Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA8B18C2DB4211EF8A9F12BA762E951A.roa
File: DA8B18C2DB4211EF8A9F12BA762E951A.roa (raw, json)
Hash identifier: yeYxrhDY4jhlK+UKGgSRhP6Gey8pqfH3r5m7AuKuK+M=
Subject key identifier: B1:AB:CE:7A:C0:50:63:18:66:DA:13:29:DA:30:A3:E8:D6:81:67:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA8B18C2DB4211EF8A9F12BA762E951A.roa
Signing time: Sat 25 Jan 2025 17:36:05 +0000
ROA not before: Sat 25 Jan 2025 17:36:02 +0000
ROA not after: Sun 09 Mar 2025 17:36:02 +0000
asID: 63139
IP address blocks: 45.197.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70315 (0x112ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:36:02 2025 GMT
Not After : Mar 9 17:36:02 2025 GMT
Subject: CN=67952105-1e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:bb:24:a7:22:ff:3c:73:af:31:67:63:92:
a0:0b:b0:73:17:82:ef:f8:5f:15:29:4a:a9:8e:d0:
7d:5d:95:6a:ed:2f:18:ff:da:25:1e:3c:5d:b9:d3:
e9:52:00:91:a6:cf:fb:99:53:28:84:ed:3c:a1:8e:
47:5b:d9:74:7f:38:b4:4a:84:64:f1:22:43:20:47:
2d:d0:00:b7:44:9c:4e:ed:9e:73:f8:f2:82:ad:3a:
db:b1:3a:cd:df:b9:8a:db:0d:ea:05:b9:b7:41:a3:
15:1d:67:d3:28:57:6a:22:89:ae:8d:59:ca:bb:ee:
8c:14:b5:cd:76:b7:37:a9:8e:a2:ec:4a:8a:66:63:
bd:79:72:03:b9:19:91:96:b4:ea:fe:5e:91:ce:fc:
88:70:07:a2:52:62:34:97:77:cf:f0:ea:f9:21:38:
74:19:7a:1e:df:7b:fe:5e:d2:66:00:70:ac:72:1f:
bf:21:d2:17:34:fb:df:b6:f6:35:ff:1b:6b:8f:19:
82:e3:73:34:c7:87:a7:f0:e0:2d:73:a5:30:15:cf:
1a:c6:2a:a2:86:d7:72:9e:89:d5:9a:85:2f:95:6e:
b6:a5:ac:90:41:8e:95:69:78:73:33:66:60:fe:b0:
e7:7a:42:a5:c3:7c:ef:81:3d:10:2a:db:4f:ff:25:
09:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AB:CE:7A:C0:50:63:18:66:DA:13:29:DA:30:A3:E8:D6:81:67:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA8B18C2DB4211EF8A9F12BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.78.0/24
Signature Algorithm: sha256WithRSAEncryption
67:dc:34:9a:59:2f:ea:bf:30:e0:3e:9d:50:c4:e4:bd:00:8a:
ba:34:f6:f9:8f:08:49:43:c0:ee:29:ca:47:02:80:55:8d:59:
fb:99:80:67:fc:71:b0:1a:d5:f7:28:23:15:fd:28:1a:75:44:
bf:21:5b:5a:8a:13:92:af:22:38:d0:33:41:1a:05:28:87:48:
5e:4c:df:11:f0:51:bf:26:d7:7a:f0:5c:01:16:f5:c2:5d:17:
1a:78:1b:93:a2:bd:a7:1e:22:d5:52:7e:eb:06:ec:4b:4d:fb:
91:35:d7:e7:65:74:18:ac:00:2c:fc:d5:b5:12:24:57:98:0d:
e0:22:69:b7:ab:23:34:42:6d:6f:4b:4a:66:35:09:05:d9:fe:
e0:dc:06:aa:3a:26:94:33:ed:7e:d0:e8:31:91:1a:0c:a5:a1:
b1:82:e5:c0:b7:90:ff:fd:2e:ec:8e:3c:53:76:69:17:09:26:
eb:47:88:0f:51:97:2c:98:45:ac:6c:22:0c:6c:aa:92:41:35:
a8:b2:66:bf:2f:47:73:32:75:e3:ab:c1:75:d3:ef:64:5d:db:
f4:d9:36:29:4a:a1:26:6d:10:7f:25:09:b7:bc:2c:b0:f8:e9:
b0:a3:62:bc:79:6a:74:fa:ac:a1:a2:d9:4b:b8:27:53:59:7e:
f4:7c:48:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:50 2025 by rpki-client