Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCB64518DB4811EFA97F4F64762E951A.roa
File: CCB64518DB4811EFA97F4F64762E951A.roa (raw, json)
Hash identifier: G+Kz0lOWmPKMYRHbIDE/iIuQNyct3yClO1VNpszGQ8k=
Subject key identifier: F7:41:E5:4E:F3:BB:6D:40:F5:BB:AB:24:58:80:B1:65:62:4C:47:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCB64518DB4811EFA97F4F64762E951A.roa
Signing time: Sat 25 Jan 2025 18:18:39 +0000
ROA not before: Sat 25 Jan 2025 18:18:35 +0000
ROA not after: Sun 09 Mar 2025 18:18:35 +0000
asID: 63139
IP address blocks: 45.197.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70353 (0x112d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 18:18:35 2025 GMT
Not After : Mar 9 18:18:35 2025 GMT
Subject: CN=67952aff-d2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:72:e5:38:f8:4e:44:90:de:f8:cd:92:3c:
4e:d1:b4:4a:5e:69:ae:42:70:cb:d4:78:69:e3:b8:
80:74:23:7f:ff:ef:a3:79:19:b2:2b:50:59:6d:2a:
2e:78:94:eb:a5:9b:6b:f1:78:35:1d:8f:bc:e5:b8:
bc:21:e9:6e:df:77:71:17:15:2a:7b:f5:68:7f:cf:
a4:08:74:e2:66:9c:c5:04:68:1b:f5:1d:f4:17:b0:
87:43:82:4e:6e:2e:e4:4a:3b:72:72:4e:cd:42:b6:
a5:31:6c:9e:40:46:7a:a2:9b:c4:7f:51:5d:18:8e:
ca:95:db:09:49:0a:74:53:d0:ca:7b:85:35:4e:63:
70:c4:20:55:62:ba:5e:47:7c:ee:1e:54:ed:c5:e7:
95:7e:b6:66:45:6a:69:aa:a2:32:98:17:eb:56:e4:
35:19:8a:f1:18:d6:2d:af:7c:85:e3:f9:4a:53:65:
2b:52:3b:67:69:ed:78:03:e1:21:b4:40:59:1f:e1:
bb:f3:a9:c9:4f:1a:d0:99:e4:4f:82:cd:5c:6d:b6:
18:20:0b:8a:72:4f:25:20:de:08:47:3d:2d:9f:81:
e9:91:f6:d8:54:15:79:f5:d7:98:38:61:d2:2a:3b:
c8:9e:d8:cc:94:a2:3a:15:d7:69:c1:73:df:47:03:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:41:E5:4E:F3:BB:6D:40:F5:BB:AB:24:58:80:B1:65:62:4C:47:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCB64518DB4811EFA97F4F64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.96.0/24
Signature Algorithm: sha256WithRSAEncryption
97:64:c4:99:4e:ee:f2:ed:4c:df:78:4e:8a:38:27:a5:df:57:
e9:26:eb:4a:87:17:67:63:78:4a:f6:b6:1b:5a:07:8c:ae:6f:
79:b5:f0:a5:14:d8:a7:ae:d7:ff:0b:13:b3:a4:f4:58:a9:24:
aa:eb:f2:ec:68:59:70:dd:19:53:8e:a2:72:ff:ac:15:08:d4:
32:58:a4:7f:6b:49:fa:80:99:21:1b:ee:a6:20:0a:de:5e:46:
4e:f3:5c:eb:41:9a:3b:99:73:a2:73:2c:bc:fa:cb:38:e9:8d:
8b:aa:d3:1d:b2:52:8a:56:0c:ce:af:57:a6:37:85:5d:9f:ba:
8e:2d:e9:db:7a:07:e4:07:b5:07:73:8a:71:dd:44:ff:fd:93:
00:ae:97:d6:37:52:43:a4:2d:60:47:d1:03:c2:ef:3a:e6:4d:
f9:5b:27:79:29:97:9e:e5:39:4d:d8:0a:9b:cd:08:f1:17:e5:
17:f5:6d:72:3e:1f:4d:20:cc:2d:26:1a:25:73:c0:e9:b9:f6:
63:bf:20:e2:15:75:c3:d1:a6:ab:de:8e:31:29:4c:cd:c6:c3:
6e:ae:24:75:9d:31:a4:f7:bc:d7:6c:f7:5c:e5:c8:1c:dd:cf:
9f:53:ba:43:4b:42:b1:c0:4b:4e:30:c9:95:fc:60:58:8a:f2:
45:b9:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:42 2025 by rpki-client