Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3673E604D7C511EFBE9E505B762E951A.roa
File: 3673E604D7C511EFBE9E505B762E951A.roa (raw, json)
Hash identifier: dB4ic78YrCxG9lC3uChC8cMKGFwtnurTsDhno2MsIus=
Subject key identifier: 7E:13:93:00:33:66:70:E0:DE:ED:27:0C:0B:81:AA:35:9A:0F:87:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3673E604D7C511EFBE9E505B762E951A.roa
Signing time: Tue 21 Jan 2025 06:59:09 +0000
ROA not before: Tue 21 Jan 2025 06:59:06 +0000
ROA not after: Mon 24 Feb 2025 06:59:06 +0000
asID: 273007
IP address blocks: 45.194.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68778 (0x10caa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 06:59:06 2025 GMT
Not After : Feb 24 06:59:06 2025 GMT
Subject: CN=678f45bd-e91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:f8:88:d6:46:05:16:42:16:25:71:34:32:
21:68:ee:62:44:e3:c0:e3:3d:c8:c1:12:84:d3:a9:
db:12:ad:ef:e5:3c:c9:d4:9f:ca:ff:71:ae:72:75:
3e:52:b5:de:c8:24:4e:d4:47:24:d1:e7:90:b6:06:
81:94:c0:84:31:7c:ac:34:9d:69:aa:20:6a:35:dc:
3f:d1:3b:04:59:55:b1:ef:a8:55:be:60:83:80:b9:
45:d6:16:3d:f8:13:bf:da:2d:22:d8:0e:29:6b:15:
1f:c4:f7:b3:17:59:0c:bf:ba:26:fa:72:c0:30:25:
ea:69:ff:17:07:e1:84:f3:f7:e8:53:98:b5:9a:10:
53:74:7c:88:d7:52:2b:5a:b0:21:57:46:19:42:a2:
9a:ca:71:82:79:51:35:50:52:d2:28:3b:a2:25:7d:
d5:4e:ac:0a:52:0c:18:eb:86:2c:87:88:0b:0c:1e:
84:fd:52:3a:b4:26:84:cb:94:41:00:f9:64:9c:c2:
f8:ea:25:ac:a4:04:8b:b0:04:1e:70:41:4b:94:22:
90:46:7b:c1:81:58:ca:e4:d5:3d:3c:9e:bc:1f:9f:
be:b2:85:b9:43:fe:5f:1d:1e:ca:27:18:79:66:9f:
d8:06:92:ac:fa:42:89:bb:e8:b9:3a:ae:08:8a:7f:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:93:00:33:66:70:E0:DE:ED:27:0C:0B:81:AA:35:9A:0F:87:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3673E604D7C511EFBE9E505B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.83.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:cf:e0:60:db:d5:63:ee:d2:f5:2b:8a:c6:d4:96:3a:b6:12:
3a:f5:f4:97:9f:ea:e1:96:ed:78:55:3f:56:60:2d:eb:e5:6a:
ac:fc:7b:ef:58:00:16:40:6f:5e:00:de:ec:96:6b:c7:9e:fa:
45:49:bd:d2:67:7c:88:a3:a7:d7:d9:28:59:b9:e8:ef:19:57:
57:c4:a8:72:24:5d:2e:e0:07:34:9b:7f:b9:b1:10:11:1c:39:
c4:e8:f0:70:c2:15:ba:91:42:b5:21:f1:11:ad:f3:8e:94:f5:
88:22:2c:99:e0:0b:3a:a9:8c:b8:cb:7a:50:7c:bd:c2:ff:b3:
d7:d7:95:77:39:46:a8:49:1e:eb:ff:23:7d:6d:a1:a5:08:2d:
bc:8b:e7:e5:c8:a8:ec:22:cb:29:c0:90:ac:64:43:d8:9d:10:
2c:bb:31:a4:25:a8:f1:2d:a1:15:43:cf:36:bf:e2:69:ae:11:
c1:e3:46:7d:41:de:35:30:1f:75:e3:b2:fb:87:99:a4:ad:b4:
be:76:74:5d:d6:a4:65:ba:ea:10:55:9a:9a:a0:bb:f7:e5:c8:
1c:45:06:c8:3f:c4:ea:f5:bf:a4:2f:18:99:84:2b:d0:0b:83:
cd:bf:f6:f8:54:9f:b6:d7:01:2a:25:53:f7:29:6f:ae:02:0a:
a7:a0:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:24:46 2025 by rpki-client