Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44565B22DAEE11EF96BF9886762E951A.roa
File: 44565B22DAEE11EF96BF9886762E951A.roa (raw, json)
Hash identifier: TgfFeGgYhRLG5nL4Evv/xa71f5NH8zD5FSti3YB1i3s=
Subject key identifier: 27:1C:AA:D5:AC:08:78:6C:4C:4C:EF:61:DA:28:C8:70:94:FC:EF:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011129
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44565B22DAEE11EF96BF9886762E951A.roa
Signing time: Sat 25 Jan 2025 07:30:35 +0000
ROA not before: Sat 25 Jan 2025 07:30:32 +0000
ROA not after: Thu 06 Feb 2025 07:30:32 +0000
asID: 395793
IP address blocks: 45.192.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69929 (0x11129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:30:32 2025 GMT
Not After : Feb 6 07:30:32 2025 GMT
Subject: CN=6794931b-5be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:6e:61:c2:f7:73:7a:ff:a1:51:6f:84:29:
7f:a5:1f:7c:3c:24:03:a6:c5:36:06:ae:0a:5d:67:
89:2f:bc:7b:ea:f8:13:fc:77:25:a0:2f:b9:ff:20:
c7:f8:df:d1:5d:b6:5c:c8:1c:4f:95:04:3a:39:b1:
9d:22:ea:9a:17:1d:3f:19:b1:f5:4c:f5:bc:7e:99:
28:0e:bd:8f:18:5a:07:47:a4:2d:45:66:9c:d0:d7:
18:4e:93:19:27:d2:71:d6:55:11:89:98:01:21:88:
08:25:f0:64:d4:c5:47:3e:c3:f5:12:07:83:35:88:
68:02:c0:82:41:ea:b2:88:d4:0f:7e:87:f9:dd:f7:
e0:99:98:76:5c:a6:d7:71:2d:d2:c2:01:cb:76:c1:
a6:bf:b5:46:2a:c3:b8:95:b9:a0:9c:cd:22:4c:a2:
cc:ff:f3:45:fb:c1:95:2e:ee:8d:67:45:42:5b:99:
7f:97:c9:69:55:f9:22:b7:cd:81:2e:58:89:2a:95:
75:88:1c:2d:12:a8:3d:ef:5f:dc:c8:bb:55:bb:e5:
08:37:b8:9b:71:23:3a:e3:49:10:d0:d6:75:d2:f3:
f5:93:92:f7:4f:52:39:45:5d:69:61:0f:12:1c:38:
ae:9c:51:7b:bd:f0:3d:bf:45:46:d0:9e:d1:8b:36:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:AA:D5:AC:08:78:6C:4C:4C:EF:61:DA:28:C8:70:94:FC:EF:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44565B22DAEE11EF96BF9886762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.232.0/22
Signature Algorithm: sha256WithRSAEncryption
33:66:ae:89:05:7e:b4:f9:52:97:bb:f2:0a:70:68:bc:06:fe:
82:ef:2d:80:4f:b8:63:35:1b:ee:62:19:4c:87:57:bb:74:98:
3c:2d:0c:ea:72:45:ed:94:5a:34:6a:1a:39:39:2a:74:10:62:
82:57:9e:f3:c4:ed:ec:18:33:2a:d0:62:c1:b9:dc:1f:f1:f7:
26:44:68:7e:ce:39:13:8b:42:19:88:20:1a:aa:3d:78:3b:88:
d7:fb:bb:db:9a:9c:74:61:aa:14:33:22:8e:f5:8d:71:06:07:
01:54:b2:b4:f4:87:23:97:46:a0:a4:11:b8:b9:f7:a1:5f:12:
94:9a:a0:df:5c:e1:6b:60:a8:49:e9:de:53:01:a1:35:f9:d6:
ad:b6:6b:50:bf:f7:f1:4f:e0:5e:68:6e:bb:97:15:35:8d:85:
36:9d:2b:55:bf:57:bd:36:95:de:30:3a:44:3d:45:a4:86:33:
6d:5e:de:44:61:24:53:67:5c:75:96:db:b1:31:8b:5f:f0:c1:
53:c2:19:c8:f8:3d:14:c4:3b:36:84:30:ff:90:bb:cd:fc:0d:
c6:9e:15:ed:b2:e2:cb:6c:10:10:27:db:17:bb:4d:25:76:41:
a0:29:fe:49:90:82:92:33:5e:c7:e3:26:76:b3:15:69:25:8c:
9b:35:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:36 2025 by rpki-client