Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAD89B4EDB5411EF8598D4B1762E951A.roa
File: DAD89B4EDB5411EF8598D4B1762E951A.roa (raw, json)
Hash identifier: swJL+aCtOrSk0AfWbyWM6KKHgq1KrhgLIie+Q9Dp40E=
Subject key identifier: B8:76:F6:FB:C9:12:FD:1A:94:08:1B:B3:46:0E:F3:FD:FA:79:03:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAD89B4EDB5411EF8598D4B1762E951A.roa
Signing time: Sat 25 Jan 2025 19:44:57 +0000
ROA not before: Sat 25 Jan 2025 19:44:53 +0000
ROA not after: Sun 09 Mar 2025 19:44:53 +0000
asID: 63139
IP address blocks: 45.197.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70371 (0x112e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 19:44:53 2025 GMT
Not After : Mar 9 19:44:53 2025 GMT
Subject: CN=67953f39-cf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:52:8b:5f:06:7e:eb:cb:41:0b:d6:19:1c:
28:d2:bf:f5:3b:e9:3f:d7:1e:8d:81:f2:97:09:fd:
8e:60:3a:bf:0d:69:2c:69:0e:2b:29:ed:75:5f:72:
e5:68:ee:79:98:00:e7:be:f8:4f:9e:c1:6f:d0:4b:
2c:b3:8b:40:33:3a:b5:51:fd:15:cc:96:a2:fb:07:
b2:fc:4a:cd:4b:78:ef:5c:be:67:e9:ac:65:20:85:
8a:b0:87:03:62:96:34:d6:a4:21:5d:8f:b1:36:66:
c6:a1:02:4e:48:d0:fd:75:c8:f5:42:c6:b5:c1:2d:
ef:65:5f:93:2e:e6:31:22:25:9d:e3:fb:d2:73:f8:
07:07:9e:a0:a8:f8:37:34:7d:97:e8:e7:39:b7:fe:
24:fc:b3:e9:49:89:10:e7:82:a2:f9:4d:bb:51:e6:
d1:4f:89:17:77:5a:7d:96:88:be:0f:0d:44:22:ac:
7f:ec:9b:ca:54:a1:2f:0b:e3:fa:b8:41:51:87:a3:
18:c4:e7:0a:ef:1c:6a:b6:6d:16:45:e0:ca:41:a8:
8e:79:e2:33:56:0d:49:b6:4a:1f:49:a5:bb:e1:f6:
02:b7:10:bb:b5:70:2f:13:15:0c:cc:59:71:c4:db:
15:7a:f3:82:f9:d7:9e:ff:f2:89:93:4e:22:a3:ee:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:F6:FB:C9:12:FD:1A:94:08:1B:B3:46:0E:F3:FD:FA:79:03:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAD89B4EDB5411EF8598D4B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.105.0/24
Signature Algorithm: sha256WithRSAEncryption
61:38:35:40:3e:69:f8:d0:f5:8e:7e:59:9f:26:66:6b:1a:91:
42:c5:a6:9b:1f:e2:2d:b9:b3:39:ec:85:c4:b1:02:4a:87:ee:
93:67:15:f7:d3:01:47:40:6b:1d:0a:af:ae:29:8d:7e:a3:0c:
5d:9d:6d:b5:8c:1a:ee:b8:98:54:fc:da:91:d6:d5:d0:36:0d:
a1:6c:0a:46:c7:6e:79:7d:a3:8e:47:61:0f:8b:42:2f:7d:23:
9f:bd:59:db:8a:f2:96:14:49:1d:fa:c3:8f:fa:6c:15:50:5e:
dc:59:74:34:19:74:4c:38:94:04:c4:e8:6f:5c:7d:ca:0e:b4:
ec:4d:74:58:2f:b2:8a:af:6a:27:17:b3:72:21:c8:ac:f9:c4:
33:dc:aa:38:e9:2b:96:2f:cc:7c:ec:ae:f9:c7:35:6e:36:21:
1a:9a:09:f7:4a:24:08:86:e2:0a:26:3b:e6:64:df:0a:4d:e2:
ee:7f:3d:95:8a:60:4d:11:a6:81:d1:3b:ba:0e:76:2e:46:50:
c9:b5:cb:ed:3b:c0:07:e8:af:cf:7e:97:3d:8c:19:1b:25:2c:
7f:19:76:95:cc:fc:37:cc:82:b2:a9:56:ee:9b:5c:78:36:91:
b8:0c:c1:dc:aa:ed:14:48:dc:fd:c7:89:6b:46:82:b5:01:cf:
af:60:d9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:36:31 2025 by rpki-client