Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB0CE7EDFD711EF8D699EA4762E951A.roa
File: DBB0CE7EDFD711EF8D699EA4762E951A.roa (raw, json)
Hash identifier: cYV+zOUfJa2s0N7vjeNHQ3F2w+Jcid36Tr24K92MmPc=
Subject key identifier: 82:02:45:C3:6C:C0:99:EA:07:E3:F4:9F:12:74:D2:BB:B6:14:43:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB0CE7EDFD711EF8D699EA4762E951A.roa
Signing time: Fri 31 Jan 2025 13:32:47 +0000
ROA not before: Fri 31 Jan 2025 13:32:43 +0000
ROA not after: Thu 06 Mar 2025 13:32:43 +0000
asID: 133933
IP address blocks: 45.197.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71130 (0x115da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 13:32:43 2025 GMT
Not After : Mar 6 13:32:43 2025 GMT
Subject: CN=679cd0ff-e7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:3a:84:0b:7c:17:4e:d9:3f:54:f0:f1:00:
02:ae:9e:16:2e:53:0f:5f:3c:e9:5d:9a:f9:8e:54:
9f:1d:c4:ee:e7:ff:0a:57:8f:64:e6:d5:de:39:7c:
37:4f:82:22:ae:9f:c8:ca:4b:f4:a3:af:4e:38:ac:
83:fc:5c:9b:8d:6b:a9:fe:6e:54:b8:33:44:02:3d:
0a:e6:f8:35:7d:88:d7:ec:22:5d:cb:5d:3f:59:c2:
02:53:39:74:c5:14:65:ba:25:f7:e5:19:4c:bc:17:
de:9f:12:2d:9b:f2:e8:a5:43:e1:c1:c5:3a:e1:d7:
11:10:3c:6b:a6:cb:8f:a6:4c:6e:8b:ac:43:a6:46:
68:b4:42:f6:19:7c:ff:0b:20:1a:80:8f:e5:16:e6:
13:4e:93:83:3e:ae:6b:2c:46:70:2c:6c:8a:bb:84:
0f:c9:b9:c6:05:88:97:cf:03:fb:2c:f4:b6:37:3a:
4b:b1:1f:4b:79:c0:20:fd:f6:4d:b8:b6:ba:8e:aa:
d4:49:75:ed:af:fc:b9:b7:f6:6d:56:15:e7:e7:fa:
0f:83:24:a3:6c:a6:94:3b:55:af:63:1f:b0:8f:ed:
b1:14:84:ed:6e:e5:ce:8b:9f:2a:20:c1:82:55:83:
38:b2:d1:56:f2:a2:1b:de:f2:68:ce:c2:ec:9e:2f:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:02:45:C3:6C:C0:99:EA:07:E3:F4:9F:12:74:D2:BB:B6:14:43:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB0CE7EDFD711EF8D699EA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.133.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b4:4d:ce:56:f9:32:70:9f:79:94:c2:ad:ca:3d:3b:d3:99:
ad:dd:89:75:33:97:ab:6c:fd:2d:d4:d6:57:13:0f:cb:59:19:
c5:16:36:45:02:81:21:d8:ea:27:8a:8e:f1:59:82:ff:76:77:
5b:20:89:ee:f7:63:57:61:ab:54:d9:f5:4b:f0:3a:28:69:8e:
60:b0:c5:2a:db:19:db:f5:06:bc:ca:58:a2:eb:34:11:13:a2:
6e:71:1b:df:f2:b6:a4:14:c7:d2:9d:4a:9a:dd:11:cd:d3:9d:
50:e6:d0:e6:cf:7c:0e:0c:51:4b:81:7d:74:a6:5f:a8:4b:a1:
df:62:a4:07:55:ce:3c:c5:07:5b:6e:d9:30:71:2b:1b:ef:98:
57:35:f4:41:25:72:3c:4f:1f:6b:d5:0c:09:90:a8:dd:9d:32:
68:56:de:43:57:c1:a1:be:9f:69:21:18:d5:60:70:e9:cf:2a:
4c:6e:35:81:85:93:1c:d1:39:d2:00:e1:ee:3e:7c:30:30:61:
94:2e:02:3b:3d:ec:e9:9d:4e:bd:93:95:62:0a:9d:fe:9c:46:
dd:e4:b6:31:3f:02:11:87:89:e4:2f:62:c9:26:d8:8d:10:90:
7e:8e:48:c1:d6:02:89:d9:a1:b4:00:5c:1a:a3:94:76:d2:dc:
37:2e:32:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:29:33 2025 by rpki-client