Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08423BAED80211EF92F96765762E951A.roa
File: 08423BAED80211EF92F96765762E951A.roa (raw, json)
Hash identifier: BuXPpeXEMPoIFGoR+0qJQaOCG9Mmko2qy5vS+ygsgFA=
Subject key identifier: D0:53:47:3D:61:A3:16:F6:3B:E2:11:0F:21:18:00:5E:E4:85:8B:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08423BAED80211EF92F96765762E951A.roa
Signing time: Tue 21 Jan 2025 14:14:31 +0000
ROA not before: Tue 21 Jan 2025 14:14:27 +0000
ROA not after: Sat 01 Feb 2025 14:14:27 +0000
asID: 62240
IP address blocks: 45.192.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69120 (0x10e00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:14:27 2025 GMT
Not After : Feb 1 14:14:27 2025 GMT
Subject: CN=678fabc7-9488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:b3:e1:57:f6:2c:42:b6:9b:be:2b:a3:5c:
4b:30:fd:21:10:7b:95:bd:08:67:b6:32:d7:e0:5d:
98:0f:c1:11:ae:9a:9e:86:0b:f7:38:c4:51:02:ed:
d7:e7:d1:2c:8f:6f:a2:99:23:59:26:c1:9e:b2:7d:
c0:0d:5e:85:97:6d:06:d0:1b:f5:25:c2:75:9f:73:
c8:e5:75:d7:ff:26:a6:e6:26:ec:1e:fe:0e:e6:e1:
de:aa:70:6e:12:86:33:04:0e:68:aa:7a:8c:f9:3c:
1f:f6:db:8e:f6:59:21:03:f8:c3:46:df:b8:0c:58:
80:bc:15:88:ed:30:0d:74:4b:18:61:26:50:c4:10:
33:b2:71:d6:22:ab:41:3d:77:23:3f:c5:1a:e4:53:
47:2a:a9:87:f6:32:ca:6c:a1:73:69:22:f8:83:ed:
3c:d8:be:1e:2e:01:32:fa:43:99:29:91:c3:85:79:
85:de:b3:e6:89:ef:38:f7:f3:10:d2:6f:b4:ec:6f:
c8:2b:f6:bb:3d:1e:68:cb:3b:ad:96:75:50:4b:86:
a4:f1:03:bb:fc:8f:c3:67:8c:40:f2:f4:85:db:10:
dd:36:15:98:11:7e:c3:33:eb:bd:9e:72:e7:53:ae:
5e:38:73:8e:31:eb:2b:d7:0e:fe:83:1b:e0:1b:bc:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:53:47:3D:61:A3:16:F6:3B:E2:11:0F:21:18:00:5E:E4:85:8B:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08423BAED80211EF92F96765762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.35.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a0:d6:16:31:fa:81:2d:88:62:e2:c7:c9:12:b1:eb:02:fb:
79:89:1f:ae:3e:0f:03:d6:5e:bc:31:51:c5:9a:26:ee:64:9b:
6f:43:96:58:ee:39:d6:e4:2a:fa:b6:63:0a:58:fe:0f:f2:9e:
da:b3:3e:7a:ba:ab:88:d3:43:12:39:86:80:8c:46:91:a6:c8:
fa:8e:eb:dc:a6:2e:27:cf:9e:25:c8:eb:36:c9:ba:1b:07:5f:
64:e7:f6:54:49:45:db:df:8d:f7:b6:70:15:f1:b2:80:cc:5d:
24:b3:82:50:04:2a:21:dd:c6:c9:91:b6:c7:9a:85:1b:93:af:
a3:6f:9d:15:2c:65:0a:6a:e5:a0:12:96:cd:bc:65:1d:e8:05:
e0:6b:db:34:4a:8f:e4:0d:63:11:be:d0:dc:21:23:22:0b:b9:
d5:f6:a6:08:bb:23:fc:dc:2a:ff:b5:4b:ef:f6:ae:4f:ac:ca:
e0:64:af:d2:27:34:5f:22:b5:cb:de:ff:8e:3d:ae:02:68:26:
0b:ad:ed:b3:9f:d1:5c:96:3b:6e:db:a6:8e:96:54:f2:eb:2d:
e1:27:a6:db:76:ff:f9:e1:08:11:9d:69:ac:3e:70:8b:8a:36:
6f:0e:a0:c4:7a:82:ff:c2:46:49:25:e9:09:0e:da:7b:19:2a:
25:b6:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:37 2025 by rpki-client