Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB8A2FE2DB4111EFBCC01FB5762E951A.roa
File: EB8A2FE2DB4111EFBCC01FB5762E951A.roa (raw, json)
Hash identifier: aV6dc9b926+CyxeIdaG95imc3RQRx3gbfyycZ2I1JjY=
Subject key identifier: E0:80:24:B8:9C:89:B9:1D:74:41:62:B1:38:40:FE:3F:F2:D8:FB:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB8A2FE2DB4111EFBCC01FB5762E951A.roa
Signing time: Sat 25 Jan 2025 17:29:24 +0000
ROA not before: Sat 25 Jan 2025 17:29:21 +0000
ROA not after: Sun 09 Mar 2025 17:29:21 +0000
asID: 63139
IP address blocks: 45.197.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70309 (0x112a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:29:21 2025 GMT
Not After : Mar 9 17:29:21 2025 GMT
Subject: CN=67951f74-b424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:be:3b:bd:94:50:e8:ef:b2:2b:d8:42:75:
db:e3:02:f3:29:67:f6:f1:ed:47:9c:1e:9b:d4:9d:
7b:06:23:f1:e7:bf:ed:04:89:91:28:76:5a:9c:17:
dd:e6:03:cb:d9:04:37:ae:ef:df:48:23:5f:35:8d:
90:f6:87:c4:2e:98:cc:aa:ac:04:23:18:e6:25:cf:
04:55:7e:84:33:6f:f8:d1:fa:b6:ac:f1:50:aa:ed:
b0:9e:4c:12:c6:bd:f1:6b:01:9b:dd:ce:3c:3b:5a:
30:57:2e:8c:9c:c8:76:8a:03:bc:d1:24:2d:7f:96:
17:26:cc:27:e3:15:fb:50:4b:8b:a0:de:f6:e5:b1:
43:4c:7a:0e:91:c3:df:1b:a7:93:90:31:ea:67:85:
11:fe:14:c1:ec:57:8f:df:a5:ac:16:8a:a2:4c:2f:
4a:55:34:f0:c2:7d:d9:f8:ed:69:dd:de:77:b6:56:
1e:78:a5:af:56:20:e8:77:81:c4:1e:ef:5d:34:69:
8d:21:d5:8e:07:e0:8a:97:45:5d:da:2a:95:77:89:
dc:6e:3a:61:98:20:08:da:97:c7:48:6f:3b:72:5e:
f8:ac:40:79:4d:09:26:33:ad:9b:35:72:09:4c:a1:
d2:13:fc:75:c1:54:16:b0:2a:73:cb:c1:32:29:60:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:80:24:B8:9C:89:B9:1D:74:41:62:B1:38:40:FE:3F:F2:D8:FB:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB8A2FE2DB4111EFBCC01FB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.74.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:90:40:99:c4:c2:91:22:a9:ab:07:1c:a4:e1:3f:2c:07:11:
63:15:db:a6:00:91:d6:a9:37:6e:fc:bd:07:79:5d:31:e3:24:
24:91:d7:56:c5:eb:1d:a0:41:ad:73:06:3f:9e:e1:1c:45:b2:
af:60:31:ff:57:ae:56:d5:2b:e5:87:9d:99:ae:a5:e8:5a:bf:
33:92:a4:2f:b3:f8:9e:cf:d1:a3:bc:c5:1c:72:94:97:f4:b2:
f3:5a:fa:8a:4d:00:ee:b2:71:66:21:b7:93:80:6c:be:70:9c:
7f:6e:7a:dc:76:1c:45:e2:82:bf:48:81:9e:11:9c:4b:94:c8:
73:fa:bd:c5:d4:21:38:54:47:e6:84:12:9e:6f:da:56:05:61:
35:e9:43:bb:44:a5:39:47:67:da:cd:f5:73:1f:f8:43:78:06:
a9:03:4c:cb:d9:83:6a:80:00:72:15:de:2f:09:70:bd:33:d6:
1b:82:82:9e:56:3e:5f:2b:62:a7:83:10:46:31:82:27:f8:ac:
10:77:16:b5:ce:2f:1e:cd:74:01:2a:d0:7a:ba:d9:f1:bb:bf:
28:16:6b:1c:cd:9c:d2:8c:05:3e:70:0b:a9:fc:1e:0a:ae:9e:
12:31:9b:c5:18:85:1c:b7:0f:b7:02:9f:58:ce:01:71:d7:a0:
9e:a8:d2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:27:42 2025 by rpki-client