Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49AF541CDBDD11EF85CABC50762E951A.roa
File: 49AF541CDBDD11EF85CABC50762E951A.roa (raw, json)
Hash identifier: 7OQamAMCoKbs4p5rqcNWh3ke2HEMtW/ZUW7hEy3Pquc=
Subject key identifier: 5F:1D:EA:88:DA:8F:3F:6B:D1:60:8A:2C:D1:14:66:31:3F:CF:1A:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01135E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49AF541CDBDD11EF85CABC50762E951A.roa
Signing time: Sun 26 Jan 2025 12:01:35 +0000
ROA not before: Sun 26 Jan 2025 12:01:23 +0000
ROA not after: Tue 25 Mar 2025 12:01:23 +0000
asID: 6079
IP address blocks: 45.197.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70494 (0x1135e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:01:23 2025 GMT
Not After : Mar 25 12:01:23 2025 GMT
Subject: CN=6796241f-8337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:85:3a:94:cb:1a:bc:f9:eb:02:18:de:b7:
ec:70:55:f0:be:8b:5d:d3:f4:09:b3:a1:74:06:d7:
da:00:61:9f:dd:b6:53:3b:9c:97:ca:ff:3d:7a:aa:
28:4c:36:0a:1b:55:2b:bc:76:e6:3c:2c:0b:6e:bd:
f9:7b:b2:5b:ac:06:48:ee:2d:96:85:fa:5b:97:38:
99:a4:3b:f0:54:86:c9:b3:f0:e2:66:19:fa:cb:27:
48:74:96:ef:14:d6:ba:15:ef:45:a0:32:2b:ba:1e:
17:d9:80:73:3f:48:1f:32:c0:ac:45:b7:c5:fb:6f:
71:7e:3b:55:0c:27:40:5b:df:73:43:76:ad:b4:2d:
12:c9:5b:16:5f:df:35:62:a1:75:b1:be:97:5d:88:
4c:a0:e0:a1:03:20:3d:51:a6:23:66:d8:ba:e5:38:
47:41:a7:af:ac:03:e3:8b:c1:99:05:f8:18:7b:b5:
79:06:28:43:df:08:5c:3c:1f:cf:a0:34:bc:76:6c:
e8:3d:6b:88:85:4c:89:e2:62:82:55:24:43:e2:a3:
d7:fa:2b:29:83:fc:f4:77:b2:5b:ae:1a:6c:49:16:
12:ba:ce:e1:42:bf:4f:bb:21:ea:b6:94:5b:4c:59:
9e:4a:a6:c7:66:96:f2:0d:bb:bd:21:84:fc:d1:a5:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1D:EA:88:DA:8F:3F:6B:D1:60:8A:2C:D1:14:66:31:3F:CF:1A:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49AF541CDBDD11EF85CABC50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.208.0/20
Signature Algorithm: sha256WithRSAEncryption
65:ec:2c:0c:e0:24:93:df:58:0d:19:3e:8f:dc:67:ab:b5:04:
db:29:8b:89:ae:a3:bd:70:46:fb:61:29:72:4b:8b:74:6b:28:
83:69:de:a1:0a:7d:95:cb:b6:fe:e1:02:2c:75:4a:bd:24:13:
17:f4:a4:19:fb:22:8d:9c:fa:e2:07:8d:95:9c:1e:45:db:fc:
2d:a7:95:30:53:f1:7d:4c:89:6c:7b:e9:80:6f:17:7e:c4:e9:
06:02:df:f4:f0:e9:cd:17:ec:f3:f6:bb:ef:80:1d:d0:41:1e:
3c:ac:ea:51:d4:b8:f6:eb:40:0d:44:4e:a9:36:bd:79:95:2f:
72:96:aa:35:db:86:d4:7b:5d:cf:13:d4:c0:fc:11:a1:f2:f4:
96:08:14:67:8a:37:ac:50:17:56:10:bc:26:fb:36:dd:cc:8d:
49:9a:fa:8a:10:93:73:6f:73:ce:36:53:3a:55:fb:48:ac:a0:
c8:d4:cb:60:f5:41:18:f9:09:23:15:7b:5b:00:44:27:60:aa:
4c:dc:1c:3a:e5:ca:b7:42:89:f1:ad:d2:ba:aa:78:ee:6f:29:
ac:a3:9a:0d:a6:1f:92:90:d9:0f:43:a5:9e:f2:89:19:7e:9c:
9b:38:51:5b:5c:3e:a7:20:75:25:66:35:f6:1c:59:c9:3c:3a:
fe:37:20:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:40:31 2025 by rpki-client