Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35E10D9ADBD811EFBBAB0DAD762E951A.roa
File: 35E10D9ADBD811EFBBAB0DAD762E951A.roa (raw, json)
Hash identifier: 52WwTcyUumgruVa7wNTbyFhkk+PqvjJVMfkbsvS3940=
Subject key identifier: 19:14:30:98:73:B0:DB:90:ED:2B:BB:4B:52:47:0E:5C:CD:6E:B4:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01134A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35E10D9ADBD811EFBBAB0DAD762E951A.roa
Signing time: Sun 26 Jan 2025 11:25:14 +0000
ROA not before: Sun 26 Jan 2025 11:25:00 +0000
ROA not after: Tue 25 Mar 2025 11:25:00 +0000
asID: 6079
IP address blocks: 45.203.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70474 (0x1134a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 11:25:00 2025 GMT
Not After : Mar 25 11:25:00 2025 GMT
Subject: CN=67961b9a-5ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:03:6e:a8:56:8c:6b:bb:93:b3:76:fa:ba:
5d:58:e7:b0:79:dd:a8:24:9a:03:f1:c1:8e:52:52:
17:c5:cc:f0:1d:be:98:4e:c1:e2:92:d0:df:90:65:
a5:15:2f:c7:de:fb:f1:bb:97:18:0b:7c:83:f6:f7:
9b:91:68:2f:eb:58:3a:dd:41:cb:a9:61:cb:90:a3:
dd:38:7d:01:7e:43:bf:38:a1:cc:83:8d:8b:43:e2:
b1:e6:4a:ea:49:8c:c5:c8:99:e5:32:1c:fc:30:92:
6b:5c:66:61:26:9f:7d:3c:00:a7:8b:75:e8:b0:60:
06:d5:9f:f1:48:e0:af:f6:7e:da:c4:18:ea:2e:d8:
e2:20:43:9e:27:1d:14:df:3a:e0:4f:67:3f:17:c2:
5e:35:33:d0:c7:f3:ea:cb:ac:bb:8d:76:4e:57:44:
90:c2:36:75:3d:f4:9f:05:56:fb:ad:87:a0:8a:f4:
19:5f:8e:eb:00:f6:3f:71:ae:4e:d5:8c:9a:74:e3:
89:e2:8f:63:40:3c:06:62:44:57:08:59:96:68:75:
9b:c2:cd:05:d2:07:a2:71:c5:64:9b:fb:33:c4:4f:
07:8d:d6:db:50:31:9f:59:5c:1d:c1:2a:40:49:5c:
d1:bf:c0:a3:e6:91:6b:cf:4f:57:4b:fa:eb:8a:86:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:14:30:98:73:B0:DB:90:ED:2B:BB:4B:52:47:0E:5C:CD:6E:B4:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35E10D9ADBD811EFBBAB0DAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.240.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:ae:9e:39:e6:9b:8b:b8:b9:09:4a:bd:0e:95:82:36:77:01:
f3:c6:28:3f:d7:f2:d7:b0:bf:99:04:c8:82:96:56:24:62:4e:
78:58:7e:fd:d8:df:cf:34:8d:2e:e7:2b:06:53:fe:cb:b9:b1:
3d:5a:19:fc:23:c9:0b:75:97:b4:05:cf:7e:84:78:53:32:fd:
d7:09:a0:32:46:64:79:0c:4a:0d:57:79:65:eb:be:ec:38:59:
72:eb:14:6d:12:f7:bd:40:7c:d1:ef:7c:18:bb:1e:8a:1c:e0:
1a:c5:13:b0:3d:ea:70:bd:db:33:92:6d:ea:3a:c7:ff:b6:62:
27:01:36:41:79:e0:3a:82:63:b3:15:29:a9:52:f6:81:85:86:
a5:77:c9:51:13:e6:d4:8a:ef:33:ff:a2:51:ed:05:af:2d:5b:
6a:3d:6e:ea:37:b1:c1:ce:5b:f4:2b:6f:10:ce:06:7e:f8:fa:
3b:a6:1f:fa:6e:62:76:fa:63:64:c3:ef:a9:11:37:5a:dd:b4:
8e:45:5a:0d:84:95:17:67:89:a3:98:66:18:89:f3:fc:df:85:
ea:5e:7d:2e:32:14:fa:c5:ee:f0:9f:6b:e4:d9:e8:05:e0:92:
c4:96:7f:ae:9e:98:e9:6a:62:90:0a:0e:3a:22:05:40:a2:68:
e9:bd:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:56:42 2025 by rpki-client