Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/009C9066DB2C11EF988C16A5762E951A.roa
File: 009C9066DB2C11EF988C16A5762E951A.roa (raw, json)
Hash identifier: 3ecYvT3evXG4lt18uI4vWOwOqmAK9+moWxCQQ8FdltA=
Subject key identifier: BA:C9:33:21:E5:16:14:71:6E:23:88:57:8B:23:E3:91:A1:0C:B9:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011287
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/009C9066DB2C11EF988C16A5762E951A.roa
Signing time: Sat 25 Jan 2025 14:52:31 +0000
ROA not before: Sat 25 Jan 2025 14:52:27 +0000
ROA not after: Thu 27 Feb 2025 14:52:27 +0000
asID: 395793
IP address blocks: 45.192.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70279 (0x11287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 14:52:27 2025 GMT
Not After : Feb 27 14:52:27 2025 GMT
Subject: CN=6794faaf-8319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:ef:2a:bb:fe:00:74:2f:32:06:7a:98:7c:
55:19:4f:63:b0:4b:6b:97:93:55:f9:d7:37:82:0a:
20:a3:d2:fb:e9:fb:a6:b4:3a:d8:84:f1:ea:26:64:
d5:1c:46:a0:5d:e2:2a:3d:fb:06:fd:51:8b:99:22:
60:aa:bc:7c:be:50:c3:f7:b2:d7:77:74:d0:43:c7:
82:71:47:f0:bd:0b:0a:96:b7:3b:40:ad:48:a9:70:
8c:3c:fa:81:af:12:2e:65:c2:cf:19:f5:53:36:32:
4c:cf:d1:ca:26:cb:eb:42:59:69:23:70:d4:51:33:
28:8f:1c:7a:ab:4c:57:94:fd:d1:05:6e:5d:d1:78:
a7:a1:55:98:13:9f:93:4a:f9:a3:25:57:f1:7e:a7:
c8:b5:ea:22:2f:f4:59:a5:5d:fe:72:9f:9a:fe:8f:
b4:d4:14:c7:5e:44:74:38:61:36:8e:64:8a:71:84:
e7:37:e4:61:f4:fe:3d:5c:77:e9:60:cb:bb:05:de:
a1:43:30:b6:2e:ac:9e:c8:ea:f8:fb:de:eb:95:58:
0f:5f:23:80:55:4f:24:e5:93:f1:25:5a:bc:51:d8:
f5:9a:47:e3:67:02:0b:dc:79:07:4c:c1:e3:9e:4f:
87:54:b3:97:51:85:78:36:16:e1:df:03:36:ca:6e:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C9:33:21:E5:16:14:71:6E:23:88:57:8B:23:E3:91:A1:0C:B9:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/009C9066DB2C11EF988C16A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:db:30:22:8e:59:d9:75:55:ec:7d:a9:a7:7a:62:1c:d5:d1:
14:ed:e0:b5:a6:a2:82:5a:dd:54:66:da:8f:03:89:64:a7:95:
6f:52:db:24:14:30:68:0c:32:43:2f:87:01:91:75:1a:35:43:
89:a3:f1:ae:5a:02:4d:56:ed:df:dd:a4:c0:7d:cf:cb:d5:82:
88:69:a4:3d:38:a8:5f:72:d8:bb:34:45:08:97:46:8e:f8:5f:
38:00:97:2f:79:a4:f2:6d:45:12:5d:06:8c:d4:82:97:4f:5c:
c3:4e:66:9b:85:26:44:3c:94:5a:dd:e0:f1:02:f4:98:a4:e7:
09:de:50:93:c5:35:5d:a2:85:62:7d:7a:79:28:cb:aa:b7:1a:
95:06:00:f8:b3:6a:e8:17:19:7f:03:9a:44:db:d1:62:44:6e:
a2:f8:1c:8d:3e:cb:5e:71:87:a8:8f:96:2d:a4:5c:2c:b1:55:
55:19:03:e7:c6:2e:82:55:7b:3f:1f:af:1c:3a:60:1d:0a:7d:
3e:11:a4:34:98:99:12:34:4d:f7:8a:52:26:bf:4d:03:ad:75:
2c:71:68:f3:8b:4b:90:3b:8c:cf:1a:77:53:41:0f:ae:f8:ae:
9f:b2:d4:33:87:2f:82:a0:6c:bd:2c:a1:29:58:8a:d5:fb:4e:
cd:79:97:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:50:40 2025 by rpki-client