Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB508CEDB0711EF8C6AACAD762E951A.roa
File: 3BB508CEDB0711EF8C6AACAD762E951A.roa (raw, json)
Hash identifier: +I2zmlUJsvqq924QIgpovssAefXrRuz4+S2OdmtOcvI=
Subject key identifier: 44:6B:EC:A7:B0:90:BE:74:C6:85:1D:FE:ED:2B:54:27:67:25:4B:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB508CEDB0711EF8C6AACAD762E951A.roa
Signing time: Sat 25 Jan 2025 10:29:18 +0000
ROA not before: Sat 25 Jan 2025 10:29:15 +0000
ROA not after: Sun 23 Feb 2025 10:29:15 +0000
asID: 62240
IP address blocks: 45.192.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70121 (0x111e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:29:15 2025 GMT
Not After : Feb 23 10:29:15 2025 GMT
Subject: CN=6794bcfe-8670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:0c:0d:0a:79:74:ea:04:26:7c:88:66:01:
1b:29:4a:ef:0e:20:ea:33:55:0d:36:1a:24:03:f2:
dc:31:5f:72:bd:71:bb:c8:5b:48:91:36:b6:4b:2b:
f1:d0:8f:6b:20:4b:2a:0e:f1:e2:41:15:9b:95:4e:
a3:c6:22:ee:99:9f:7a:71:88:da:48:44:e3:5b:b3:
5f:b1:dd:ea:3f:7c:12:c1:54:a9:cd:8a:91:89:2a:
ce:69:3b:07:ca:8f:83:06:74:fa:7e:d3:48:7c:32:
e2:75:38:43:2f:d4:9f:76:ba:6b:28:03:6e:a0:05:
df:c7:d4:21:a5:48:95:0e:61:58:5f:41:33:ab:b4:
a5:f0:01:e6:70:45:9b:9d:82:ef:f8:27:ab:59:0a:
c0:cf:73:a8:28:65:dd:7f:87:21:19:0b:0b:da:7a:
91:53:69:4b:48:54:42:d4:b2:c6:05:47:57:bb:61:
44:45:10:13:b0:16:88:0c:37:83:3f:ad:80:0a:d6:
f0:70:ec:1b:ad:1d:1b:86:8c:95:16:82:fa:1b:13:
03:5d:66:ad:43:e5:53:5f:32:0d:f2:25:0b:78:09:
01:a1:99:78:59:06:1f:96:b2:52:5c:90:84:fc:f0:
4f:f3:62:6a:32:8c:fe:18:be:17:a5:6a:e2:34:3c:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6B:EC:A7:B0:90:BE:74:C6:85:1D:FE:ED:2B:54:27:67:25:4B:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB508CEDB0711EF8C6AACAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a5:db:1d:58:c4:33:3e:9b:6a:bb:c7:f7:ab:d1:2e:3a:40:
06:13:c0:ab:de:7a:7e:3a:19:a3:b5:1e:92:b5:14:1e:df:01:
a0:61:1e:f2:cc:d9:ab:26:4e:e8:53:3a:59:8a:64:ba:1a:41:
85:3a:0b:9a:f1:34:4b:42:cb:ac:39:ad:29:35:9f:ea:82:3e:
c7:33:29:04:49:98:ee:9a:99:ba:8e:bd:d4:d8:e5:90:d9:ee:
e5:ee:9b:72:74:8c:14:53:59:b8:72:82:8f:43:57:e6:e8:e8:
ba:8f:76:22:a6:51:53:d1:40:a1:37:b3:16:0c:aa:5a:53:30:
25:96:cd:b9:6a:59:18:cf:73:06:b5:db:5d:8d:9d:9b:2a:47:
53:f3:a6:a0:01:18:93:44:14:9f:d0:bf:6f:8f:24:85:5d:c5:
0a:aa:27:19:ea:aa:45:24:86:86:c9:2f:9b:7c:cf:8b:0d:f0:
c3:d8:c9:69:63:2e:9a:9b:7a:d6:81:18:fb:c2:49:0a:45:76:
77:31:cd:81:1f:80:df:bc:87:5b:35:ad:21:3c:93:8e:3b:fd:
01:08:9f:3f:30:0f:9f:d9:45:b5:70:a2:9d:37:47:46:07:92:
3e:0e:d8:d3:9b:46:e1:0d:2a:bb:d9:a8:a2:f8:d0:7c:09:2b:
a6:f6:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:24 2025 by rpki-client