Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ED653EEDB5811EF8EBC6A4A762E951A.roa
File: 4ED653EEDB5811EF8EBC6A4A762E951A.roa (raw, json)
Hash identifier: AKqBZ0Ex3rQii19GWfLHuRctiHdxaKaJy8yaHhExRv4=
Subject key identifier: F7:35:17:3B:E1:BB:60:48:BC:48:7B:B2:13:26:A2:9A:16:46:5E:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ED653EEDB5811EF8EBC6A4A762E951A.roa
Signing time: Sat 25 Jan 2025 20:09:40 +0000
ROA not before: Sat 25 Jan 2025 20:09:36 +0000
ROA not after: Sun 09 Mar 2025 20:09:36 +0000
asID: 63139
IP address blocks: 45.197.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70393 (0x112f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 20:09:36 2025 GMT
Not After : Mar 9 20:09:36 2025 GMT
Subject: CN=67954504-6e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:5e:f8:07:4a:1f:12:68:28:08:a6:44:72:
ff:5a:80:9b:a7:b0:e5:f5:54:4e:df:3d:65:f2:77:
0d:8a:0c:49:85:a3:fb:c4:c6:16:8f:8f:5d:8a:ea:
18:47:5d:eb:bf:de:f1:c3:7d:fd:de:1d:37:1f:35:
3e:29:79:e5:f7:43:2f:ef:c7:d1:48:23:e7:06:b0:
ec:cb:8a:0b:d8:de:22:3f:1c:c8:49:f9:fa:96:69:
59:3c:43:31:b4:a3:ca:04:fb:9a:57:4e:f6:31:06:
20:08:e3:59:32:0c:ae:26:54:40:09:e1:02:54:39:
24:09:17:36:4b:7c:4e:22:da:c4:ed:cd:7f:34:bc:
b8:c1:c4:3f:77:10:b8:d9:ff:54:b8:fb:1e:33:38:
f9:0c:d1:0f:6b:2e:c3:54:21:5a:fa:83:90:2a:1e:
4c:03:96:61:73:06:7c:41:57:82:78:32:20:27:ee:
1c:d6:dc:f7:d5:24:64:21:bd:65:e1:e2:d3:24:a2:
54:dc:11:ce:1a:bc:1c:82:14:ce:30:bf:db:a9:18:
e8:22:7b:75:12:24:a1:07:9c:e1:58:e7:7c:02:0d:
a9:27:6a:73:3e:7e:40:30:91:37:82:a9:9a:ac:be:
17:4d:66:27:ba:a5:c9:0c:b1:6f:aa:aa:9b:df:a3:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:35:17:3B:E1:BB:60:48:BC:48:7B:B2:13:26:A2:9A:16:46:5E:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ED653EEDB5811EF8EBC6A4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.116.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:29:07:d1:09:8b:06:53:2c:94:e5:e7:53:85:45:83:12:b1:
1a:4e:d8:d0:67:24:55:91:93:20:ae:48:41:f2:a2:e9:6a:d2:
a9:5d:db:5b:39:18:b3:14:7a:77:e1:70:59:68:aa:35:92:9b:
7e:dd:6d:69:1d:02:14:b1:35:cd:cf:e2:80:8e:8d:9f:80:ae:
71:d2:93:b8:4e:e8:74:e2:63:d8:f9:94:ad:c3:84:b7:84:4b:
d2:bd:97:08:87:09:e2:ce:1d:eb:bc:a1:47:5e:f7:97:6e:fc:
cb:dc:ba:c5:b3:e5:16:6e:9a:29:12:af:af:f8:b9:e3:66:23:
90:4e:b3:16:f7:c8:99:8c:fc:ec:ae:94:88:95:e7:81:f4:6f:
fd:30:88:8a:5a:84:b0:1a:37:f4:a5:5a:86:07:46:c9:87:91:
d2:b4:ae:8c:fa:f5:f6:40:ac:9d:db:d6:f0:a4:31:da:e3:ad:
92:76:9a:ca:cd:f1:85:22:69:2d:78:38:0f:8f:15:a3:f0:e4:
47:03:dc:fe:db:52:e9:02:57:ed:c5:b3:ed:c0:2c:11:2a:98:
17:c4:9f:b5:1b:0f:d8:a0:2d:ec:04:ba:42:73:72:24:74:76:
60:34:3d:b6:f6:db:5a:80:1f:ae:0f:95:28:d3:71:5e:59:c8:
03:f0:21:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:49:50 2025 by rpki-client