Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA7F9952DB4511EFB3E91B4E762E951A.roa
File: AA7F9952DB4511EFB3E91B4E762E951A.roa (raw, json)
Hash identifier: MLzcFvwLlWBltjvP2C6Y2SJVjexKdPCUJgPC5v1cs/A=
Subject key identifier: 54:CB:DA:67:07:E0:B3:62:F5:6A:FB:62:AF:AD:BC:41:4A:E7:04:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA7F9952DB4511EFB3E91B4E762E951A.roa
Signing time: Sat 25 Jan 2025 17:56:13 +0000
ROA not before: Sat 25 Jan 2025 17:56:10 +0000
ROA not after: Sun 09 Mar 2025 17:56:10 +0000
asID: 63139
IP address blocks: 45.197.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70333 (0x112bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:56:10 2025 GMT
Not After : Mar 9 17:56:10 2025 GMT
Subject: CN=679525bd-62e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:91:2e:cd:54:26:4f:ec:6f:f1:56:a7:77:
84:9f:09:63:24:e2:96:3e:e7:f0:aa:78:92:43:d7:
59:f6:85:e6:24:52:e8:89:b9:d7:2f:32:9c:3b:2c:
08:18:71:a0:b9:49:87:fd:79:2e:bb:04:9e:f3:38:
01:2d:55:5f:6c:bc:05:fd:7f:91:0b:41:c4:15:5e:
65:ff:49:bf:97:7b:94:9b:93:64:c6:c4:d1:06:e1:
8b:df:ee:23:6b:0b:56:19:97:39:5a:80:39:74:b6:
d0:d5:fe:d9:20:f5:38:72:08:09:1d:dd:f4:ab:8d:
ae:20:20:17:33:04:5a:6b:88:9a:03:ae:ca:4e:fa:
9b:b7:1a:00:6d:5b:9a:82:ef:58:8d:3e:da:99:2f:
43:24:b4:fb:69:4c:55:e8:60:e5:f2:78:6f:16:e1:
77:f9:6a:ae:81:d2:ff:d1:bf:73:a6:21:8e:a7:56:
2f:15:0a:73:f7:a8:0c:c4:51:82:4e:92:02:55:2c:
b6:34:16:46:bf:89:0c:61:80:38:13:52:ac:a9:9c:
93:7e:15:13:40:b2:83:b2:23:56:e4:cb:06:cb:91:
a8:3c:f7:1d:44:ab:63:32:10:4f:ee:70:6c:fe:e1:
04:1a:78:a4:2c:0b:f3:e0:71:1f:d7:52:a5:7d:a3:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CB:DA:67:07:E0:B3:62:F5:6A:FB:62:AF:AD:BC:41:4A:E7:04:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA7F9952DB4511EFB3E91B4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.86.0/24
Signature Algorithm: sha256WithRSAEncryption
53:17:11:e3:e9:43:62:72:51:45:b7:33:ee:e8:ed:5a:ec:64:
71:7b:5b:30:7a:75:0b:fa:36:a9:d1:90:c3:4b:61:57:a1:f0:
0f:35:35:dd:fa:d9:e0:ee:56:59:33:ee:ab:54:de:f2:e3:26:
22:6f:49:53:f8:70:92:39:0d:b8:0e:df:76:03:bf:73:0e:5d:
21:ff:9c:6f:e3:e3:91:27:02:3f:7c:c0:3e:87:cf:ad:db:e4:
bb:fa:b9:88:fa:05:95:53:ec:8c:65:52:ba:3b:e1:fb:bd:fd:
96:80:5b:f2:ae:bd:0c:95:8e:b8:e4:44:52:fb:76:0d:f9:0c:
09:a5:a6:ca:6a:fb:25:e1:94:b7:d2:55:88:f7:6f:94:d6:d2:
ba:4a:ed:8b:b1:c3:a7:4f:fb:db:e0:75:03:01:56:1d:43:12:
c1:a6:51:ff:1f:db:51:4d:2d:d1:d0:ed:7c:41:e4:3e:2c:95:
03:a6:59:12:08:11:b0:63:d3:b4:67:66:1c:9a:50:3d:86:5f:
8d:97:7e:ce:bc:df:54:7c:46:7f:8c:bd:14:d1:f2:f4:6d:3e:
51:f1:52:e3:ce:80:8e:99:55:83:fa:a4:3f:f2:7c:77:54:c3:
5c:d6:05:3e:25:2b:73:53:30:b3:0c:98:79:3d:04:4e:8c:15:
53:5d:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:24:10 2025 by rpki-client