Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AED6DCADFF711EFB1A25075762E951A.roa
File: 2AED6DCADFF711EFB1A25075762E951A.roa (raw, json)
Hash identifier: jc2kLAXlCTWMpLJw98rrxd5MkxfDYxJkDyvR2xQwjP4=
Subject key identifier: 3C:DD:1E:AE:71:C3:77:4A:CE:C7:20:B7:3D:28:EE:CF:2A:C4:1F:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AED6DCADFF711EFB1A25075762E951A.roa
Signing time: Fri 31 Jan 2025 17:16:54 +0000
ROA not before: Fri 31 Jan 2025 17:16:51 +0000
ROA not after: Mon 03 Mar 2025 17:16:51 +0000
asID: 398823
IP address blocks: 45.205.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71345 (0x116b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 17:16:51 2025 GMT
Not After : Mar 3 17:16:51 2025 GMT
Subject: CN=679d0586-1053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:39:be:64:43:72:4f:15:58:d7:01:de:64:
dc:41:6f:6c:bb:49:67:94:68:20:2c:a3:a1:51:dd:
3b:ad:a4:9f:fc:27:ba:a6:2a:82:c3:93:e8:91:80:
13:ea:c8:e4:de:c9:b9:6e:b9:3e:22:49:0c:ae:45:
fb:d5:d8:68:ab:1e:a7:d8:e2:c5:d3:cd:61:85:ca:
ad:31:49:d1:39:be:be:a5:2e:75:2a:f0:da:32:b7:
c6:3a:0b:bd:a6:e8:00:24:ab:91:09:6d:0e:b0:ac:
9f:c8:35:7d:4f:a7:7a:b3:6a:ab:00:82:85:fe:87:
2c:cf:0e:c2:0c:85:c9:a0:1d:be:f1:5c:c3:9a:db:
a5:d0:77:b5:9c:d0:a4:2b:f9:df:64:52:a3:62:5e:
02:e3:a8:53:8e:82:f4:7e:4d:4b:6e:bd:b8:c3:54:
35:ab:07:f7:f5:c8:bc:aa:1c:40:1e:7e:1e:22:06:
a7:2d:45:7a:35:c3:0f:db:78:5d:f6:22:49:1f:1b:
76:a5:94:70:99:06:b8:ac:42:eb:37:3e:a9:1c:4f:
ab:b3:a7:7f:f4:2d:54:17:49:2b:53:d1:19:ef:7a:
fb:e2:36:cf:73:f4:14:80:c2:01:28:a1:ae:65:da:
3a:87:e3:e0:db:30:92:a2:39:56:f4:fe:56:13:f0:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DD:1E:AE:71:C3:77:4A:CE:C7:20:B7:3D:28:EE:CF:2A:C4:1F:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AED6DCADFF711EFB1A25075762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.112.0/20
Signature Algorithm: sha256WithRSAEncryption
78:eb:75:4d:d8:a4:19:bd:35:a1:f7:25:13:4d:12:fc:92:f3:
97:4c:7c:27:bb:43:51:0b:d5:8b:d2:86:61:7a:fa:e1:b6:f8:
66:52:cb:1d:00:c7:64:c6:d1:2b:45:43:1a:a1:ce:71:39:02:
49:6d:76:83:3b:8b:31:7b:dd:60:ad:2f:61:d9:cc:97:9b:64:
64:17:70:79:c3:e3:4a:02:b5:34:e2:6a:cc:99:ea:07:3d:62:
d0:57:2c:66:0b:2a:bb:a7:13:b0:8f:2f:20:e5:e2:44:be:0f:
7d:18:8a:cd:23:c7:9a:c3:99:39:98:02:a2:6e:0d:6d:fd:13:
b6:b6:ce:f1:2d:5d:03:ed:65:6b:70:ac:39:8c:38:41:4d:76:
e0:c5:72:ea:63:ad:29:a1:ca:94:32:2c:f0:d8:d3:a1:f2:a8:
a1:6a:3d:61:dd:6c:5f:4e:be:8b:9e:85:e3:8d:2b:56:0f:7e:
6a:49:c3:b5:ce:c9:2c:67:39:77:5d:4b:50:b2:7e:07:74:d6:
d4:80:e1:a8:fc:13:53:e0:ae:9b:71:db:a5:31:a9:ab:60:ac:
4b:44:a4:81:ac:15:b5:02:32:19:da:e0:b3:1d:85:c5:82:d5:
d5:9a:0b:97:01:9b:ea:f0:6e:83:43:fa:5d:65:47:e5:7e:85:
7f:ac:0a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:27:39 2025 by rpki-client