Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C53603ADB5411EF8183CDAD762E951A.roa
File: 3C53603ADB5411EF8183CDAD762E951A.roa (raw, json)
Hash identifier: hp62JsjERLy+Qb8au8zpDEuz8qf2H+tEwK5BQVuxAQs=
Subject key identifier: 0B:3B:6E:9C:8F:06:EE:2D:7E:B8:7A:23:DD:08:61:CC:40:8D:6A:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C53603ADB5411EF8183CDAD762E951A.roa
Signing time: Sat 25 Jan 2025 19:40:31 +0000
ROA not before: Sat 25 Jan 2025 19:40:27 +0000
ROA not after: Sun 09 Mar 2025 19:40:27 +0000
asID: 63139
IP address blocks: 45.197.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70367 (0x112df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 19:40:27 2025 GMT
Not After : Mar 9 19:40:27 2025 GMT
Subject: CN=67953e2f-0beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:55:e7:8f:1b:ed:c6:3d:90:a8:f1:61:52:
3b:d4:38:df:28:be:02:a2:d4:13:b3:ff:86:49:af:
69:f6:4d:66:17:0c:02:2a:ff:79:2f:85:69:0a:15:
ed:e8:5b:5e:69:24:d3:77:79:11:1b:c4:6b:c9:f0:
36:54:f3:5a:86:b3:e3:29:48:89:47:c8:51:0e:9b:
e6:2c:b5:a5:98:14:7f:f6:73:d1:a2:6b:31:bd:37:
d8:ad:20:c3:b0:70:b7:32:a4:dd:34:54:8c:ab:e2:
d4:ed:26:cc:36:ef:bc:5f:3f:ae:d0:55:ea:32:63:
e5:40:12:6d:04:26:71:89:f3:e0:8b:46:88:98:45:
cb:90:ae:39:16:c4:cb:e1:74:3b:b1:79:0c:cf:08:
2f:eb:fe:a4:cc:77:0d:7b:3e:04:b3:3a:6f:b8:1e:
ba:47:a6:ee:85:f5:16:d6:2f:d7:27:99:df:13:78:
a5:f9:76:e5:e1:98:28:3e:ba:72:7a:9b:98:4f:89:
c2:9c:6f:9b:c8:74:b0:66:0c:83:e7:cd:b6:92:c7:
d4:02:1b:29:f7:a3:0d:0f:82:de:df:10:b0:10:89:
d8:7b:c9:33:71:5f:0f:81:30:38:79:73:7f:13:06:
00:fc:33:83:c8:af:ab:20:95:46:bc:e7:be:0b:30:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3B:6E:9C:8F:06:EE:2D:7E:B8:7A:23:DD:08:61:CC:40:8D:6A:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C53603ADB5411EF8183CDAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.103.0/24
Signature Algorithm: sha256WithRSAEncryption
76:43:fd:4b:db:78:b8:bd:70:69:f7:b0:57:20:10:f5:27:85:
d1:7a:e3:7d:68:35:43:10:33:4c:94:e2:cb:b4:93:4f:b5:f5:
59:25:b8:63:c7:fb:e8:66:d9:60:e5:85:67:91:34:ed:31:a1:
d3:1c:40:f3:d1:74:67:a0:b3:44:76:8a:69:7d:b7:8c:e0:11:
29:04:f2:6e:05:24:9a:06:f5:d4:5f:08:f0:40:92:32:8d:cd:
09:78:bd:6e:5b:44:5d:62:b0:60:83:be:87:89:3d:7c:9d:7e:
04:52:d5:98:0c:1a:d7:59:d6:1d:05:7a:fb:11:19:3f:7b:9e:
26:11:b3:d4:e3:b2:63:90:42:61:d9:9b:53:8d:df:d6:6c:cf:
5e:72:69:9e:c2:4c:b3:71:dc:ff:3f:21:e4:d0:8c:29:12:79:
dc:b4:62:d1:32:5b:3a:e0:b7:98:b3:f0:fb:f4:4b:59:45:a1:
e1:78:86:c2:27:12:a4:4a:1b:44:46:b6:b1:dd:82:bc:83:8c:
4b:c4:04:8e:36:0c:cb:c9:c8:ca:db:4a:3e:50:8f:74:3d:7e:
73:fe:bc:86:c5:e1:a9:c4:02:fe:cb:18:30:33:17:cd:b6:12:
6f:53:a4:32:c3:94:0a:02:59:f8:05:33:2b:5f:9d:b2:9a:e4:
65:cc:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:30:16 2025 by rpki-client