Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE1C33ACDB5911EF9C67E353762E951A.roa
File: CE1C33ACDB5911EF9C67E353762E951A.roa (raw, json)
Hash identifier: QOO528oLu5ZKkDPrlqF8IkSygWj+s6uJf98Q+h/irC8=
Subject key identifier: F9:1A:FE:84:56:C0:33:E4:28:3C:C5:5A:31:C6:9D:59:E6:11:3B:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011303
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE1C33ACDB5911EF9C67E353762E951A.roa
Signing time: Sat 25 Jan 2025 20:20:23 +0000
ROA not before: Sat 25 Jan 2025 20:20:19 +0000
ROA not after: Sun 09 Mar 2025 20:20:19 +0000
asID: 63139
IP address blocks: 45.197.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70403 (0x11303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 20:20:19 2025 GMT
Not After : Mar 9 20:20:19 2025 GMT
Subject: CN=67954787-2cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:f3:ae:46:db:83:53:d1:74:bb:95:d1:97:
66:6f:04:b7:ce:98:45:ed:0d:7b:b0:d1:7c:eb:7a:
34:f3:8c:17:8d:dc:8b:01:e2:e3:d2:a1:3c:31:44:
92:4e:c3:05:6d:7d:a7:e2:48:dd:1a:8a:95:d6:72:
56:d0:86:8f:d5:a0:98:77:54:24:f9:24:af:85:74:
68:16:d4:1e:77:e8:7a:48:eb:0f:e0:0b:e7:cf:8a:
e8:0b:c3:73:0c:00:55:73:61:a9:a9:b2:7c:c5:5e:
ab:cc:a6:cf:ee:95:2c:1a:44:54:f2:ff:3d:bc:de:
cd:6f:8d:71:ce:d2:e3:e6:b1:83:59:73:86:f7:3e:
20:d5:21:9f:1e:41:64:d1:e0:7f:e5:96:96:0c:0e:
db:26:0e:e9:1e:6f:32:b1:2e:be:49:65:55:6e:93:
f1:91:e2:00:f1:58:ba:a5:6d:8e:a2:58:b0:5e:55:
e0:d4:d0:9a:ed:1c:65:43:cf:31:d4:eb:6b:b7:9b:
98:ed:e3:f9:dc:1f:36:35:4c:11:2a:12:8c:5e:8e:
67:15:87:64:b9:48:cc:9e:e2:87:e2:07:bd:33:13:
68:39:89:3b:53:13:c4:2a:d3:cd:c9:8c:50:fa:63:
8c:cf:6d:f7:68:63:e6:f6:b2:34:9f:a9:56:5f:8e:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:FE:84:56:C0:33:E4:28:3C:C5:5A:31:C6:9D:59:E6:11:3B:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE1C33ACDB5911EF9C67E353762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.121.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:a0:54:ae:d0:2d:a9:9b:ad:94:dd:94:6c:1a:36:57:2c:d2:
a2:70:85:78:4f:e3:0e:4f:10:90:08:a8:99:b9:1c:d7:55:ce:
cc:fe:cb:3d:f4:e7:a9:01:a4:ed:90:b3:32:3f:67:b6:f0:d8:
62:eb:31:20:95:cd:a4:2e:75:2f:99:dc:19:04:be:7e:05:80:
eb:fc:6b:f3:e8:34:97:aa:31:17:2c:db:e5:97:86:00:38:81:
f5:47:a8:47:32:4f:99:53:0a:04:8f:a8:47:84:cb:c9:9f:ff:
31:74:1d:5c:02:15:5a:b3:39:40:38:d7:aa:63:68:55:78:43:
6e:a9:67:4e:d7:e6:7c:21:bc:99:10:46:1b:ce:c0:7a:03:00:
e5:dc:9b:d1:b7:db:16:cf:f3:9c:e2:58:ac:27:21:ec:65:a1:
8c:3b:ad:b1:80:ed:04:e2:c9:c8:16:7b:2e:1f:b2:24:4c:15:
03:1b:89:97:96:dd:66:33:b3:6d:2a:cc:dd:8f:8e:79:f1:0f:
ba:85:99:08:a1:3d:ff:53:6c:0d:9a:19:25:68:81:60:89:9f:
73:eb:84:7f:a0:81:e4:8b:6c:fc:19:71:3b:1d:83:1a:df:7c:
06:b0:85:d9:6c:84:dc:08:3e:66:98:1d:cc:cf:32:e1:5f:57:
4e:e1:ac:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:56 2025 by rpki-client