Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F50855AEDB4011EF8A550FB0762E951A.roa
File: F50855AEDB4011EF8A550FB0762E951A.roa (raw, json)
Hash identifier: VfESUHe8I0jLj6WBnMkCvq9vliguIsp33Ce8og8jpcE=
Subject key identifier: 40:B1:0F:D8:DD:A0:DD:FD:6D:BD:AB:B5:DD:C4:EC:83:1A:99:45:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01129F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F50855AEDB4011EF8A550FB0762E951A.roa
Signing time: Sat 25 Jan 2025 17:22:31 +0000
ROA not before: Sat 25 Jan 2025 17:22:27 +0000
ROA not after: Sun 09 Mar 2025 17:22:27 +0000
asID: 63139
IP address blocks: 45.197.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70303 (0x1129f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:22:27 2025 GMT
Not After : Mar 9 17:22:27 2025 GMT
Subject: CN=67951dd7-7d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:d4:d4:c9:aa:1c:26:68:72:f3:37:91:28:
a9:a4:79:17:6c:b5:17:ef:5e:e6:da:76:f9:4b:00:
1b:bf:73:1a:0f:29:0b:ad:ad:f1:59:e3:40:bd:3b:
5e:7d:e1:da:7b:68:ba:ba:3a:c8:df:f7:65:79:b8:
6e:20:10:ff:16:c7:ed:06:e0:6a:8d:95:53:c6:6c:
73:32:7f:9f:14:4d:19:0b:00:8f:b6:a6:6f:d8:1b:
18:6a:c3:f9:7c:7f:59:c7:94:cb:87:65:b7:39:68:
54:44:9a:f2:eb:70:32:93:c8:4a:37:8e:49:2a:9f:
35:45:d1:a3:27:4e:7d:3b:13:86:ab:9f:35:5c:9f:
be:01:87:bf:8a:8f:e4:d7:4e:c7:b0:28:76:e3:b2:
d0:1f:e7:7b:50:44:4d:02:21:32:77:1f:6f:97:33:
42:f0:77:bc:62:7b:f2:bb:8d:f0:d8:c8:2d:23:69:
83:8c:a8:d8:5c:f9:a2:80:cb:71:8c:13:33:56:91:
91:7e:b1:d1:ff:98:45:d2:a7:bc:55:5b:00:b9:60:
7d:a0:b5:2b:70:3f:74:2b:02:38:9a:46:4f:55:e4:
9c:0c:23:7c:35:3b:1a:0b:1d:2a:8a:d5:55:bc:ed:
f4:c8:a9:a9:35:50:d1:13:4e:2c:e7:00:fb:d1:51:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B1:0F:D8:DD:A0:DD:FD:6D:BD:AB:B5:DD:C4:EC:83:1A:99:45:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F50855AEDB4011EF8A550FB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:49:f5:c7:ce:4c:30:c9:0b:e9:b5:1b:b2:24:c1:c9:42:7d:
ff:80:02:f6:93:14:45:76:0b:32:50:24:e1:5f:73:7f:ae:14:
e6:a5:6b:0a:4a:47:fa:46:65:4a:8e:d7:e5:d6:90:9d:bc:d5:
90:04:29:0b:2f:e2:27:b2:cb:6f:34:08:5c:b5:19:ca:ef:32:
d9:9d:9f:f1:13:d3:18:f3:61:f1:25:11:d6:56:1a:eb:7b:e2:
51:21:e0:54:ab:9e:d5:e1:47:8e:96:ae:38:2c:9b:81:81:4f:
a3:83:04:ee:9d:10:11:d4:0a:41:b6:6e:db:4c:a5:15:4b:3d:
af:9c:b5:79:22:d3:82:50:f3:b5:7e:98:50:82:a6:18:aa:ac:
10:2b:27:5c:18:13:a8:f7:7b:f2:47:c7:2b:fa:0b:03:14:09:
d3:df:75:c1:0b:a4:74:ad:40:0d:f5:1b:12:b7:16:ed:5e:99:
ec:8d:0d:ad:09:73:5b:b9:a2:6c:1f:c2:33:5a:e9:e4:a7:1f:
c6:1d:df:84:73:9d:17:c3:30:21:49:3e:fc:b3:8a:69:42:4c:
bf:ea:f9:05:f7:9f:f5:a6:a3:4a:3d:7a:8b:3c:46:2b:5e:3f:
f5:94:96:42:c3:10:a4:87:e2:a1:97:bc:d2:08:76:29:d2:65:
71:96:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:19:48 2025 by rpki-client