Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79454B4CDFD811EFB03F24A9762E951A.roa
File: 79454B4CDFD811EFB03F24A9762E951A.roa (raw, json)
Hash identifier: s7mBNuLsDJFxa9yVvCkmn+S7A3X+kYEUZQD/dtZCesI=
Subject key identifier: A6:B0:83:FD:C0:D9:C2:53:B0:87:56:B1:15:35:91:5C:81:08:57:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79454B4CDFD811EFB03F24A9762E951A.roa
Signing time: Fri 31 Jan 2025 13:37:11 +0000
ROA not before: Fri 31 Jan 2025 13:37:07 +0000
ROA not after: Thu 06 Mar 2025 13:37:07 +0000
asID: 133933
IP address blocks: 45.197.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71134 (0x115de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 13:37:07 2025 GMT
Not After : Mar 6 13:37:07 2025 GMT
Subject: CN=679cd207-ac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:ed:27:b4:84:6c:7b:3f:03:84:91:1b:9e:
27:64:02:1a:bf:cc:dc:88:d9:de:e4:71:6d:f0:3c:
b0:8f:9f:ad:d7:79:c4:91:c0:d6:93:72:ed:8b:c6:
31:fc:38:63:e5:5d:52:06:8e:35:4c:fa:74:7d:ea:
f9:e4:09:09:72:87:56:08:e6:5c:8a:18:49:ca:e6:
e2:9c:54:06:c5:41:30:f1:41:ba:db:b9:d0:4f:ab:
0f:40:4b:4b:cb:14:96:c0:de:e6:25:10:9b:f0:97:
18:c5:79:69:44:14:c0:96:0d:1f:71:e4:3b:dd:e1:
a3:6c:59:7d:bb:47:6b:f7:59:b6:32:76:aa:f9:09:
7c:23:0c:27:bf:11:30:47:13:7f:b4:ee:8e:ad:43:
4a:88:21:83:a0:a2:de:27:02:a8:3f:47:1f:60:b5:
58:ff:91:3e:55:93:89:16:d5:37:a4:9f:65:6b:b0:
b6:96:e9:53:c7:0b:f9:3a:5c:e1:53:30:e4:ef:b4:
c2:ad:48:58:0e:19:55:a0:63:a1:50:53:5e:d8:d8:
d3:c8:a2:43:94:b6:99:06:54:52:b7:6b:c3:1e:7f:
91:7b:c1:dc:80:a0:9b:bc:98:91:5e:79:fe:c0:32:
a2:c5:4f:fd:04:78:b9:7b:6d:3c:fc:8f:7b:3a:a0:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B0:83:FD:C0:D9:C2:53:B0:87:56:B1:15:35:91:5C:81:08:57:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79454B4CDFD811EFB03F24A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:49:0d:b4:e8:5e:bf:b8:8b:ed:cd:0a:6c:6e:0e:86:f5:73:
c2:d4:73:9f:c7:4b:a0:c8:75:1b:22:7d:fd:d9:b6:4b:df:ac:
4b:5c:98:e1:37:97:11:a9:e9:ea:d7:74:7b:eb:bc:d5:9f:92:
f2:20:46:f1:c8:e2:3d:19:0d:f4:dc:93:36:7f:1c:32:56:9a:
4d:e4:d7:90:1d:e6:0a:52:38:e5:9d:83:07:80:45:39:3d:24:
23:45:8a:1c:29:1a:22:ed:3e:ec:8a:d1:86:ce:9a:23:5f:18:
ef:5c:84:2b:78:f9:b2:92:98:52:ab:2b:b5:ca:b0:91:ee:2d:
b0:81:ff:a8:fb:6a:a1:b6:87:aa:4c:b2:f4:75:03:3e:1d:fa:
84:b0:bf:59:16:9d:39:26:3e:b9:0e:8b:b8:1c:6a:25:ee:0c:
e4:f2:f4:69:2f:95:ad:ac:27:75:4a:44:5c:95:39:51:31:29:
a0:d2:de:06:9a:f8:8f:84:ef:01:76:5e:f4:97:64:e7:f5:51:
fc:a3:f7:28:89:5d:2f:4a:b6:e3:f7:62:5e:50:e6:9d:0c:5b:
ca:4d:c3:8b:ed:32:64:5d:ab:8d:57:95:6e:c8:4f:50:3a:81:
c4:d4:01:5e:ce:af:f7:ff:7b:b2:55:6f:92:d1:73:67:c8:4e:
99:6b:ac:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:42 2025 by rpki-client