Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/374B585ADBD511EF9FB1829A762E951A.roa
File: 374B585ADBD511EF9FB1829A762E951A.roa (raw, json)
Hash identifier: D9cMIz81+IVic4DvAvlhYEgMV5aK09cMG8itQ/LJDUA=
Subject key identifier: 9C:51:C6:39:EC:2D:3E:30:BB:DA:B4:0F:AE:55:44:FC:F5:4B:65:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011338
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/374B585ADBD511EF9FB1829A762E951A.roa
Signing time: Sun 26 Jan 2025 11:03:47 +0000
ROA not before: Sun 26 Jan 2025 11:03:43 +0000
ROA not after: Tue 25 Mar 2025 11:03:43 +0000
asID: 6079
IP address blocks: 45.203.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70456 (0x11338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 11:03:43 2025 GMT
Not After : Mar 25 11:03:43 2025 GMT
Subject: CN=67961693-2dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:4b:f2:62:39:f7:0a:91:97:25:4f:3e:da:
9d:d3:97:00:06:e4:1c:36:3a:88:17:07:d0:d1:10:
44:29:92:a6:34:2d:e5:e1:ab:ca:d1:f5:83:30:dd:
0a:bb:9b:bb:f4:1f:b0:48:c3:a9:75:6e:45:d3:a9:
81:4e:67:81:6b:77:04:4c:eb:e1:1e:69:07:52:a1:
b9:3d:6c:60:72:99:71:9a:65:f0:7e:6d:a6:23:e6:
f5:49:fd:be:56:81:65:ee:34:37:b1:77:4f:f9:5a:
27:b5:74:74:4d:fb:96:80:29:98:6d:1a:dd:36:dd:
c0:ba:97:5c:be:76:57:a9:ab:bb:19:1d:b5:4f:c6:
eb:19:e1:ae:c3:96:fd:53:c0:58:d2:e8:1c:62:4b:
ed:54:36:f5:c8:b6:f1:f5:e7:80:1c:82:cb:9b:0c:
34:3e:2d:1c:24:43:b3:fa:f2:2d:bb:a1:bf:2c:f6:
93:1a:b0:1f:07:36:6d:45:db:50:04:0b:9a:0f:6c:
b5:c7:3c:37:b3:00:c0:a0:01:06:82:ee:14:1c:90:
f1:1d:de:cb:a9:82:22:7f:d9:93:2e:78:9c:77:9f:
c9:be:7d:c1:52:a7:5a:33:f2:29:00:f8:1f:b7:ee:
9d:cb:82:e4:4d:66:84:9d:2b:e0:4a:72:c3:03:1e:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:51:C6:39:EC:2D:3E:30:BB:DA:B4:0F:AE:55:44:FC:F5:4B:65:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/374B585ADBD511EF9FB1829A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d6:2b:02:f5:68:fd:a8:ab:f4:05:fd:7e:5a:d1:d7:7c:59:
84:b7:ca:33:f7:ef:32:b7:fe:e9:6b:d3:b6:e7:25:f9:da:bf:
8c:be:ea:85:30:2b:0e:b1:71:ae:e5:a0:00:ba:6e:90:ac:b7:
4b:24:23:03:21:8a:2d:79:29:36:37:b2:5c:6e:db:61:f2:b3:
25:3e:19:56:90:54:24:dc:17:86:3b:ab:ac:c2:ff:8a:6c:b4:
77:1a:c9:ee:42:ab:3d:af:65:64:c4:f1:2b:68:66:d1:4a:48:
63:58:d8:aa:fe:69:ad:67:7f:63:cb:54:7a:24:b8:bf:b0:4e:
78:3e:52:2c:1d:a2:e3:e0:b8:71:d4:9e:cb:6b:f6:5f:5e:04:
65:9e:bc:f1:fc:6c:39:b3:53:bd:88:45:50:48:71:dd:94:ed:
81:bd:22:03:76:52:47:bb:ce:f8:5a:50:35:79:df:9d:d0:4c:
ca:81:0a:fd:f8:2f:22:e0:42:3b:e4:d5:be:f8:c7:b2:f7:46:
51:93:f9:05:7f:1c:2c:dc:d5:15:95:67:33:9e:20:dd:d1:01:
e1:ed:0b:16:33:47:5d:a7:2f:64:7f:c3:98:b1:b6:a4:e5:5b:
b2:78:01:5d:4b:64:03:e9:63:bf:4c:3b:ef:d8:6f:7d:76:10:
41:27:f6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:44 2025 by rpki-client