Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2272F08ADBD711EFB14FB9A7762E951A.roa
File: 2272F08ADBD711EFB14FB9A7762E951A.roa (raw, json)
Hash identifier: St63Ul98xIRTfXlxJRFqx1FBJ30xeW+r1GUBgshyPqQ=
Subject key identifier: 75:B7:6F:2D:81:A0:25:9E:0C:1F:7B:0B:EF:75:C8:81:81:C0:41:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011344
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2272F08ADBD711EFB14FB9A7762E951A.roa
Signing time: Sun 26 Jan 2025 11:17:31 +0000
ROA not before: Sun 26 Jan 2025 11:17:26 +0000
ROA not after: Tue 25 Mar 2025 11:17:26 +0000
asID: 6079
IP address blocks: 45.203.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70468 (0x11344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 11:17:26 2025 GMT
Not After : Mar 25 11:17:26 2025 GMT
Subject: CN=679619cb-c98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:7e:13:55:34:32:77:54:7a:31:03:53:93:
aa:b4:df:bb:fe:59:58:d1:b6:5a:81:2c:e8:19:d4:
00:f6:20:47:c8:4d:1a:b8:8c:2c:52:53:f6:44:7f:
08:ab:5e:b3:39:0c:0b:8d:cf:e6:40:ec:32:82:dd:
20:b7:2c:bd:01:4c:7b:44:b8:cd:bc:db:36:a2:77:
9c:8b:8f:c3:66:ba:8a:86:e5:cc:3d:57:c0:7a:46:
0a:2b:4c:33:b0:0a:a1:23:b0:36:75:e4:33:1c:67:
f1:0c:1e:f9:f2:44:5f:56:65:f5:a4:aa:33:cf:8b:
c8:40:f8:a3:56:3a:b7:76:86:94:dd:bd:17:4b:6f:
e2:cf:26:15:42:57:22:be:f7:2f:6b:0d:aa:f5:e9:
17:58:8f:5a:f1:a5:f9:83:30:4d:45:c9:2c:93:88:
43:8c:04:77:ae:c7:60:88:24:b5:73:6d:20:cd:52:
46:58:60:dd:7e:d0:07:c1:7c:4e:69:41:0c:56:4a:
52:cb:45:ae:a6:71:3c:6b:93:8a:03:a0:73:b2:a8:
98:77:60:f4:54:2b:f3:56:1e:be:d0:55:6e:79:0b:
94:eb:9f:56:68:32:0e:09:c7:b8:29:9a:77:c8:08:
47:c6:58:b8:69:c6:cb:61:3b:d0:50:df:8a:fd:18:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B7:6F:2D:81:A0:25:9E:0C:1F:7B:0B:EF:75:C8:81:81:C0:41:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2272F08ADBD711EFB14FB9A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:2d:8e:c8:f0:26:f9:44:e1:aa:07:f2:1d:8b:72:c8:f6:36:
08:a0:bb:83:9e:67:cf:61:22:40:66:f8:c1:7c:59:63:e3:83:
5f:16:38:18:54:92:bf:74:42:5b:83:30:d6:78:de:6f:d7:45:
00:a4:57:b1:49:c7:dc:b3:12:6e:d8:46:2a:31:3b:e9:b1:b5:
6d:0f:f0:34:a2:1e:1e:53:f2:c0:65:cd:41:f5:e5:86:43:1d:
44:62:fb:88:d6:9b:30:34:52:d5:8d:52:58:ea:bb:21:41:2a:
f9:76:b1:f8:d6:03:f1:19:45:41:81:16:77:a8:01:b9:02:e6:
6c:44:c8:ec:84:10:19:51:e4:dc:d4:a1:55:cf:7b:39:13:4e:
d8:05:93:61:e5:52:66:87:11:f4:99:75:cf:7f:80:fe:d3:46:
71:72:f3:65:d3:16:dd:29:5a:a4:ab:40:0f:13:8b:18:fe:67:
8e:f8:b9:64:3f:10:96:37:e9:80:78:e9:c8:e6:4f:ee:fb:a3:
c1:93:42:b5:6c:7b:b1:89:f8:db:cf:c0:a0:e9:21:7e:29:47:
25:2a:52:dd:1e:27:5d:96:97:a4:59:93:08:24:ad:8d:2f:66:
03:59:2e:79:70:8d:d8:f8:c3:5c:d6:52:86:90:67:7e:9f:5d:
6d:7c:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:21 2025 by rpki-client