Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C2D49EDB4611EF875C3957762E951A.roa
File: E8C2D49EDB4611EF875C3957762E951A.roa (raw, json)
Hash identifier: OiFQ5dqo8LJONT2Mmk4gpKz0PHxSykjcQ/FLbnPM8XU=
Subject key identifier: 1E:29:64:E4:99:52:13:97:F2:44:49:83:7F:08:BB:B6:57:53:DB:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C2D49EDB4611EF875C3957762E951A.roa
Signing time: Sat 25 Jan 2025 18:05:07 +0000
ROA not before: Sat 25 Jan 2025 18:05:03 +0000
ROA not after: Sun 09 Mar 2025 18:05:03 +0000
asID: 63139
IP address blocks: 45.197.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70341 (0x112c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 18:05:03 2025 GMT
Not After : Mar 9 18:05:03 2025 GMT
Subject: CN=679527d3-2275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:a7:0b:a3:e7:10:61:a5:05:51:c6:86:b4:
39:72:dc:67:fc:55:18:a1:94:d5:dd:32:1d:6e:4e:
55:36:97:3c:35:10:f9:0a:3f:dd:10:4f:b2:60:ef:
c9:67:22:dd:bb:a6:7b:6d:5e:7d:3e:3d:17:69:89:
cf:25:7a:ec:c5:4c:85:65:b6:2b:8b:42:4e:6c:e4:
b9:1a:d2:c7:d4:1b:bd:1a:5d:8c:8f:00:b7:23:40:
8c:33:72:c5:1f:63:87:3e:7f:88:1b:a7:17:04:dd:
f0:d1:92:37:99:14:73:81:a7:98:75:b7:35:8c:4e:
bd:6e:0e:8a:89:83:58:8c:ca:cb:fd:2a:c1:3a:d4:
50:ba:a6:67:7f:f9:e8:23:39:80:13:ac:1e:4b:75:
d7:66:72:d1:5c:b2:36:b2:33:59:0c:e5:64:c3:ed:
b6:3f:fb:c9:2b:7b:02:50:9a:69:a0:d3:18:14:98:
f0:8c:1b:f2:b9:4f:36:88:cd:88:b3:13:ac:47:52:
d1:13:17:5d:fb:ca:44:79:b9:be:9a:dd:0c:d6:3f:
4e:3b:2f:ce:8e:92:55:aa:a6:d5:27:ab:de:89:33:
02:78:6c:9f:cf:c6:12:17:d5:03:dc:31:2d:27:4e:
52:48:40:6a:ea:a3:bb:bd:eb:3b:fe:0f:2f:d0:c8:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:29:64:E4:99:52:13:97:F2:44:49:83:7F:08:BB:B6:57:53:DB:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C2D49EDB4611EF875C3957762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.90.0/24
Signature Algorithm: sha256WithRSAEncryption
06:26:bf:6c:d0:78:06:0c:0d:19:8d:99:d9:9f:07:98:8d:8b:
cb:f0:70:a8:3e:8e:88:67:da:e8:61:92:df:8f:2b:99:b2:1f:
8b:bf:af:0b:86:2b:5f:8e:b4:a7:f7:b5:0e:0c:b1:95:23:a0:
c5:f4:e5:95:49:93:d8:50:d8:94:c8:b4:1c:24:16:50:7e:0c:
4e:a3:fe:8e:47:1f:d8:63:18:5a:26:e8:91:d1:8c:96:0f:02:
66:3a:8e:7c:46:54:52:87:dd:d2:94:48:ae:00:07:88:ee:2b:
fd:48:91:fa:2e:c8:d1:ea:f3:d9:e9:1c:fe:13:9c:73:b9:00:
80:19:55:04:d0:1f:d3:62:cf:a0:b2:e9:49:f6:b0:9a:ab:c6:
02:3a:3b:8d:10:4a:b0:5c:cc:09:9c:0b:cf:d2:9b:61:48:51:
c7:d9:e6:f1:b4:fc:0b:bb:ae:9e:97:99:85:11:a3:f1:5c:18:
91:fc:f7:8c:49:a9:f5:65:40:6b:cd:4c:bb:6b:3c:21:c9:d5:
01:70:54:33:72:34:d7:15:9b:fd:6f:be:07:0c:ac:c1:70:1a:
69:cc:f9:d7:a9:b1:b6:26:ca:e0:e4:af:da:f8:ee:01:2c:7c:
0d:ae:0a:93:bd:54:b1:44:77:b4:5a:04:dd:2d:34:4e:a6:50:
16:53:0f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:54:32 2025 by rpki-client