Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E089DB8DB2411EFB4180771762E951A.roa
File: 2E089DB8DB2411EFB4180771762E951A.roa (raw, json)
Hash identifier: 0F/kFfP64mX5d+BEM82QqqQyY+iC6ui+iHeu8dVtVG8=
Subject key identifier: 04:D1:6B:AD:06:A4:50:9C:74:00:4A:56:22:9C:00:47:27:C4:6A:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011279
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E089DB8DB2411EFB4180771762E951A.roa
Signing time: Sat 25 Jan 2025 13:56:31 +0000
ROA not before: Sat 25 Jan 2025 13:56:27 +0000
ROA not after: Wed 05 Mar 2025 13:56:27 +0000
asID: 42831
IP address blocks: 45.196.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70265 (0x11279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 13:56:27 2025 GMT
Not After : Mar 5 13:56:27 2025 GMT
Subject: CN=6794ed8f-1bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:2a:93:14:07:5d:ff:61:43:a6:41:9d:f9:
2d:e6:9a:87:a0:7f:fc:1d:f8:1e:35:57:e9:e3:a5:
44:ed:dd:70:d4:11:01:a0:6a:21:b3:5a:a7:e9:a1:
d5:42:18:40:63:ad:91:38:a5:93:a2:51:76:c2:71:
2a:01:1f:c2:36:41:9c:82:d6:c6:5f:01:f4:b4:39:
9e:72:b2:3d:b1:26:cf:2e:71:67:95:de:c1:93:af:
1e:27:2b:e0:bf:51:27:8f:53:77:3b:d8:3f:cc:92:
34:73:ea:f7:33:07:9c:aa:ef:38:49:b8:6c:4f:d3:
90:7b:2d:d6:c2:64:7c:d1:87:6d:f3:21:f8:e3:41:
80:be:59:76:b0:48:89:a1:95:fe:24:24:c0:8b:e5:
f1:99:a4:51:12:6b:e0:ca:15:e4:fe:0f:27:40:38:
97:39:56:83:fb:d9:af:7d:52:ff:47:2b:27:ce:b7:
13:c3:ac:68:a0:be:4f:0b:2d:2e:83:d4:e0:0d:fb:
0a:36:1e:92:c4:1d:b7:89:bb:75:4b:61:6d:20:60:
d6:ff:18:5f:58:9a:e1:f6:64:21:d2:ce:84:b4:5b:
36:4d:08:93:57:72:79:f3:1a:03:67:e9:fa:ab:0c:
eb:a9:82:8a:9e:8e:0e:bb:fe:9d:11:77:7d:44:54:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D1:6B:AD:06:A4:50:9C:74:00:4A:56:22:9C:00:47:27:C4:6A:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E089DB8DB2411EFB4180771762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.152.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:6a:8e:fc:24:0e:b7:08:31:e4:7a:ac:09:10:3f:c7:8d:f1:
e6:41:6d:24:36:d1:1d:54:28:56:eb:45:71:ae:66:16:8c:b1:
9b:1e:53:d0:4f:93:5a:5c:80:9f:16:f0:48:de:38:8b:68:fc:
3f:0c:08:e5:22:c7:2e:c2:d7:62:fa:df:c8:1a:bb:52:09:c5:
a5:6a:40:61:ea:00:c1:68:c4:12:88:c8:97:e1:ed:6e:34:87:
0e:95:f7:97:0a:aa:83:6f:a7:4e:1e:28:e8:c1:bf:61:16:61:
dc:18:a3:c8:18:01:de:24:8b:bd:0f:e3:5d:ad:6f:10:6c:8c:
d6:f9:9d:b8:73:c1:22:61:65:5e:d2:f8:32:85:be:be:0b:b1:
59:a6:73:13:d7:47:b6:d7:1d:b9:7c:f2:fe:b7:5f:fb:4d:aa:
32:ea:06:88:08:67:22:a2:c4:50:99:c7:b7:10:18:27:6e:98:
ae:f0:48:1b:c0:f9:27:24:00:5b:7e:91:06:e9:ec:ca:25:fc:
db:f2:8e:9e:a8:60:25:71:4f:bc:cd:cc:c5:7e:1a:bb:58:21:
c9:99:6c:aa:c7:af:2e:bf:44:58:c0:07:a2:f3:1d:1e:dd:09:
ee:32:24:2f:18:56:18:b5:a7:4b:4f:bc:84:1a:02:43:4d:ee:
e4:a2:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:00:35 2025 by rpki-client