Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7DD9EEDFD711EFB7B646A0762E951A.roa
File: 3E7DD9EEDFD711EFB7B646A0762E951A.roa (raw, json)
Hash identifier: TqvJOe6VC/U9LjmlrLWBsBT5cJ7KQJBXdwsMlv90MC0=
Subject key identifier: 95:D7:87:E6:C2:00:31:8D:1A:96:00:02:F0:E8:66:6D:AB:BC:EB:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7DD9EEDFD711EFB7B646A0762E951A.roa
Signing time: Fri 31 Jan 2025 13:28:23 +0000
ROA not before: Fri 31 Jan 2025 13:28:19 +0000
ROA not after: Thu 06 Mar 2025 13:28:19 +0000
asID: 133933
IP address blocks: 45.197.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71126 (0x115d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 13:28:19 2025 GMT
Not After : Mar 6 13:28:19 2025 GMT
Subject: CN=679ccff7-9f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:d5:4b:77:9e:fc:e3:da:c4:a0:80:cb:ff:
eb:a6:4a:4a:18:6e:66:54:5c:99:1f:98:f7:0a:8a:
28:bb:32:02:f3:9e:ce:7f:10:1f:77:10:ad:2b:03:
f1:d3:c0:ab:8e:af:57:6b:fa:df:b4:8d:dd:18:85:
6e:6a:66:19:68:d7:c7:f1:85:83:57:a2:56:00:ab:
0d:87:47:89:2a:aa:4b:d6:85:2b:01:29:68:6a:85:
ac:25:43:07:c2:a6:f5:4c:4a:b9:65:2e:ab:22:44:
b2:ff:cb:16:d9:69:1d:56:5b:43:75:5f:25:23:03:
d7:cf:bb:2c:b2:ee:24:f0:4c:dc:d9:00:82:de:62:
ef:c2:43:ab:c5:de:1c:08:9e:9e:ff:93:ea:ca:32:
03:9d:cf:5c:8a:70:64:ff:1b:a2:1e:a0:68:96:3a:
f3:4e:f7:33:34:e5:80:20:29:d1:16:c5:e6:0c:6b:
13:b0:25:9b:06:ed:f0:d4:89:9c:c1:2c:40:fc:2b:
00:0b:a9:93:76:9d:a0:2e:27:07:24:65:47:11:e3:
06:80:f8:11:56:9b:ca:ab:8d:ce:f5:0f:39:ce:b5:
26:95:89:fe:41:24:37:8f:74:da:4c:0c:2e:d0:ce:
32:ff:a9:37:74:bd:58:6d:2d:69:c4:e6:1a:21:d9:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D7:87:E6:C2:00:31:8D:1A:96:00:02:F0:E8:66:6D:AB:BC:EB:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7DD9EEDFD711EFB7B646A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.135.0/24
Signature Algorithm: sha256WithRSAEncryption
58:8d:5e:f5:ce:05:27:f1:c7:2a:2a:47:29:c6:53:78:93:b9:
a6:92:3d:21:89:bd:34:84:b3:84:60:d0:33:e4:09:53:6c:61:
f2:39:2a:74:f6:ce:a5:a0:70:fb:0b:78:1c:1f:dc:a8:23:85:
3a:56:57:d9:ef:74:c0:1d:be:2e:c4:2b:0b:9a:59:1f:2d:3f:
40:a0:fb:94:4a:91:3c:de:3d:5f:9b:93:e2:ad:57:44:bf:94:
28:0c:e8:1b:3d:6b:3f:62:f2:5a:55:74:97:9e:f0:c7:43:a9:
83:0e:e1:07:89:30:c4:ee:10:9c:1a:74:fa:36:a6:99:ee:75:
93:34:11:68:8a:9b:cb:da:2b:3a:1a:63:ff:f6:e2:e1:1f:f5:
93:f6:3a:6e:31:05:06:fd:52:ea:83:07:c5:bf:1f:be:b7:24:
6f:7f:72:ec:82:be:7d:71:6e:84:9f:f3:40:5c:04:9a:1e:f0:
d2:93:4f:5d:5c:86:6f:91:c8:41:42:b7:f0:68:59:b8:25:06:
fe:a2:b4:52:66:87:ae:b8:31:8e:cd:2f:9f:cc:18:70:59:3d:
bf:fa:e3:ad:f3:16:eb:8f:0e:d5:af:ea:ea:dd:06:68:b9:ef:
22:43:6d:81:e1:9f:08:94:22:1b:f8:fe:75:ee:27:89:cb:33:
dd:71:0a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:27:07 2025 by rpki-client