Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10A6C4E4DB0011EF9DD9F77F762E951A.roa
File: 10A6C4E4DB0011EF9DD9F77F762E951A.roa (raw, json)
Hash identifier: PEPlc8Dl1rOlUbfFuecxWLn+RwovBrSSkUTrv0fXTmo=
Subject key identifier: 7C:E9:1C:6E:6E:2A:14:22:3F:98:43:48:82:4C:F8:2F:C2:18:88:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10A6C4E4DB0011EF9DD9F77F762E951A.roa
Signing time: Sat 25 Jan 2025 09:38:00 +0000
ROA not before: Sat 25 Jan 2025 09:37:56 +0000
ROA not after: Sun 23 Feb 2025 09:37:56 +0000
asID: 202656
IP address blocks: 45.192.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70079 (0x111bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:37:56 2025 GMT
Not After : Feb 23 09:37:56 2025 GMT
Subject: CN=6794b0f8-b20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:50:a5:93:76:a4:1b:24:55:d4:56:22:24:
83:bf:f8:81:68:fd:1b:7a:c7:4f:94:ad:fa:8d:d1:
a9:d7:ee:4d:32:bb:9e:02:ca:43:47:b7:68:e1:ee:
4f:89:d0:0f:f4:df:fa:b4:3b:13:6f:84:7e:aa:a4:
6d:2b:ab:53:12:8a:59:99:33:3b:a7:4c:0d:7e:06:
08:1d:78:d0:e8:42:e6:ca:9b:4d:a6:bf:f3:56:c3:
44:e5:cc:bd:9b:4e:aa:a8:d0:01:c9:83:9a:b0:1c:
3a:09:5b:bf:f3:58:13:08:9d:bb:16:5b:3b:c5:53:
1e:51:d5:c7:67:1a:cf:e6:9f:94:bf:b0:47:64:c4:
4a:da:3b:3b:2e:d6:81:fa:8f:10:8b:c6:86:4a:26:
41:b3:f9:fe:0a:b3:b2:be:2e:5b:85:ce:54:59:e6:
a2:65:33:28:ad:97:ce:0f:92:e6:03:f9:b0:bf:93:
b0:45:51:4c:9e:a2:56:37:6a:6e:23:dc:78:c5:99:
ec:c6:8d:37:33:ab:d3:68:c4:29:75:2a:9c:3f:b3:
f3:cf:77:1e:ed:67:dd:ec:be:91:e5:3b:c9:6e:ee:
62:fd:ee:e4:82:b2:81:3f:5c:0a:eb:90:73:4d:45:
4d:04:b8:67:66:c8:f5:57:e8:a9:59:40:06:b4:cb:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E9:1C:6E:6E:2A:14:22:3F:98:43:48:82:4C:F8:2F:C2:18:88:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10A6C4E4DB0011EF9DD9F77F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.58.0/24
Signature Algorithm: sha256WithRSAEncryption
78:44:0c:b8:44:28:be:d1:32:a3:c6:43:e3:ba:36:57:46:1b:
e0:55:77:e8:51:ee:3d:c0:e6:8f:7b:be:7c:de:32:94:5d:94:
78:ce:de:ad:6d:9b:61:d4:f2:d2:3b:2e:a0:0a:87:67:bd:74:
e7:66:d2:fc:ba:0c:34:10:9d:a7:28:8d:49:e8:de:2b:3f:6a:
85:5a:03:24:48:9d:a4:25:4a:22:83:77:87:b5:4c:49:5b:89:
26:61:8e:ba:d7:36:d2:7f:cb:96:45:70:d6:06:fe:ea:c5:0f:
26:64:6b:3b:f0:8d:33:b1:dd:e5:d1:07:f0:27:5f:3d:ac:fb:
81:84:7d:b8:0f:cb:7d:31:3a:07:b0:40:b4:55:33:24:fa:9b:
4b:7c:c9:7a:ce:9c:c6:a5:47:c9:bb:58:bd:b0:d3:1a:20:37:
00:ac:93:54:a9:10:bc:3e:fb:57:ea:ac:f1:eb:f4:ed:29:79:
2b:be:1f:4c:ae:f2:f3:04:00:82:06:f7:5c:45:ac:9e:93:1a:
cf:b1:f7:51:1a:5b:40:4a:df:10:e4:ed:d9:03:9e:66:8b:44:
b7:22:43:bf:6f:49:ea:84:45:9c:b3:63:35:01:5c:38:f1:4f:
eb:bc:a6:62:f0:5f:0a:d7:2b:e4:b9:0f:c3:6d:6a:43:f0:d9:
6a:f8:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:40 2025 by rpki-client