Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40700A5ADB2D11EF9E006BAC762E951A.roa
File: 40700A5ADB2D11EF9E006BAC762E951A.roa (raw, json)
Hash identifier: Jry+lrCmFUkscHH4D0bjay6CC4kVVZv+jijezAQ+V18=
Subject key identifier: 66:9F:FF:CC:63:D6:93:31:2E:C8:9C:C2:9E:66:C9:B2:6E:56:3E:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01128F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40700A5ADB2D11EF9E006BAC762E951A.roa
Signing time: Sat 25 Jan 2025 15:01:27 +0000
ROA not before: Sat 25 Jan 2025 15:01:24 +0000
ROA not after: Tue 04 Mar 2025 15:01:24 +0000
asID: 42831
IP address blocks: 45.198.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70287 (0x1128f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 15:01:24 2025 GMT
Not After : Mar 4 15:01:24 2025 GMT
Subject: CN=6794fcc7-9777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:b8:6e:86:e8:ff:bb:9d:2f:76:a2:92:37:
cd:16:60:59:01:4c:5b:c3:4e:d8:13:95:97:4e:9a:
ae:29:ac:8c:0e:63:67:1b:4c:6e:57:78:2f:30:4b:
cf:97:9d:ac:8b:a2:00:8d:30:03:c1:3f:7c:a5:47:
3f:54:3a:11:8e:b7:91:ea:d5:7d:fe:53:7c:36:b4:
8d:7e:00:ae:ea:ce:b4:7f:78:97:b3:26:a5:6f:93:
d2:29:b4:06:20:44:43:a7:7b:05:8e:04:22:69:65:
c9:93:c5:51:86:45:25:2e:d6:35:06:98:71:50:79:
12:8d:34:a3:43:d3:50:a1:c1:a9:b4:c1:f0:1f:d8:
d8:df:0d:5c:b2:bc:ae:fb:f5:cf:8b:7e:0a:01:4b:
e6:b1:3d:98:63:d5:95:b2:aa:74:02:b2:8d:8e:f8:
e3:e5:d3:1e:62:98:bc:cd:79:84:fb:78:89:4d:d6:
63:50:85:96:61:9a:b9:35:e5:c0:2f:44:f4:25:40:
a5:c7:0e:af:66:8a:03:b6:9c:fb:d2:c6:c3:d8:79:
6e:33:27:97:9a:ee:0e:3e:49:f6:fc:bc:45:a5:bf:
25:0c:80:20:85:7b:d9:39:31:23:6c:8c:9b:b2:28:
b0:2b:51:8b:f1:16:9f:38:60:ff:51:51:14:b8:cf:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9F:FF:CC:63:D6:93:31:2E:C8:9C:C2:9E:66:C9:B2:6E:56:3E:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40700A5ADB2D11EF9E006BAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.176.0/22
Signature Algorithm: sha256WithRSAEncryption
96:0d:bf:67:1d:80:c7:bb:5b:13:7c:e4:c1:52:7c:3f:33:3c:
d3:7a:01:bc:27:1f:55:e8:45:5f:1b:76:a3:e8:d5:2e:eb:4a:
ab:44:d8:64:b2:03:54:01:95:69:60:0a:55:aa:a7:1c:11:51:
a9:f0:0f:a8:2e:d7:c1:c1:e0:b1:ec:3c:86:14:2d:31:f0:2c:
a6:cb:af:8b:00:7a:5c:bd:b0:af:17:8b:ee:e2:d0:c7:e5:13:
76:92:8d:ad:f9:98:07:9c:29:92:fb:07:0f:4e:ce:34:ec:e2:
1c:dc:14:f2:a0:29:68:a5:86:92:1e:09:ba:a0:a9:54:aa:d0:
94:bf:ad:61:d1:d7:a6:40:d9:1b:74:c2:94:4e:6c:a8:4c:52:
d0:b5:96:bd:cb:c9:66:03:fa:34:63:15:a0:22:a5:37:95:87:
00:e1:1e:f0:d3:e4:12:41:18:5e:f8:d3:49:6a:5a:1f:65:70:
63:5f:7f:e8:a0:52:6f:39:4f:7c:44:53:57:a9:52:ac:9d:97:
ae:f6:a1:e4:39:9f:d4:d6:0b:bd:98:05:4c:c3:d8:7a:40:3b:
2a:61:7c:74:f8:b8:2d:8a:52:3e:04:5b:fc:6f:e2:7a:09:fa:
fb:2e:21:34:29:94:33:3e:88:59:51:fc:1e:61:55:5c:2d:99:
c2:9d:4f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:57:13 2025 by rpki-client