Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66E4CE0ADB5A11EFABF2FE57762E951A.roa
File: 66E4CE0ADB5A11EFABF2FE57762E951A.roa (raw, json)
Hash identifier: VwDHbYg/EpF7azF6AhQ9UV+y8cYXaKyrijA4FPCtxMw=
Subject key identifier: ED:68:52:3F:3E:92:C0:5B:DC:79:BB:E8:FA:34:C5:A7:25:2E:88:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011307
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66E4CE0ADB5A11EFABF2FE57762E951A.roa
Signing time: Sat 25 Jan 2025 20:24:39 +0000
ROA not before: Sat 25 Jan 2025 20:24:35 +0000
ROA not after: Sun 09 Mar 2025 20:24:35 +0000
asID: 63139
IP address blocks: 45.197.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70407 (0x11307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 20:24:35 2025 GMT
Not After : Mar 9 20:24:35 2025 GMT
Subject: CN=67954887-7bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:4f:d9:4c:b0:f2:01:4c:1c:6b:6b:ba:b9:
5d:cb:c9:18:00:51:2e:67:7f:b3:27:9d:aa:2e:71:
94:a4:35:72:e1:c1:27:b7:5c:08:77:c4:49:2f:22:
41:b8:45:b9:f7:fc:e1:75:39:c6:7c:11:e9:18:36:
2c:8b:35:72:e2:29:15:26:5d:02:a4:d4:47:ea:d7:
3e:5a:ea:ba:bd:fc:fb:5f:5b:36:d8:0b:38:ad:b0:
50:a4:cc:5e:ae:7c:4f:57:9b:26:b3:0d:a2:49:aa:
ce:13:27:c5:ab:a4:51:43:53:ca:e4:16:ad:c6:44:
a0:f8:d5:4e:68:8b:77:95:c7:f6:38:cb:a0:be:a1:
4d:cc:e4:0e:66:e5:f6:5a:30:31:fc:0f:ff:b9:07:
27:38:c2:a2:7d:b3:a5:0c:f5:28:16:c3:a0:f1:4c:
4e:39:03:e8:d3:07:91:a7:12:de:49:ac:d4:ca:57:
67:d4:80:d3:00:86:b7:22:cf:6f:b1:5f:d4:a2:67:
ec:5e:cb:6a:86:bc:0e:04:1c:da:95:18:e8:48:74:
24:e8:9c:25:67:51:3b:5c:eb:6f:81:86:e6:e0:0e:
6d:a0:4f:f9:c4:ae:a8:f8:a2:d3:e4:f4:a0:b6:76:
44:f2:ac:21:2d:fc:3f:84:90:bb:40:22:1b:f0:31:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:68:52:3F:3E:92:C0:5B:DC:79:BB:E8:FA:34:C5:A7:25:2E:88:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66E4CE0ADB5A11EFABF2FE57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.123.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c8:34:72:7f:4d:cb:da:ff:5b:1d:a9:c4:31:91:50:17:0a:
53:77:97:8f:e0:3f:76:98:a1:93:a0:0d:8a:ff:ad:0c:96:db:
ae:10:7c:fa:cc:a8:5e:dd:0d:6e:e5:76:51:66:ab:a2:40:54:
3a:51:d5:c6:22:be:0f:ee:60:ef:ec:0d:0d:ab:80:a2:ff:1a:
a9:56:3c:0d:37:a5:71:56:5f:02:32:6d:d1:bb:2f:75:38:dc:
42:84:19:a0:86:54:5c:ad:2b:4a:8a:92:39:9d:6f:75:8b:af:
e8:10:5b:e1:67:53:5a:e6:aa:77:32:95:75:e3:e2:63:7d:99:
42:6e:77:68:be:dc:1b:e9:f8:fc:41:be:4a:f8:99:2a:ee:f9:
68:fe:df:85:65:a3:56:74:45:8d:83:d5:d6:da:76:9d:48:be:
e4:23:f0:be:a5:aa:20:63:9c:dd:1c:cb:e3:b9:a9:2e:63:0b:
b6:27:3f:4a:3c:01:a6:fa:a2:e6:ac:e4:5a:46:d3:6c:42:4b:
ee:f6:8c:30:56:5a:c3:d4:c0:67:ed:fb:b0:66:98:14:69:7a:
1a:df:89:88:7e:ad:1c:a4:f2:a3:83:7a:b5:5f:79:17:e8:a2:
42:98:28:56:b9:8a:bb:64:e0:18:9e:eb:ce:b8:94:16:8d:9e:
59:94:a4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:22:06 2025 by rpki-client