Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01A3A7E8DBE411EFA05E257C762E951A.roa
File: 01A3A7E8DBE411EFA05E257C762E951A.roa (raw, json)
Hash identifier: 4GqbNLKBf2ROnygQnOP0V5vKSMczLzNamsA2ptLqQh8=
Subject key identifier: CD:87:2F:2A:76:D7:43:3E:D8:8B:1A:FF:27:60:50:6F:D0:D6:14:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01139E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01A3A7E8DBE411EFA05E257C762E951A.roa
Signing time: Sun 26 Jan 2025 12:49:40 +0000
ROA not before: Sun 26 Jan 2025 12:49:36 +0000
ROA not after: Tue 04 Mar 2025 12:49:36 +0000
asID: 203020
IP address blocks: 45.198.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70558 (0x1139e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:49:36 2025 GMT
Not After : Mar 4 12:49:36 2025 GMT
Subject: CN=67962f64-886f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:25:45:db:1c:46:17:01:4c:f2:59:8b:88:
a0:a4:50:c7:a9:a1:f7:2a:db:4c:2e:a0:cc:ae:84:
62:43:c7:21:0e:72:5d:44:c9:ae:a0:2b:cc:fc:f1:
50:f9:12:46:87:e1:0c:e2:d7:f9:83:d8:ed:1f:74:
5b:f0:c6:5e:a9:41:54:58:d3:af:86:82:e5:74:68:
af:54:5a:76:4f:8a:26:8b:af:58:81:91:34:b1:39:
3e:26:21:69:5a:bc:42:e8:0f:6a:fa:50:45:54:3f:
ff:b5:4a:90:0c:75:93:35:a2:7a:8b:8d:38:8c:af:
2a:4f:08:22:3b:f4:bd:7d:d6:ed:50:90:b0:ca:d1:
4d:14:fc:e1:10:0b:e9:fc:f0:2d:ec:0a:92:dc:db:
60:8f:0f:de:b6:e6:84:27:c1:f4:59:04:65:93:0e:
5b:59:5d:b7:aa:a4:6f:08:70:b5:02:47:9f:38:5e:
c4:41:b4:d4:cb:07:f2:8c:fe:20:54:86:e3:92:d5:
74:3c:00:91:90:64:40:02:89:bb:10:12:8b:b5:e2:
6a:8e:1b:b0:6c:40:cc:3e:cd:6f:77:16:23:3f:6f:
df:9c:b7:96:3a:d9:d7:6e:cf:3e:96:e4:6b:9e:d0:
34:7d:af:8a:57:de:1f:90:46:00:88:89:16:f1:a7:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:87:2F:2A:76:D7:43:3E:D8:8B:1A:FF:27:60:50:6F:D0:D6:14:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01A3A7E8DBE411EFA05E257C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.46.0/23
Signature Algorithm: sha256WithRSAEncryption
31:92:ac:c3:5f:25:1d:87:03:94:8b:25:d0:86:74:37:35:7f:
f3:6b:8e:a2:2e:35:db:ce:cb:68:d7:6b:16:53:88:40:6a:ad:
8c:d1:37:58:e9:31:08:e4:38:56:7d:49:11:de:a6:63:ee:0f:
61:45:c2:aa:9d:5f:21:c6:fb:59:f1:e2:31:63:81:58:85:bd:
08:35:11:18:58:81:f3:8c:ac:7f:94:06:41:41:30:f4:f1:7c:
c6:aa:2c:e3:c4:29:ad:5d:2a:bd:12:c8:4f:f4:45:35:b3:34:
3e:b5:74:b4:50:64:f9:52:1d:75:23:c9:c9:cc:10:e9:75:a8:
e2:a7:08:d5:9f:7c:6a:e0:f7:0b:22:66:37:77:06:cf:bf:8b:
1a:83:3f:95:59:db:63:10:60:6f:56:fb:e0:c7:6f:35:01:bd:
3e:f8:19:e9:d7:d3:6f:7c:33:95:79:4e:1c:41:d0:31:23:3c:
00:68:02:22:ee:5b:67:14:ba:89:91:d3:d8:3d:e0:a1:73:5a:
d6:eb:5f:18:dd:6b:c0:c2:2f:10:f2:c2:44:f5:84:d5:1a:94:
8d:22:e8:0e:49:38:4b:fa:45:b2:5c:72:67:26:dc:00:ee:5d:
1b:da:9d:df:39:37:95:d0:83:5b:e8:7d:a8:f4:73:08:5d:e7:
f3:17:0c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:46 2025 by rpki-client