Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1616AB8DFD611EF9DAA849C762E951A.roa
File: F1616AB8DFD611EF9DAA849C762E951A.roa (raw, json)
Hash identifier: xK03aFiz3PytX1kpjAX4p1XrTZPqhJKeMxW8oRJqrTk=
Subject key identifier: 2F:DC:41:F0:AE:AF:1D:C9:2C:06:F1:83:B9:81:B2:30:66:03:C6:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1616AB8DFD611EF9DAA849C762E951A.roa
Signing time: Fri 31 Jan 2025 13:26:14 +0000
ROA not before: Fri 31 Jan 2025 13:26:10 +0000
ROA not after: Thu 06 Mar 2025 13:26:10 +0000
asID: 45814
IP address blocks: 45.197.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71124 (0x115d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 13:26:10 2025 GMT
Not After : Mar 6 13:26:10 2025 GMT
Subject: CN=679ccf76-37ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:cf:48:a0:98:70:39:c6:61:35:1c:9d:1f:
f1:f5:2f:ac:b4:ef:ee:59:fa:ad:32:73:ea:1c:87:
cb:fe:ce:f2:c1:b7:7c:6c:90:a7:5d:0f:50:fd:e2:
a6:6f:75:a9:a9:9c:df:9d:01:82:66:6b:5f:3a:1c:
1d:c6:cd:8c:09:06:25:23:ec:ca:3e:63:6b:3c:e2:
47:78:a0:53:cb:7f:60:a5:39:56:c2:f9:4a:3b:fc:
42:b1:78:44:d2:1e:83:73:ca:9e:92:ab:46:11:63:
44:9c:8d:72:dc:78:f9:86:74:76:bb:8d:2a:e0:92:
c8:67:c7:50:3f:38:0e:e1:22:08:5f:4d:be:c0:14:
ff:b4:f3:76:22:b8:60:b9:20:b3:15:3b:c7:ca:5e:
e2:ae:ee:1a:b1:00:1b:f6:16:59:14:d4:8e:b8:1f:
3f:47:06:51:c1:2f:51:11:0a:f0:eb:35:3e:fe:19:
9a:61:4b:5c:45:52:1b:dc:bf:8c:6a:66:78:dd:55:
19:8f:b8:b3:ad:eb:84:0d:36:c6:21:ff:6d:41:42:
00:ec:7c:78:9e:a3:ed:f4:fb:6f:f3:da:8e:53:0e:
e6:8c:42:f3:3c:4d:ff:36:66:59:20:da:97:67:97:
9a:56:7f:64:c6:d2:2c:8b:f4:31:2c:25:35:13:bd:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:41:F0:AE:AF:1D:C9:2C:06:F1:83:B9:81:B2:30:66:03:C6:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1616AB8DFD611EF9DAA849C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:94:c6:a5:18:02:83:3b:92:c6:37:ea:e8:42:68:66:3f:81:
01:ae:44:0f:38:db:50:94:95:ea:d5:8f:ea:c2:32:dc:a1:4d:
84:f2:f3:2a:b3:8f:05:93:f5:50:a7:35:98:d2:04:93:c8:06:
42:95:1b:7b:38:b2:35:ed:90:f6:3d:0f:a0:7b:1a:64:d2:5d:
6a:80:91:46:d5:ef:a1:4a:26:2c:98:fd:87:2b:f6:3b:2d:c9:
2a:a0:2c:dd:55:ad:9b:33:f9:d7:44:98:ac:4a:22:42:7d:ba:
08:13:ea:e2:cd:5f:36:f7:85:c1:a2:59:bd:6f:b3:71:06:20:
9b:40:c7:32:5a:1a:c7:5d:df:bc:5f:95:06:da:6a:81:d0:dd:
66:b7:b7:fb:a3:17:45:0f:33:03:ad:ff:0c:0d:d7:93:39:ed:
8a:03:bc:b4:77:d3:18:13:3a:b8:47:7e:3d:9d:ce:37:9e:31:
1d:f8:2c:20:58:5a:6a:80:01:20:38:ed:7f:4e:aa:6d:bf:64:
64:08:fc:9b:70:d5:9a:17:a0:0f:e3:d0:18:ce:a0:8a:0b:13:
91:48:24:e9:a5:a8:71:88:b0:ab:19:4b:fe:77:60:87:fa:db:
8c:f9:d2:fd:34:b7:53:75:2c:e0:f9:bb:0e:0b:5b:69:a1:12:
4f:da:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:37 2025 by rpki-client