Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D412F20DB4811EF87051D62762E951A.roa
File: 7D412F20DB4811EF87051D62762E951A.roa (raw, json)
Hash identifier: xLp0C2DgrrkmaRlY70r+0ZQU97IR0PwcPEWw5gU368s=
Subject key identifier: CB:79:24:63:EA:8D:91:0B:08:DF:BB:FF:95:54:91:80:13:44:8B:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D412F20DB4811EF87051D62762E951A.roa
Signing time: Sat 25 Jan 2025 18:16:26 +0000
ROA not before: Sat 25 Jan 2025 18:16:22 +0000
ROA not after: Sun 09 Mar 2025 18:16:22 +0000
asID: 63139
IP address blocks: 45.197.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70351 (0x112cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 18:16:22 2025 GMT
Not After : Mar 9 18:16:22 2025 GMT
Subject: CN=67952a7a-a16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:e9:ef:ab:7a:f8:0f:58:eb:87:09:56:dd:
da:16:85:5f:95:2b:16:5d:bd:38:ab:6a:d4:32:d4:
0e:a3:be:c5:63:ab:d5:32:7c:90:44:f4:c2:2f:ed:
25:f4:fa:26:79:0c:13:06:99:88:d7:83:20:29:38:
c9:18:38:0b:21:6d:4f:6f:a3:4b:7e:11:73:a0:84:
7b:8c:4d:08:58:04:7d:8a:8f:82:87:fb:57:7d:25:
90:cc:34:c9:be:2e:89:3b:58:a7:fd:dd:ee:9b:b6:
15:ab:49:c2:65:7f:87:5d:64:93:fb:3a:25:e5:8d:
b6:21:06:46:cc:92:80:47:26:96:7f:12:3f:75:19:
76:1c:c3:01:f0:4e:6b:4e:30:9b:57:63:80:23:ba:
7e:dd:1f:f0:3f:bf:1e:4a:a2:d2:ca:af:92:3f:78:
3a:a1:59:05:90:19:86:2e:06:4b:1f:c5:bb:1b:39:
61:1e:f8:c2:9e:a7:2d:c6:d7:24:19:b2:ef:cf:08:
46:82:f8:11:2c:10:23:d4:ae:00:ba:c7:30:b2:0c:
74:2a:e1:19:ed:de:aa:13:2c:92:2b:76:f7:df:ce:
91:00:6b:bd:f4:17:14:9d:a2:22:97:c1:9c:d9:d0:
7c:41:26:13:55:e1:10:97:e7:07:f6:1d:05:37:de:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:79:24:63:EA:8D:91:0B:08:DF:BB:FF:95:54:91:80:13:44:8B:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D412F20DB4811EF87051D62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:db:14:48:59:ed:33:6e:c6:0b:11:dc:78:52:a7:42:b5:5d:
26:e3:d1:ad:ac:39:3c:15:c1:0f:dc:b7:19:73:70:2f:f2:98:
95:53:0b:94:71:31:da:83:2a:10:e3:76:97:c1:1e:a9:18:0d:
fc:8c:02:25:1a:b1:ab:fb:b4:29:95:76:6e:d7:db:72:b0:a1:
de:f1:04:16:7b:64:99:5e:4b:48:89:4e:a2:08:20:10:f1:e9:
9e:ff:95:68:18:2c:3b:42:98:2a:1f:68:0f:67:7a:80:f6:7c:
34:d1:3a:a3:6f:e3:98:3c:c9:23:18:e4:d2:3c:11:06:6d:c4:
d8:1e:4f:ab:77:54:b0:6d:0a:7b:65:55:45:9e:47:50:7b:89:
ab:62:dd:19:d7:13:22:71:c6:76:dd:f6:94:a6:07:63:bb:51:
18:6a:fe:9b:0b:a8:ed:df:c2:a9:fb:f8:be:6c:0a:7f:48:25:
eb:ad:19:ec:12:ae:5d:d6:e0:c5:be:d5:7e:b3:d1:fa:ce:bc:
8f:73:56:df:84:66:5b:83:16:b6:06:95:6f:8a:93:a1:08:59:
42:20:5b:a6:c2:92:6b:77:5e:ae:e7:f6:e4:6b:59:12:b2:c8:
69:db:59:d5:23:f2:6f:b1:0b:3c:c7:3b:85:54:da:25:c8:55:
98:98:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:11:03 2025 by rpki-client