Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AA6C902DFD811EFA82A02A5762E951A.roa
File: 2AA6C902DFD811EFA82A02A5762E951A.roa (raw, json)
Hash identifier: WEnq0nDW94OytqGitvafdn/Xtmqt33F4MsiVBu7C7T0=
Subject key identifier: 60:8E:2F:27:09:70:F6:A1:8B:E7:97:BE:E6:B9:5A:D2:6E:E6:F0:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AA6C902DFD811EFA82A02A5762E951A.roa
Signing time: Fri 31 Jan 2025 13:34:59 +0000
ROA not before: Fri 31 Jan 2025 13:34:56 +0000
ROA not after: Thu 06 Mar 2025 13:34:56 +0000
asID: 133933
IP address blocks: 45.197.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71132 (0x115dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 13:34:56 2025 GMT
Not After : Mar 6 13:34:56 2025 GMT
Subject: CN=679cd183-f7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:9b:3b:de:31:2d:54:ca:e3:e2:ae:c5:02:
cc:29:91:f1:18:37:d6:f7:c5:09:fa:8d:35:f2:39:
24:50:bf:c0:a2:ef:4c:01:35:aa:b0:85:8a:73:3d:
9c:21:91:e4:70:90:35:6d:df:b4:fd:ce:74:d6:ed:
06:f0:0d:39:08:df:b7:36:0e:ad:9e:44:76:0c:dc:
cd:49:4b:f7:49:b6:59:df:ed:bd:80:bf:5a:4e:d0:
f2:9c:93:e0:77:3f:df:11:da:7f:a0:d0:ef:58:f1:
bf:db:94:4c:76:05:cd:b9:10:e4:52:1c:2c:80:5f:
11:e8:63:7c:44:8e:ed:eb:ed:9d:c4:21:e6:54:5c:
54:76:9a:d1:3d:be:34:40:68:56:97:5c:30:0a:9b:
8a:86:69:5f:db:f0:cd:3c:b3:ea:81:1e:3c:33:38:
db:d2:be:56:b4:64:db:67:6f:a4:23:72:7a:f2:fc:
c4:56:87:67:eb:4f:b0:59:dd:0d:b5:9c:f3:be:0e:
28:6b:3f:93:dc:07:f6:bc:e7:9b:cd:69:13:b4:c8:
b1:5d:39:97:da:30:42:bc:9f:6f:2e:a3:af:4a:5d:
cb:03:70:8a:80:de:6a:06:cf:0a:5f:f8:7e:c3:f7:
0a:ca:63:b8:85:93:12:98:82:5b:e7:f9:3a:c5:92:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8E:2F:27:09:70:F6:A1:8B:E7:97:BE:E6:B9:5A:D2:6E:E6:F0:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AA6C902DFD811EFA82A02A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.132.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a9:86:96:c8:f7:c1:de:e7:d0:de:d0:80:5b:96:88:40:e5:
51:6f:52:99:a9:ef:9e:ab:fa:2e:dd:e8:3c:c7:a9:e4:10:aa:
b2:d6:b3:99:59:28:62:ff:6c:b7:2e:db:39:42:8e:91:79:db:
45:d1:e9:f5:9b:7b:37:4a:13:20:e7:f9:dd:1a:99:67:ae:5e:
38:4b:95:9b:7c:e3:21:f8:89:f7:e1:7d:07:56:a3:66:b7:b9:
51:66:7c:c9:e3:4d:fb:15:49:e0:d0:6e:e3:56:74:9e:b1:6f:
7a:b6:28:e1:e7:9d:74:b3:57:8b:97:9d:e9:7e:d9:7b:69:15:
78:cf:86:7b:da:b4:85:72:7b:51:2f:26:8f:44:c8:af:f2:ed:
da:b0:b8:13:9a:ae:91:a6:ce:6d:cf:27:19:1f:4e:fb:c4:a7:
e4:fe:db:36:9a:52:92:a2:10:68:7b:db:d8:58:bb:4f:49:1d:
5e:8a:b3:e4:af:b9:c8:1d:89:6d:d7:a1:c2:c2:a7:4e:f7:43:
62:c0:7c:a0:15:e8:5d:e5:d6:74:0c:71:34:31:49:50:cf:32:
29:d5:b9:ba:ce:b7:bc:2d:c6:8b:91:f0:d6:cf:82:3d:a1:bb:
f3:18:d9:eb:ce:a1:d5:c6:11:da:5d:8e:73:98:6e:80:07:65:
42:00:02:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:57 2025 by rpki-client