Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE279B0DB5611EF8DE84CBF762E951A.roa
File: BBE279B0DB5611EF8DE84CBF762E951A.roa (raw, json)
Hash identifier: 6qiOwUExzz75MRf41T0Y6Nj/cVDBDglxyAy+54+ODvg=
Subject key identifier: DA:5A:7A:51:41:9C:17:B0:6B:AA:E1:BE:A8:A6:E2:46:4C:55:D7:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE279B0DB5611EF8DE84CBF762E951A.roa
Signing time: Sat 25 Jan 2025 19:58:24 +0000
ROA not before: Sat 25 Jan 2025 19:58:20 +0000
ROA not after: Sun 09 Mar 2025 19:58:20 +0000
asID: 63139
IP address blocks: 45.197.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70383 (0x112ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 19:58:20 2025 GMT
Not After : Mar 9 19:58:20 2025 GMT
Subject: CN=67954260-f650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:59:4c:1f:58:70:39:b4:4d:0d:86:41:48:
b7:cf:9b:70:94:29:6c:9a:39:ae:20:4b:53:e6:32:
bb:dc:f0:6b:dc:97:5d:d9:82:29:a9:c4:8c:7c:fc:
b6:82:0c:36:83:83:f1:82:4d:f5:3b:77:d7:b9:d2:
21:f6:a8:b4:69:e3:55:a2:2f:1d:99:4b:b3:ed:79:
e3:76:e6:e0:ea:9c:b8:36:d4:d7:bf:4f:08:23:16:
54:34:a6:c9:13:2f:98:bf:93:3b:6e:90:fa:18:f6:
3e:bf:96:0d:22:01:84:5a:88:d9:ee:73:71:90:06:
03:6e:c6:aa:cf:7b:02:11:de:ef:a7:1a:9a:6a:ff:
0a:93:1f:e5:a3:66:d9:88:92:e7:98:8b:20:0d:34:
bf:86:06:6f:0c:ce:df:7d:c2:80:4c:a1:51:ef:31:
49:f1:08:c1:8c:f8:4f:db:95:1e:15:2c:33:fc:c0:
2c:85:98:34:b1:d9:a7:43:7c:1a:ec:49:7a:2c:49:
32:f5:38:06:8d:9c:2a:a5:72:1d:94:ca:cc:4c:ab:
91:eb:5d:bc:7e:2d:a1:e5:37:af:0e:91:bc:8d:ae:
83:75:ae:5e:41:bd:1e:e2:f3:13:7e:bf:f3:5c:93:
cb:99:56:87:ae:57:73:37:f9:a1:ef:2d:e4:fd:d1:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5A:7A:51:41:9C:17:B0:6B:AA:E1:BE:A8:A6:E2:46:4C:55:D7:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE279B0DB5611EF8DE84CBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:17:de:e9:58:9f:8a:fe:04:c4:44:61:fc:df:5b:7a:24:7e:
ce:ee:a7:85:23:89:47:74:0f:2c:bc:bf:ed:50:2f:ef:b1:2c:
e2:ac:f0:d4:f2:83:92:f6:69:7b:3c:25:d7:d2:d9:64:a1:ed:
9e:21:4a:ea:fe:33:30:04:89:10:26:65:4e:0e:e5:c2:27:34:
92:c5:07:50:ab:d0:23:60:2b:fb:a7:97:f1:d9:07:6f:ce:b1:
16:24:fb:fb:fa:6c:a0:a6:a9:41:87:23:c3:67:69:94:09:10:
1e:48:a1:62:36:f5:53:ac:95:0e:88:cb:67:5a:79:6c:a6:f7:
c7:87:6c:72:95:aa:9f:2d:28:8e:ba:e0:8e:cb:8f:30:78:3a:
3e:4f:a1:2d:06:17:03:57:07:55:1a:87:11:76:6b:a9:70:d2:
38:c0:f3:20:cf:fe:e1:f7:d5:61:f4:0a:fa:41:d5:1c:cb:41:
73:5d:bb:70:35:1e:29:8e:96:57:a4:b3:8d:77:4a:66:9f:06:
55:5b:91:09:8a:8b:90:a4:07:62:d3:6c:b0:e1:2b:e2:bb:61:
41:7b:4c:c7:a1:02:25:6a:86:18:34:e4:20:e0:ba:6b:cc:39:
08:8a:a8:ce:76:2b:fb:e3:aa:87:e2:31:35:b6:b4:46:a8:5e:
22:ec:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:54 2025 by rpki-client