Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A9D909CBE7711EF8ADE5965762E951A.roa
File: 4A9D909CBE7711EF8ADE5965762E951A.roa (raw, json)
Hash identifier: s7ZIr52mJqvqDGMX0zLb12RpboZS/e40oEP7RV+Lzzc=
Subject key identifier: 29:E7:D2:46:0E:68:C8:F1:81:A7:F6:A6:88:6D:F3:FC:B7:7F:00:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E636
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A9D909CBE7711EF8ADE5965762E951A.roa
Signing time: Fri 20 Dec 2024 02:08:23 +0000
ROA not before: Fri 20 Dec 2024 02:08:20 +0000
ROA not after: Wed 10 Dec 2025 02:08:20 +0000
asID: 984
IP address blocks: 45.206.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58934 (0xe636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 20 02:08:20 2024 GMT
Not After : Dec 10 02:08:20 2025 GMT
Subject: CN=6764d197-9dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:6b:18:6c:d2:31:d6:59:7d:e3:94:c1:19:
cd:71:66:2e:41:25:8b:9f:e3:9f:e6:31:cb:5f:d5:
e4:3c:82:1a:5b:e3:a9:99:0a:67:df:00:47:88:98:
13:09:7e:59:d3:b1:7a:8d:d0:22:5d:07:12:92:dd:
c4:bd:ab:76:cc:e5:1e:89:3a:e1:ea:ce:40:32:56:
8e:aa:ca:12:4e:ab:4b:05:90:3d:0a:5d:ed:88:9e:
10:59:e4:36:66:d8:a9:4b:85:ad:56:ff:29:cd:8b:
b2:2c:dd:b2:e6:e7:3c:63:cd:d9:3d:4d:9e:3a:f1:
3c:21:d6:3a:62:76:40:cf:81:8c:36:58:e1:f3:82:
54:84:9b:37:40:ee:bc:ec:59:24:da:f2:0e:ef:67:
a3:73:82:1c:5a:5e:99:b2:1f:4a:f9:a4:b1:2d:37:
1c:7d:48:a3:01:b0:d7:8f:ea:86:65:fd:1d:e8:2c:
a4:fa:e3:ff:22:ee:55:03:63:58:d0:b6:29:9d:98:
47:61:7e:7f:c1:eb:82:73:e1:88:8f:07:12:5d:d4:
15:58:53:ef:3c:aa:c1:e8:da:f8:5b:93:e0:0c:7c:
34:60:3c:e2:49:df:06:6a:1b:e2:6f:87:49:fd:ae:
5e:89:b6:56:ee:6c:7e:59:cc:d8:3b:d1:a1:6b:72:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:D2:46:0E:68:C8:F1:81:A7:F6:A6:88:6D:F3:FC:B7:7F:00:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A9D909CBE7711EF8ADE5965762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.155.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5f:b7:e3:64:65:83:ff:2d:9f:9f:8d:a7:3f:3e:f2:b8:b0:
96:13:38:2e:46:4f:22:1b:91:d5:4e:e7:86:ba:0e:87:77:46:
55:e5:a0:23:fb:cc:d6:72:e0:f9:19:f7:61:4e:04:64:a1:a2:
6a:9c:30:4c:ab:08:8f:31:1a:66:46:f4:24:a3:0d:af:59:8a:
06:26:93:05:5f:fe:ad:e0:bb:f4:73:b2:2b:0e:87:65:18:c2:
80:b5:68:1b:dc:2e:4d:d0:90:e9:d2:3e:30:26:9b:78:e5:86:
aa:a0:3f:14:7b:c9:79:b9:6f:14:e7:9d:6e:f4:5a:97:28:f7:
85:d4:54:cb:ea:48:ff:bc:06:4d:d2:fb:86:f7:56:48:01:11:
a1:a4:f1:32:0f:38:cf:a4:01:aa:d0:f4:02:c3:e3:fa:8e:ee:
6a:f8:84:86:39:4b:37:30:91:a7:57:39:89:14:a0:fe:26:2f:
80:db:ee:7d:ae:e7:64:f1:23:1f:e1:69:51:1e:c6:5a:f4:de:
4c:51:d5:7b:5e:ea:6a:d6:3a:b1:1d:29:24:98:69:8e:b3:3e:
04:21:4f:ea:94:df:8c:41:41:fb:ee:f7:26:74:be:a2:1f:2d:
23:11:69:87:85:9e:f2:35:91:8e:d4:69:cb:62:37:e7:8a:db:
f5:95:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:08 2025 by rpki-client