Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40091192D7FE11EFBCEE314D762E951A.roa
File: 40091192D7FE11EFBCEE314D762E951A.roa (raw, json)
Hash identifier: E7ByUK/m6zkmwvRwXesxoXoV7gOMrgpgRUix8/gDTpg=
Subject key identifier: E6:D8:2F:30:C6:35:E5:CE:A1:07:26:06:C7:8F:F6:0C:60:D4:C7:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40091192D7FE11EFBCEE314D762E951A.roa
Signing time: Tue 21 Jan 2025 13:47:27 +0000
ROA not before: Tue 21 Jan 2025 13:47:23 +0000
ROA not after: Sat 01 Feb 2025 13:47:23 +0000
asID: 202656
IP address blocks: 45.192.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69098 (0x10dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:47:23 2025 GMT
Not After : Feb 1 13:47:23 2025 GMT
Subject: CN=678fa56f-fc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:5e:2c:4f:98:14:85:71:21:de:67:d0:e1:
93:0e:7f:da:3b:58:2d:24:84:22:04:a7:bb:a9:db:
15:60:76:97:a0:c9:1e:a6:8d:a8:0e:17:07:ad:c8:
fa:84:59:ed:d3:db:9c:0e:2d:0b:66:74:40:5d:ab:
53:53:26:de:cd:62:16:f0:69:83:ea:78:3d:77:91:
86:4e:d4:0e:4d:78:79:42:6b:1e:a3:28:f4:1f:a4:
de:16:e1:e5:08:6b:36:fb:69:ff:63:1e:4d:1b:c6:
b4:ac:ac:be:1b:3f:5c:26:9a:83:52:d4:a5:11:c0:
6a:9d:ec:b9:04:a0:3d:f4:28:30:a3:f8:04:1b:9c:
e5:d5:76:6c:f4:d0:fa:38:a7:45:a0:fa:ee:01:00:
87:94:df:b2:3f:a9:94:fa:0e:6f:85:8a:50:bf:61:
bc:51:7d:27:5d:48:f2:2c:8a:78:9d:7a:07:f6:56:
b1:cb:3a:03:77:f3:fe:cd:9a:e5:51:e9:40:ed:13:
a8:38:0e:e4:fb:28:7c:28:bd:bf:0e:37:d3:84:23:
b9:e3:41:7f:a3:75:c1:cb:4a:8f:f4:08:3e:c4:d4:
93:4d:64:6f:44:53:9c:ab:53:9b:26:79:36:2f:6b:
31:85:25:9b:8b:a0:cc:5b:ac:e0:8e:a0:e3:03:ac:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D8:2F:30:C6:35:E5:CE:A1:07:26:06:C7:8F:F6:0C:60:D4:C7:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40091192D7FE11EFBCEE314D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.62.0/24
Signature Algorithm: sha256WithRSAEncryption
78:cf:33:07:a3:df:b0:90:51:06:4a:ce:6a:fb:95:29:2b:9f:
98:35:a7:20:64:dc:04:21:55:1b:81:be:6b:a3:46:bd:a2:31:
60:5a:e7:f1:9c:8c:2e:92:7d:cb:7d:5a:13:e3:95:f6:57:66:
fc:a0:28:a8:e5:0e:07:d7:6b:19:3e:01:28:48:1f:d5:04:ab:
60:82:fd:1a:66:bb:d3:c9:af:46:d6:7a:a9:86:62:a7:8a:0e:
1c:c6:cf:fc:33:1d:6a:2c:33:7c:23:34:af:43:07:c4:4e:c0:
25:3d:2d:19:99:fb:ee:f3:ed:ad:a4:9d:14:0d:b7:71:4d:95:
85:6d:2c:3c:b3:ec:5a:3a:d0:95:44:56:f6:fe:50:06:5f:28:
18:ea:b5:61:b7:be:4c:ae:8d:51:99:55:f7:33:46:6f:71:12:
9a:d9:e8:83:96:b9:99:b2:e5:dd:da:52:cf:91:30:e8:a2:d1:
5b:61:c2:69:9f:d3:d8:10:e9:a2:4c:f8:b5:b2:b2:5f:20:21:
45:a4:9d:51:95:97:75:6c:59:c8:13:8f:64:e1:a4:29:39:f3:
08:d9:55:7f:87:d6:28:f3:4d:03:66:4c:c1:a4:a4:42:ae:78:
82:95:05:2b:02:83:e2:f8:84:80:e2:9e:de:e6:7c:b9:b0:11:
a1:96:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:29 2025 by rpki-client