Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D717A4D80411EFA8FABF73762E951A.roa
File: 21D717A4D80411EFA8FABF73762E951A.roa (raw, json)
Hash identifier: 41UCfmn3HLEDk14vQa45NUNVNrCESOPUnjS9LE575k0=
Subject key identifier: 2E:3E:25:4F:19:CF:A1:88:8D:60:25:16:A6:1C:44:91:11:FA:47:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D717A4D80411EFA8FABF73762E951A.roa
Signing time: Tue 21 Jan 2025 14:29:33 +0000
ROA not before: Tue 21 Jan 2025 14:29:29 +0000
ROA not after: Sat 01 Feb 2025 14:29:29 +0000
asID: 62240
IP address blocks: 45.192.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69134 (0x10e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:29:29 2025 GMT
Not After : Feb 1 14:29:29 2025 GMT
Subject: CN=678faf4d-6564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:cd:dc:40:31:cc:9f:d0:d2:64:33:21:7f:
99:3c:14:ed:93:35:85:e1:12:f2:a7:15:77:1b:ee:
df:e9:bb:f0:e4:35:d0:b3:ec:df:18:2a:72:54:57:
67:fa:ed:06:53:59:17:15:e5:b6:67:b4:07:d7:4a:
d5:fb:ce:72:04:cd:f1:62:e1:f4:ea:28:51:e5:8f:
83:b3:b7:13:c5:18:10:48:9a:94:1e:d1:ed:9b:21:
fc:09:ee:d9:ee:14:79:46:31:0e:6b:45:ac:28:11:
02:e9:a2:03:2e:a5:87:60:30:a3:72:d7:b8:5c:ff:
72:cc:ff:99:11:37:52:04:b7:a0:c1:0f:0c:ed:05:
32:0c:55:0c:b8:6b:cb:d6:2c:2d:81:99:3e:aa:48:
b4:ae:9b:33:f1:60:2e:6b:b7:63:03:d0:a0:55:bd:
24:8d:c9:57:66:0f:3d:44:c3:f9:63:5f:b3:17:dc:
ea:c4:90:0b:8c:3d:f2:2d:56:e4:dc:e5:cc:da:a2:
12:28:11:b5:3d:51:b1:f0:ad:67:be:3d:05:c3:08:
8a:9f:0f:17:26:29:6c:55:c8:a8:71:cb:71:a7:90:
3e:cb:de:6d:ce:3c:32:8d:09:57:32:bb:59:2d:c1:
70:2f:16:68:6b:e6:5c:4f:f5:7c:4a:3d:05:fd:95:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:25:4F:19:CF:A1:88:8D:60:25:16:A6:1C:44:91:11:FA:47:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D717A4D80411EFA8FABF73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.42.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ae:88:ba:27:d4:66:3f:61:cd:ce:e8:8f:dc:d9:62:09:20:
12:42:bf:89:50:b9:43:08:ff:04:9e:c2:9e:4d:bd:32:fa:a8:
9b:57:ff:32:1f:9f:ee:f0:c2:93:7e:a2:5f:58:d1:b4:ba:04:
35:8b:92:54:c0:63:b7:84:fa:4a:f5:20:42:dd:3a:c6:6f:88:
7a:d9:38:6f:c9:22:ee:8f:d2:72:37:22:68:3c:dc:d3:f6:6f:
0e:fd:0b:c7:d3:a7:ea:d1:12:ce:e1:8d:ff:b3:b4:70:ae:88:
7b:0a:4c:49:f4:c2:8e:03:95:ab:3d:d1:fc:36:b6:71:06:b0:
f2:fe:aa:19:52:18:c1:bd:c4:b4:6d:4d:26:f9:4b:a3:c6:af:
40:6d:3e:a8:43:6f:95:9c:0a:cb:57:76:c4:0c:b6:77:d0:ce:
47:73:fa:c6:b4:84:9d:0b:a6:4e:b3:42:bc:b2:3f:87:64:1d:
af:cf:31:5f:3e:40:fc:90:fd:d9:07:0b:c4:18:9d:a6:57:a4:
09:f0:f5:9b:5d:1d:4b:b7:11:c4:a0:f3:45:38:38:20:b7:67:
15:22:cd:6a:90:45:91:cc:1d:16:a9:7e:c4:b9:3f:e4:98:98:
7e:79:75:f3:9e:17:99:78:ed:e2:04:a2:21:b6:ed:16:db:67:
21:95:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:08 2025 by rpki-client