Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3994E420DB4211EF9FDE54B7762E951A.roa
File: 3994E420DB4211EF9FDE54B7762E951A.roa (raw, json)
Hash identifier: HA51txzJg30QCCJ1gmfv99tn2+qXbgPZT/wA6onai3A=
Subject key identifier: 1B:1B:6E:B2:C8:5F:7B:BA:B7:FB:A2:92:E1:08:DE:6C:23:AA:97:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3994E420DB4211EF9FDE54B7762E951A.roa
Signing time: Sat 25 Jan 2025 17:31:35 +0000
ROA not before: Sat 25 Jan 2025 17:31:32 +0000
ROA not after: Sun 09 Mar 2025 17:31:32 +0000
asID: 63139
IP address blocks: 45.197.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70311 (0x112a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:31:32 2025 GMT
Not After : Mar 9 17:31:32 2025 GMT
Subject: CN=67951ff7-9188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:19:4e:31:ba:3f:9e:5a:02:52:a4:57:0a:
42:92:7a:54:56:e0:77:50:6e:c0:c8:86:d4:56:c2:
b7:c2:86:64:cb:9f:8f:37:2a:05:33:d1:e7:d2:cc:
8c:38:52:de:53:e2:88:8d:bc:7e:0f:bd:b2:12:f5:
7a:18:73:3f:37:1b:9a:e9:b8:35:5e:2d:09:86:65:
3e:e0:b8:05:14:c6:33:d4:7d:0a:70:81:5e:f1:8b:
cf:12:4d:c2:5b:c0:c9:3c:9a:24:6c:78:a0:69:33:
3c:57:35:7d:af:39:35:e3:4f:5f:59:3b:4e:2e:59:
bc:62:f3:5c:c3:63:25:74:8e:da:d5:f8:21:94:02:
79:4f:b1:11:e6:a0:40:db:54:f6:4b:e3:54:53:cc:
e6:bf:e8:31:0a:a1:da:75:56:10:ff:af:82:ba:8a:
52:49:60:c6:7e:94:72:ba:d4:32:9b:31:da:5f:51:
bc:28:b8:bd:4b:0d:17:aa:91:75:89:b7:60:42:c0:
c9:d0:3d:dc:c3:e6:e6:d6:57:f2:90:ba:c0:f6:d5:
36:51:83:62:82:f1:b3:87:df:ff:b6:65:de:41:31:
64:53:cb:15:f7:35:33:69:bb:ed:68:47:67:b2:26:
a5:38:f2:46:7c:a1:15:f4:2e:d7:76:75:96:32:37:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:6E:B2:C8:5F:7B:BA:B7:FB:A2:92:E1:08:DE:6C:23:AA:97:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3994E420DB4211EF9FDE54B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1d:9a:d4:37:fd:09:76:9b:31:e6:2a:48:02:1b:ba:be:a3:
14:81:7e:64:a9:64:63:be:21:71:1d:aa:8a:83:69:73:7f:27:
5f:af:93:70:b6:e3:51:3d:62:1b:ca:20:72:97:9d:28:53:8e:
fc:35:24:82:b3:f0:1d:4a:4d:c9:8d:4a:a8:72:9e:c4:37:bd:
20:f4:2c:5b:4e:e3:64:28:64:e1:fd:57:c2:92:14:bf:b7:d0:
4d:8a:98:72:5a:b8:8d:2c:9f:a8:17:ba:83:c7:b7:34:fb:20:
fc:af:16:cd:e8:ef:97:a2:5b:3f:24:2d:26:94:79:38:ee:39:
96:c5:3c:bc:7b:d8:ff:d2:25:3f:09:65:c2:65:6c:34:e8:0e:
f9:7a:28:35:24:bb:48:e5:e7:29:fd:4d:d1:07:2d:47:08:92:
d8:0e:3b:ec:bd:18:07:68:f5:9e:95:11:6d:7c:1e:e1:76:cb:
3f:71:ba:a5:22:16:b4:ae:46:58:89:78:15:37:db:a9:e8:83:
c2:8d:b2:c3:3d:50:44:6a:9c:87:a9:b1:fb:6f:c7:c1:6c:d6:
e6:fa:ec:4a:51:11:fd:2b:11:70:ad:77:0c:97:91:77:f0:7a:
ca:f0:74:0e:0a:14:1a:c7:e3:a7:78:21:9a:d4:cb:0e:3f:db:
48:52:e9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:50:53 2025 by rpki-client