Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F9E955AD71C11EF88B7F583762E951A.roa
File: 0F9E955AD71C11EF88B7F583762E951A.roa (raw, json)
Hash identifier: 5SsHIoc/0fSfKEO+r7G5Jh+8t3UMQW/5iB+1tfH74hg=
Subject key identifier: 88:67:90:CC:A6:94:AA:E2:7B:1D:99:14:3E:BC:EF:AA:30:ED:06:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F9E955AD71C11EF88B7F583762E951A.roa
Signing time: Mon 20 Jan 2025 10:48:19 +0000
ROA not before: Mon 20 Jan 2025 10:48:15 +0000
ROA not after: Sat 01 Feb 2025 10:48:15 +0000
asID: 202656
IP address blocks: 45.192.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68635 (0x10c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 10:48:15 2025 GMT
Not After : Feb 1 10:48:15 2025 GMT
Subject: CN=678e29f3-fc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:03:3e:8d:5e:36:c6:b7:5a:25:02:1d:c4:
19:48:ad:ac:d1:14:9f:df:e5:1d:12:4c:2d:a9:5c:
ef:ae:82:67:35:35:b3:c0:57:36:53:97:eb:5f:76:
ea:6d:29:ba:0e:d7:e7:57:4d:f2:c7:54:fc:7c:56:
85:e4:cc:cd:94:18:e3:44:d9:58:d5:c3:d4:22:04:
d1:dc:1b:27:e3:4e:6d:e8:d3:87:37:c1:ce:43:ee:
67:98:4c:e5:06:9d:29:0b:3a:23:47:68:43:04:42:
a6:a2:a4:19:93:71:d0:bd:6a:53:e0:ca:73:85:03:
a3:fe:d0:d1:ff:46:bd:e6:b3:53:6e:c7:92:2d:41:
4e:d4:d1:ae:d2:5a:f4:43:ca:d5:fc:52:79:ce:f2:
4e:ce:07:50:46:76:1d:ce:07:4f:e8:df:c7:47:dc:
bd:a2:81:97:75:5e:47:1f:ac:9e:3c:7c:5e:21:16:
89:e0:3b:6c:62:e6:87:29:8e:03:a2:6e:52:95:09:
ac:06:54:f4:2b:c9:f9:8a:bc:26:88:5e:64:34:f6:
25:2d:37:74:66:88:6c:40:3b:f9:f4:2b:b2:22:4a:
f7:2b:17:30:61:f6:39:a7:12:8e:5b:d6:ca:4c:90:
c3:e6:a0:40:69:eb:55:c8:4b:56:6e:b2:89:e8:dc:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:90:CC:A6:94:AA:E2:7B:1D:99:14:3E:BC:EF:AA:30:ED:06:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F9E955AD71C11EF88B7F583762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.56.0/21
Signature Algorithm: sha256WithRSAEncryption
93:d7:e9:49:a7:9e:e2:35:3e:cd:7a:98:c6:85:d3:c6:a8:88:
1a:a3:7d:69:bc:da:b1:b5:c8:94:f3:09:ce:81:d3:27:b4:b8:
48:83:79:f2:fc:ef:82:e2:8b:4d:18:b2:26:77:2a:08:0f:0d:
5b:63:d6:70:df:a7:80:ec:fe:be:bb:2c:93:26:98:2e:6b:8a:
38:8d:44:b4:56:90:1b:f2:54:4a:c3:3e:30:1c:72:25:21:f3:
05:6e:4c:2e:f2:c2:e8:b9:ac:0a:ab:26:a3:bd:84:43:3a:d6:
1c:ea:53:c8:1a:01:81:ab:a3:d6:ed:70:35:7d:2e:da:e6:cb:
ad:cf:b1:62:10:4b:c1:df:50:75:eb:c9:93:9e:3c:ed:46:e3:
1c:ac:29:be:bf:3e:da:0d:39:23:2a:ca:68:5a:89:6b:7a:3a:
46:31:90:cc:c4:c6:ff:72:b5:96:ef:16:f3:d3:11:57:66:e3:
f4:ed:b1:0d:0c:33:92:90:3f:2e:c6:df:e9:dc:c0:a9:c5:6a:
e9:1a:50:fb:2b:3c:ae:7a:54:de:e9:16:2f:6f:93:7b:b3:35:
7b:e6:d7:dc:d8:bf:a5:db:e2:fe:54:73:a3:c2:17:58:94:96:
a0:2c:97:a5:29:61:f9:04:20:f4:a3:b8:9b:37:67:dc:85:df:
eb:cb:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:15 2025 by rpki-client