56:ec:f6:9f:4c:49:7e:ba:f4:61:4a:
91:3d:41:83:a9:7a:3d:35:a4:9f:28:4f:8b:46:c1:f6:37:1c:
db:6e:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:23:18 2025 by rpki-client