Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C1AC72DFD811EF8D1888A9762E951A.roa
File: C5C1AC72DFD811EF8D1888A9762E951A.roa (raw, json)
Hash identifier: EOulNBKdpo78GJbitn51otjrO+Ci2lxCLNvdenfiCnI=
Subject key identifier: F1:B3:AA:42:C1:43:E7:DC:3E:F9:FE:4A:52:80:A0:0E:05:66:07:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C1AC72DFD811EF8D1888A9762E951A.roa
Signing time: Fri 31 Jan 2025 13:39:20 +0000
ROA not before: Fri 31 Jan 2025 13:39:15 +0000
ROA not after: Thu 06 Mar 2025 13:39:15 +0000
asID: 133933
IP address blocks: 45.197.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71136 (0x115e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 13:39:15 2025 GMT
Not After : Mar 6 13:39:15 2025 GMT
Subject: CN=679cd287-1653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:fb:f3:28:22:ae:41:b7:cc:dc:8e:96:76:
32:1b:2f:a2:ec:25:63:cd:7a:d0:15:43:41:36:06:
85:a1:ed:98:66:b5:b5:40:50:f2:dc:6b:3f:a7:12:
92:18:e9:39:40:a8:7a:2f:3c:96:25:49:e4:89:10:
87:a0:2f:f2:c2:40:ef:4d:ef:92:f5:77:25:49:e6:
dc:7e:6e:77:1a:f3:6b:2d:6d:98:c6:a9:73:f0:c6:
07:fe:2a:30:2e:4f:40:8d:4c:85:d6:58:5d:89:9b:
6d:6d:6d:57:42:6e:f0:30:0b:5a:5f:13:66:5e:39:
0c:fe:38:76:ee:49:21:99:76:97:ba:28:03:da:95:
3b:12:70:d4:c5:aa:f2:bb:99:e1:0d:f1:36:19:99:
83:9a:07:09:ea:43:ff:6f:02:a3:ed:58:69:2c:12:
38:3f:52:b7:5a:a1:41:8a:94:02:31:4d:87:d4:8c:
c6:ed:d6:e7:d6:f1:a1:ee:c4:27:6e:6d:d1:88:e9:
13:e5:f7:41:0d:14:6c:2e:4f:cc:79:21:ca:69:60:
aa:fc:b1:4c:fb:13:9d:09:6d:7b:e8:ec:4f:c9:1f:
91:f4:4c:25:58:88:20:a1:e3:0d:ea:58:49:5d:cc:
78:5f:9a:49:9f:2d:64:52:2e:e6:1e:f6:6b:8b:59:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B3:AA:42:C1:43:E7:DC:3E:F9:FE:4A:52:80:A0:0E:05:66:07:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C1AC72DFD811EF8D1888A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.130.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:17:a6:8c:7a:90:fe:10:99:f8:b1:37:7b:ae:49:c6:b0:b9:
91:dd:d9:18:1f:ad:a6:bf:86:30:52:dd:5e:5b:ad:0b:eb:98:
56:08:cb:0d:45:22:b6:b8:9f:f2:1b:90:b6:bc:b2:33:47:0a:
20:ad:21:35:ad:2a:0f:76:f7:f7:a2:33:ed:6e:9f:f5:65:ce:
c2:af:10:85:1d:5a:b6:78:44:65:98:7c:00:20:1d:ae:27:77:
ad:f6:27:c9:ea:4b:27:29:d4:11:e0:5f:66:5f:4e:31:8c:65:
9f:6a:14:5f:80:99:69:35:11:09:3c:38:72:0f:ef:b6:99:24:
62:74:7b:32:9f:8e:7e:33:16:44:30:ec:42:6e:74:bc:c3:7a:
44:d3:93:19:7e:64:60:f9:82:27:5b:9e:32:5c:06:74:61:fa:
6a:cd:d9:c9:d0:53:5f:4f:50:e3:64:a8:7e:75:f6:39:3f:a0:
29:b3:85:6d:55:37:db:79:e2:07:53:23:a1:9e:15:1e:c5:5a:
77:13:ea:a8:2b:8c:1a:0d:be:8f:c5:a2:0c:de:30:01:c6:c7:
25:02:dc:25:27:15:99:7a:11:63:00:0e:0b:8a:36:b5:c3:9f:
a4:ed:d1:3b:dd:a6:11:52:6d:1e:20:9d:94:36:11:b5:90:49:
58:c8:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:17 2025 by rpki-client