Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30417144DB4811EF9345CE5F762E951A.roa
File: 30417144DB4811EF9345CE5F762E951A.roa (raw, json)
Hash identifier: An6QiAGf3R6Nh0VTUOScVXGfbexFCW87EtLnG+xYpSc=
Subject key identifier: 37:0E:F9:63:EA:02:D5:B7:2D:49:B1:D2:B8:88:FC:B6:A6:BD:9A:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30417144DB4811EF9345CE5F762E951A.roa
Signing time: Sat 25 Jan 2025 18:14:16 +0000
ROA not before: Sat 25 Jan 2025 18:14:13 +0000
ROA not after: Sun 09 Mar 2025 18:14:13 +0000
asID: 63139
IP address blocks: 45.197.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70349 (0x112cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 18:14:13 2025 GMT
Not After : Mar 9 18:14:13 2025 GMT
Subject: CN=679529f8-e13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:1f:39:dc:95:67:2a:38:d0:ae:c9:5c:eb:
57:b2:97:d3:f3:27:f3:67:72:de:f3:fb:fa:78:a7:
27:6d:6b:3c:58:5f:82:a2:4b:7b:88:40:02:c4:a7:
9b:12:ce:bc:82:fe:7a:ed:5b:52:b9:66:c5:07:e3:
4b:85:07:a6:97:a4:f1:9d:a6:57:7c:45:a5:6e:d3:
55:36:1e:c0:f4:69:13:e1:c2:8d:d8:e4:5d:99:8b:
56:b3:c3:eb:2e:b8:c1:19:81:15:d1:9a:70:71:51:
56:06:81:2a:f8:69:06:de:3a:96:bd:bd:f0:33:83:
1e:ea:13:c3:6f:8b:f6:98:ee:fe:6a:fe:df:25:14:
dc:00:71:3a:33:e1:21:2c:88:c5:95:f6:4d:17:28:
c6:65:1e:a7:13:39:37:ad:cb:7f:13:12:0c:ad:84:
b1:9a:ae:25:ce:e8:a5:40:c6:15:4d:82:25:1a:f2:
e2:4f:5e:c9:fb:24:26:d4:a6:ba:09:46:86:18:09:
24:03:15:b7:02:07:67:20:b7:c5:16:75:cf:b2:15:
e3:36:5f:58:8c:74:99:ae:1b:eb:85:5f:ba:90:71:
1c:a5:20:b4:0a:eb:5e:cc:78:e6:bd:97:3a:4f:9a:
1a:25:50:0f:7d:94:8a:e3:60:a9:25:0d:78:d9:c9:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0E:F9:63:EA:02:D5:B7:2D:49:B1:D2:B8:88:FC:B6:A6:BD:9A:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30417144DB4811EF9345CE5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3a:9d:57:53:c3:67:96:76:a9:2a:54:6e:c3:2f:21:9e:86:
ac:6f:4b:8c:c7:40:17:60:31:f3:3e:f6:41:2f:9f:71:8b:41:
b6:62:02:df:1e:bd:bc:f7:af:77:54:46:59:7d:67:2f:ae:bc:
ed:26:ea:e7:ad:da:44:80:33:b5:3a:38:39:8e:28:a0:3a:55:
11:c1:5b:2d:b3:44:e6:40:f4:da:a9:75:73:2f:8d:a4:4a:3d:
2e:18:5f:35:e5:d8:03:ee:ca:ba:7f:97:cf:b3:a4:66:08:1a:
7a:27:00:19:61:93:a3:9f:05:2e:b5:75:a7:d1:29:19:a8:67:
97:2f:c8:03:61:2e:e9:8b:da:96:40:f8:68:a1:83:52:cc:84:
dd:fc:2f:f8:98:ef:f9:bb:a3:fc:ae:d7:cb:68:29:c4:39:ae:
16:b3:6c:57:2a:85:96:bb:2f:29:6b:78:54:7f:9c:51:03:9d:
a8:7e:23:ef:68:fb:41:00:82:0c:c7:3e:0c:9b:9f:ec:6f:44:
59:cd:59:15:38:c5:4a:49:22:ed:41:ce:ff:62:bb:20:1e:ac:
cc:47:ef:fb:a8:b0:94:07:8f:e5:eb:d1:91:60:5c:3f:f2:2d:
4c:ee:31:36:f8:bb:28:e2:8c:10:6c:b0:fe:6b:a8:fa:57:8d:
37:56:ca:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:19:36 2025 by rpki-client