Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24B6E034DC8311EFA23CD6B0762E951A.roa
File: 24B6E034DC8311EFA23CD6B0762E951A.roa (raw, json)
Hash identifier: c4P4mFpyVLZJBiqHy7TKoZCsSjJSTs+NN0+V8QJSf3E=
Subject key identifier: 56:3E:E2:A9:B2:7F:24:9C:42:67:0A:AA:D3:B1:E2:31:75:4F:3E:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011487
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24B6E034DC8311EFA23CD6B0762E951A.roa
Signing time: Mon 27 Jan 2025 07:48:49 +0000
ROA not before: Mon 27 Jan 2025 07:48:45 +0000
ROA not after: Tue 04 Mar 2025 07:48:45 +0000
asID: 138995
IP address blocks: 45.192.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70791 (0x11487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 07:48:45 2025 GMT
Not After : Mar 4 07:48:45 2025 GMT
Subject: CN=67973a61-9baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:5f:e7:61:37:a6:aa:b2:26:31:34:75:c2:
56:99:93:a7:da:97:9f:c7:7c:79:57:d6:e6:d1:2f:
d7:df:e9:92:c2:15:d7:5a:7a:c7:d3:a1:b8:d5:e0:
a6:89:5f:67:43:a3:8f:43:0b:6f:fa:95:e1:28:bd:
bb:31:fd:8b:40:fb:03:be:cb:9e:8b:1e:0f:40:f6:
03:fb:ad:4a:b2:06:cf:62:c5:bb:08:8e:ea:b2:86:
1e:ac:cc:5c:c6:18:76:a4:09:39:6e:d5:ca:bc:00:
68:48:a0:03:5a:93:37:3d:c5:e5:f2:b5:a4:96:3d:
56:33:b9:ba:0b:24:b0:8b:7a:52:55:19:a1:b5:6a:
02:02:fc:9e:16:a2:80:0a:fe:8b:22:18:0b:b3:06:
9e:3e:28:3b:bf:8f:ef:4b:9b:db:4d:dd:bf:f8:3e:
d5:a7:6b:a8:1c:51:55:62:86:78:6e:a7:f7:28:68:
65:b8:9e:7f:84:09:8b:97:43:01:f9:03:2f:be:2f:
bd:fe:62:e6:ac:88:b1:46:b4:25:a5:8f:39:09:b9:
99:86:1c:e5:4e:0e:12:d3:df:10:cc:4c:6f:4e:e0:
be:6d:ba:0d:54:6c:8c:c0:0e:1d:99:68:76:7c:47:
da:35:35:74:55:30:3e:9c:17:32:d8:a3:ba:d4:8a:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3E:E2:A9:B2:7F:24:9C:42:67:0A:AA:D3:B1:E2:31:75:4F:3E:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24B6E034DC8311EFA23CD6B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.211.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:aa:c5:2d:ab:2e:3a:5e:e8:5d:bc:9e:74:98:cf:a3:f5:2a:
8b:de:87:f9:e8:bf:eb:3c:6b:e8:04:11:e6:92:b9:ca:34:8a:
ee:4b:22:b9:89:4c:57:67:c5:f7:81:16:42:ce:ec:ec:83:c1:
ec:d1:4e:05:a6:9d:06:ec:ce:6c:66:38:cd:14:f0:9c:55:80:
93:16:52:59:33:18:32:6f:5a:62:b9:4e:cd:3d:d1:83:6c:95:
4e:83:49:02:4c:e8:9c:ba:35:1e:56:5b:56:92:62:6f:b5:1c:
e8:98:8d:a0:f2:98:31:bb:d4:fb:fd:c4:2c:8b:66:51:e8:9a:
69:d3:b1:a8:25:5b:ab:f1:7b:40:ad:c3:c7:ee:52:93:52:84:
3b:8f:eb:a0:d3:65:0a:da:16:a8:cf:8d:16:4a:cc:e8:0e:91:
b9:60:7f:7a:df:be:bc:6b:21:9d:82:26:b6:ea:78:f8:e5:a6:
d8:bb:da:24:b7:e3:cc:4c:54:6b:86:ed:e6:83:d6:19:e9:a7:
6e:6f:05:d0:4a:58:f0:71:1f:18:16:bb:02:f0:5f:72:7e:df:
bd:59:37:fc:27:ba:0f:26:a8:28:c9:ff:5e:15:bb:e1:e2:72:
f1:b6:af:ad:7f:66:ee:03:9a:18:8a:44:62:34:c4:ff:94:64:
5d:f1:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:09:12 2025 by rpki-client