Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8AA2B32DFEB11EFBF65B7A7762E951A.roa
File: B8AA2B32DFEB11EFBF65B7A7762E951A.roa (raw, json)
Hash identifier: BGO/pHt/cE2xOxi3yuXAmx/4GnV8d15Kmw154Okh3Wc=
Subject key identifier: EE:FC:71:A1:E9:A5:98:66:1B:DF:09:36:BA:46:7D:27:83:23:25:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011643
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8AA2B32DFEB11EFBF65B7A7762E951A.roa
Signing time: Fri 31 Jan 2025 15:54:58 +0000
ROA not before: Fri 31 Jan 2025 15:54:54 +0000
ROA not after: Wed 05 Feb 2025 15:54:54 +0000
asID: 39600
IP address blocks: 45.197.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71235 (0x11643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 15:54:54 2025 GMT
Not After : Feb 5 15:54:54 2025 GMT
Subject: CN=679cf252-6fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:00:9f:3b:e3:84:80:86:9c:24:6f:d7:9c:
64:5a:9e:d1:a4:8a:90:1a:f9:59:c6:d5:9b:a5:6b:
4a:62:ad:4d:1d:b6:e6:e8:5e:99:e8:bf:8f:70:d0:
ae:ac:94:a9:cd:4a:9c:19:79:e6:7f:ff:f6:9d:3e:
61:b6:a2:29:ad:96:af:b0:a0:30:f2:62:06:0f:ae:
7c:3b:76:dd:54:42:1d:93:cd:3d:cb:ae:20:69:e1:
03:4e:b1:16:0d:89:83:70:e4:98:6f:76:33:fb:a9:
de:a1:6a:c3:6d:40:fc:e2:8a:c7:78:a0:a8:74:a5:
35:2e:99:08:4f:4a:26:11:84:cd:07:d2:7d:7d:b1:
de:05:8d:0e:5a:73:8a:e3:c3:0b:00:08:ae:41:ce:
4c:94:4a:5a:7b:e9:fe:17:cc:a2:68:7f:14:e9:22:
8c:f1:1a:41:fe:5e:b6:c1:c8:cc:cd:87:8a:e5:48:
2e:89:d3:36:46:b0:f9:0e:46:63:a3:78:20:2a:4d:
9d:d5:66:d2:36:08:bd:5f:12:af:10:10:0e:2b:5f:
32:53:79:40:dc:f0:89:13:56:1f:2a:7e:c3:28:b7:
e4:3a:80:46:e8:24:15:98:70:a1:43:39:ac:ea:c8:
bc:2a:3f:a7:e7:05:11:bc:f2:2a:34:04:f6:a9:06:
dd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:71:A1:E9:A5:98:66:1B:DF:09:36:BA:46:7D:27:83:23:25:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8AA2B32DFEB11EFBF65B7A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:dc:79:bd:8f:78:14:c7:9c:4d:dd:51:08:bd:db:19:0a:ca:
ed:fe:35:74:3c:07:66:b7:d2:2f:7e:99:aa:b4:e2:7e:f7:18:
99:4e:cd:dc:e5:5c:e4:a3:9f:ea:63:30:e3:e0:f3:0c:42:97:
3f:5c:ee:5a:e1:67:df:be:62:67:13:05:f5:ce:80:7c:45:5d:
67:ae:2e:35:b6:cb:6c:ba:9a:0b:ce:57:58:16:97:b0:b4:0c:
62:e8:cc:1b:53:0a:0d:c3:e5:45:ed:61:07:3e:e7:26:f4:8b:
62:76:ce:2f:4b:38:53:28:83:7e:b7:08:18:5a:68:b2:15:41:
b6:8c:60:55:59:11:18:88:2f:37:8e:e0:14:ea:a9:3d:44:8f:
9f:67:98:8c:91:9c:c9:8c:56:c4:54:4c:56:d4:97:51:a7:dd:
9e:b1:1a:12:93:5d:82:cd:ae:18:ab:67:ff:6c:03:88:88:5a:
8f:d6:11:e0:27:3e:eb:40:ec:5a:da:d7:b1:9c:1f:20:c2:b9:
45:3b:03:71:a0:cd:03:07:c3:82:d3:24:06:cc:08:8e:f2:c6:
44:51:18:f0:0e:1a:33:69:28:a9:8f:a5:1a:0c:aa:c0:a5:6a:
17:61:7f:f8:a8:d9:4b:53:c3:aa:d9:49:b0:bd:43:c8:d3:13:
25:7a:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:38 2025 by rpki-client