Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/988E9C40DB5C11EFA36E0066762E951A.roa
File: 988E9C40DB5C11EFA36E0066762E951A.roa (raw, json)
Hash identifier: v8jCJJLImZX28MUtRTBIDoGI3uBhHz9y0YHp7t/BQBA=
Subject key identifier: E2:5A:B0:B5:B3:32:00:D3:03:C5:19:0C:54:E8:C4:B3:B1:15:EF:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011315
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/988E9C40DB5C11EFA36E0066762E951A.roa
Signing time: Sat 25 Jan 2025 20:40:22 +0000
ROA not before: Sat 25 Jan 2025 20:40:18 +0000
ROA not after: Sun 09 Mar 2025 20:40:18 +0000
asID: 138915
IP address blocks: 45.197.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70421 (0x11315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 20:40:18 2025 GMT
Not After : Mar 9 20:40:18 2025 GMT
Subject: CN=67954c35-ec1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:a5:c2:d2:e6:06:b3:d7:3a:ad:56:31:dc:
b5:3e:aa:de:72:f7:4c:56:d1:be:66:24:48:d0:32:
6e:4c:16:37:d6:82:4c:ae:e6:f4:a6:71:68:37:c3:
ca:98:1a:66:94:4b:78:93:6c:c3:12:da:4f:b0:54:
ea:ae:33:a9:38:ad:bc:ec:d2:af:9b:66:1d:76:92:
85:44:bb:ae:6b:c1:7c:cc:e1:60:b7:4f:4a:d3:7d:
b7:36:c1:c8:20:0f:a5:4e:3e:7d:c8:2d:8b:a9:9c:
58:a4:71:7c:84:f7:8e:aa:b7:8f:d9:59:00:51:d6:
9d:ca:e8:eb:64:36:93:eb:6c:28:f0:fb:01:0c:49:
64:0e:85:d5:9c:97:65:9c:3c:85:05:8a:e1:4e:7b:
6e:db:6d:8a:e8:4a:8e:d7:37:a9:da:e8:34:be:8b:
72:b0:95:d4:c6:21:5c:94:19:f4:a8:a7:17:56:f2:
59:15:58:40:b3:4c:51:2e:e7:87:5d:bc:c7:5d:04:
6d:22:86:cd:fe:dc:60:20:d4:a9:e5:44:18:f2:2b:
6a:e3:a4:5d:8a:72:39:5c:86:f6:e7:2e:85:ed:d9:
b4:5e:3d:a3:b3:a9:5f:b9:18:4e:c1:d5:20:5b:85:
63:bc:f9:94:37:e2:2b:bd:e9:f6:c8:16:a9:11:b2:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:B0:B5:B3:32:00:D3:03:C5:19:0C:54:E8:C4:B3:B1:15:EF:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/988E9C40DB5C11EFA36E0066762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.74.0/24
Signature Algorithm: sha256WithRSAEncryption
43:33:53:c2:12:6a:a7:29:85:10:d2:81:8f:53:f0:d6:4f:64:
b4:e6:e7:9e:af:33:ff:86:36:f6:ff:36:62:71:b3:fc:f3:96:
ee:84:64:dc:ea:21:d9:77:23:6a:d5:98:d1:dc:e8:39:d9:61:
6c:23:30:89:1a:d4:65:0a:01:f9:97:06:2c:49:1e:f5:d8:6e:
f1:76:65:b9:54:35:5e:7e:b6:2e:3b:29:9a:e5:90:e4:65:fa:
91:d1:e2:42:a0:4a:47:86:1d:a0:2a:59:9c:cb:3a:23:15:aa:
9b:ad:00:a3:4a:48:65:ed:0e:33:07:f9:03:20:8d:e1:be:6d:
c8:20:d6:b0:b1:c4:f0:19:24:56:54:c2:29:73:a6:26:5a:15:
25:91:2e:23:7e:7a:58:1e:16:d6:33:c6:bf:fe:13:61:ed:ac:
d3:ba:ff:02:54:f2:f0:ad:3c:8d:e4:f2:29:ac:34:ea:26:90:
3e:84:cf:da:27:e3:9e:c8:7b:92:c7:28:30:1f:68:df:f6:9a:
f3:d6:a9:4a:a3:ae:df:c4:f6:da:0a:d4:bf:c8:bd:60:67:91:
de:f3:53:b3:a6:30:6b:51:05:1a:7e:19:b9:25:c4:2a:da:3e:
af:76:e8:c9:08:36:2e:5b:21:ab:df:88:4f:c3:1e:e6:08:92:
cf:62:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:49:48 2025 by rpki-client