Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/184FBFAADC8811EFAB598352762E951A.roa
File: 184FBFAADC8811EFAB598352762E951A.roa (raw, json)
Hash identifier: WuJGvsFuDf5NnFcqz56JanDJZTVhpp4gtGvf1ZqWxvQ=
Subject key identifier: 7F:C8:88:9F:15:01:8F:D3:CC:DC:EC:F0:43:41:28:C3:CF:7F:E4:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/184FBFAADC8811EFAB598352762E951A.roa
Signing time: Mon 27 Jan 2025 08:24:15 +0000
ROA not before: Mon 27 Jan 2025 08:24:12 +0000
ROA not after: Tue 04 Mar 2025 08:24:12 +0000
asID: 138995
IP address blocks: 45.192.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70823 (0x114a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:24:12 2025 GMT
Not After : Mar 4 08:24:12 2025 GMT
Subject: CN=679742af-6e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:d3:c4:44:3a:36:32:f8:98:aa:73:8b:57:
23:64:c5:7a:6d:d6:02:5b:f3:f5:c5:91:3f:2c:a4:
e0:dc:32:66:2d:de:7c:fb:8d:46:24:3f:13:76:df:
88:69:20:51:c1:42:a2:16:60:aa:91:22:32:6a:08:
fe:6c:22:bd:ad:61:aa:95:f8:71:c5:2a:35:9c:9f:
fd:42:8a:62:b3:91:72:2d:a6:da:3f:41:79:3e:c4:
7e:ea:32:0e:06:53:e5:57:9a:ea:49:92:85:7f:48:
82:6f:3f:79:2e:e9:45:9e:ff:ac:18:b9:f0:e8:8a:
10:ca:93:f9:02:4f:e2:1b:12:dc:25:95:f8:48:8a:
86:6d:b6:27:78:1f:17:8e:22:64:b7:5f:32:23:a5:
ed:bf:a7:e9:a4:d0:52:90:57:b3:16:d3:cc:1a:a7:
d7:75:dc:aa:75:35:dd:32:60:47:36:b8:8c:6d:f3:
d0:57:c1:15:ae:7f:1e:0a:8d:da:ab:4f:5c:e4:9b:
de:ea:e0:21:da:49:ac:6d:5b:6e:94:01:6a:a4:f5:
cd:44:84:ed:9a:fa:92:a0:a7:c8:47:e9:5d:22:1c:
3b:dd:89:af:fe:b2:22:69:3e:98:74:f6:65:66:b5:
1d:9f:63:d7:ed:3f:e3:1e:4d:dd:da:16:4b:cb:e3:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C8:88:9F:15:01:8F:D3:CC:DC:EC:F0:43:41:28:C3:CF:7F:E4:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/184FBFAADC8811EFAB598352762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.171.0/24
Signature Algorithm: sha256WithRSAEncryption
58:80:d2:dd:28:3b:e4:93:65:14:b8:1e:d9:eb:52:e5:65:f5:
31:f1:29:6b:39:c1:3d:ab:8b:56:f5:de:ed:fb:7f:8d:ec:d2:
d2:05:18:78:6f:d4:10:50:65:4f:9f:d5:92:0e:b9:27:bb:78:
a9:ab:3b:06:51:22:90:76:fe:fb:fe:7c:33:5f:b9:02:9a:4f:
e0:0b:fc:f5:c6:95:37:54:f4:db:56:91:47:8f:e3:0f:73:74:
ec:40:43:d5:de:9d:fd:2f:54:3b:b5:78:a3:2c:f9:c1:2d:5c:
67:7e:4e:54:29:be:d2:1e:2b:01:f2:61:ac:f0:e3:fe:f9:3f:
8d:a4:b4:1b:15:ba:4e:5b:2c:6c:78:91:3e:d8:16:4a:31:d7:
07:77:14:d7:e1:d8:0b:38:4c:ab:69:a0:f6:e7:d4:20:a9:a8:
c9:40:8c:5d:5b:d2:7f:18:3e:55:7c:22:7d:be:ad:d0:70:94:
a6:16:44:85:42:03:79:65:0d:cd:91:11:bf:5a:b5:93:7c:91:
2a:9c:ce:b3:a6:48:76:2b:37:d0:66:c9:39:f4:66:ee:2e:d5:
28:ab:7c:14:7d:9f:6b:43:7e:e6:22:1f:fb:1a:29:3e:18:b6:
bb:cc:c6:c4:02:9e:9e:c4:31:d0:e2:b0:0a:36:e9:76:84:0e:
2b:84:47:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:18:29 2025 by rpki-client