Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7B4AC0D71B11EF9C96947D762E951A.roa
File: 3B7B4AC0D71B11EF9C96947D762E951A.roa (raw, json)
Hash identifier: QkfY3RjV6E2S8TqZsC27w6RR0xPN0E5dk2OYE1LECjY=
Subject key identifier: D9:0F:00:3C:B4:66:AC:8D:8D:54:62:02:CC:47:11:B4:94:2B:60:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7B4AC0D71B11EF9C96947D762E951A.roa
Signing time: Mon 20 Jan 2025 10:42:23 +0000
ROA not before: Mon 20 Jan 2025 10:42:20 +0000
ROA not after: Sat 01 Feb 2025 10:42:20 +0000
asID: 202656
IP address blocks: 45.192.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68629 (0x10c15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 10:42:20 2025 GMT
Not After : Feb 1 10:42:20 2025 GMT
Subject: CN=678e288f-f44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:33:ac:92:6d:7b:43:18:e2:21:93:e4:fa:
91:21:75:64:bb:ef:d8:9e:73:c8:a3:4f:69:f1:0b:
61:46:19:bc:44:88:69:8e:e9:14:7f:35:76:38:cf:
81:6a:33:c8:f2:74:53:8a:72:4d:6d:aa:be:d1:b3:
42:e4:12:d1:bb:1a:97:7e:9b:7e:d1:06:4a:86:53:
df:11:bb:fa:f9:74:72:33:ea:e4:a4:5a:bf:56:2a:
bb:5e:6f:47:2e:05:88:00:07:6f:72:d3:5d:58:ae:
c7:90:90:69:d5:36:2c:a2:82:12:e5:27:1a:1f:46:
94:99:f6:62:ea:ab:c2:f6:d0:3b:cf:d7:4e:c8:e7:
d5:fd:a6:9b:bb:60:4a:2b:d5:95:f6:7e:89:ea:68:
7f:7b:b5:90:64:7b:a6:10:db:0d:ee:a7:25:f1:32:
01:b6:f8:e9:9f:73:ee:fe:22:17:08:a9:d2:d8:e7:
4b:75:68:f9:f5:51:5b:8d:23:ca:30:a5:22:f2:96:
77:52:3b:e9:5c:01:eb:c3:e3:3d:fd:8f:c2:50:66:
44:da:51:b6:8b:b5:88:87:e5:1d:fb:e2:06:44:58:
14:1e:d9:0c:a1:1b:da:ba:b8:a9:1e:7c:9b:45:d9:
ad:c0:ea:8c:ea:c2:b0:e1:31:83:dc:87:7c:c9:90:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:00:3C:B4:66:AC:8D:8D:54:62:02:CC:47:11:B4:94:2B:60:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7B4AC0D71B11EF9C96947D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:51:fb:94:dd:a1:66:66:43:96:ef:d0:06:f5:0c:e9:74:04:
8c:f1:fb:94:64:76:c2:bf:42:49:64:e7:8d:b3:52:bf:88:4c:
fc:d0:86:fa:88:46:27:6a:cb:e8:24:3f:8c:58:40:f5:ee:b3:
0d:42:d5:01:fd:6d:2c:6d:8a:af:94:f8:93:fb:f3:67:29:1f:
8d:04:57:0d:d4:7f:bb:33:71:95:19:2b:37:34:3b:3b:05:38:
bd:4c:51:16:ea:e8:e7:8e:56:e0:6d:a8:ba:17:a6:4d:fe:cc:
ac:05:f0:f4:6e:f0:a3:70:d0:44:d6:48:2d:c7:35:7f:16:7c:
ef:ee:e7:91:26:2a:78:48:1f:41:7f:15:72:a6:d0:d0:51:4e:
7a:d0:0b:a5:40:47:26:79:f3:57:83:a9:1d:a3:d8:fc:57:58:
a9:33:65:d0:e6:55:2e:a8:70:80:58:ec:09:da:66:44:bb:c1:
7a:38:c4:90:44:34:d2:ea:b1:d5:db:5e:3f:10:82:88:9b:fb:
81:a7:0d:72:26:4f:b9:31:ab:8d:f3:85:84:2f:24:09:da:8d:
7f:8e:e9:81:81:e6:d8:47:8f:17:94:1e:35:2b:e7:86:fb:bb:
64:9b:bc:e5:e2:1c:c8:00:e7:ed:7c:8d:6a:b8:12:1c:fa:ef:
c6:8c:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:27 2025 by rpki-client