Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC44D7AD3DB11EF81E8CEB8762E951A.roa
File: 4BC44D7AD3DB11EF81E8CEB8762E951A.roa (raw, json)
Hash identifier: BeQSzWZTWhCyNUquniQrmTYQzU/bnPnYWd3WXWWsAh8=
Subject key identifier: 1E:F3:B2:E8:C7:BA:D9:87:93:2E:8B:63:29:7D:5F:45:0D:F9:1E:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC44D7AD3DB11EF81E8CEB8762E951A.roa
Signing time: Thu 16 Jan 2025 07:27:09 +0000
ROA not before: Thu 16 Jan 2025 07:27:06 +0000
ROA not after: Thu 20 Feb 2025 07:27:06 +0000
asID: 142032
IP address blocks: 45.205.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67784 (0x108c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 07:27:06 2025 GMT
Not After : Feb 20 07:27:06 2025 GMT
Subject: CN=6788b4cd-f4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:a9:93:8c:52:28:fd:de:42:f6:b7:92:9d:
d0:d2:de:6e:89:c3:dd:e7:57:c9:0f:ec:78:2f:7f:
16:ca:a5:d7:ac:f6:a0:90:9e:cc:fa:26:be:d6:cb:
c7:d2:95:d3:9b:c6:0e:47:48:24:64:18:18:b6:44:
c6:24:a2:7c:2e:a8:16:23:3e:38:e6:48:c6:e6:91:
ff:c2:d9:7e:17:a2:d7:f5:ec:3a:8a:e7:05:5a:55:
0d:22:e7:9a:cd:05:db:d7:42:a6:0d:5c:d4:b6:c1:
3f:36:2c:b4:2f:52:21:d0:2f:c8:01:27:93:d7:fb:
f8:72:49:5e:79:b3:ba:db:91:3e:1e:d2:6d:50:61:
b6:78:8c:d7:37:29:f0:e4:78:9c:52:f5:88:55:d7:
73:6d:b5:de:17:8c:95:97:e2:f6:f5:bd:59:78:b6:
0e:64:1a:63:53:4d:e2:73:5a:d2:f1:45:2c:a0:63:
ad:28:e2:ef:ed:62:04:ce:fe:8e:57:12:cf:3d:a2:
5d:41:90:e4:8e:30:2a:74:d4:c4:ac:65:37:e9:01:
0b:10:86:88:6a:de:9a:f8:f2:68:4b:0d:e3:44:e1:
ec:ed:ec:7c:73:48:99:c6:35:c5:a7:69:7c:20:6b:
c6:fb:5d:89:1e:fc:8b:a7:08:78:e4:8d:f4:29:5a:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F3:B2:E8:C7:BA:D9:87:93:2E:8B:63:29:7D:5F:45:0D:F9:1E:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC44D7AD3DB11EF81E8CEB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.24.0/21
Signature Algorithm: sha256WithRSAEncryption
38:86:8f:73:78:2b:c4:5e:ea:d5:a9:3d:88:78:e9:95:a7:16:
7a:86:6b:d7:ec:32:08:12:15:55:12:b3:92:66:e0:0a:f9:d9:
51:af:74:0b:89:72:49:30:72:93:9e:d7:bb:96:38:aa:69:ba:
95:b0:47:eb:47:11:16:19:c5:0c:7f:5d:82:1a:5b:73:48:5d:
e6:46:76:45:34:ff:92:57:72:98:c1:8b:86:12:c1:ff:10:36:
00:4f:d5:62:b6:1f:30:cf:73:7e:ae:3f:d8:c2:be:c2:d1:21:
95:61:77:86:a9:79:b5:dc:2e:12:0c:dd:5d:17:d1:3b:91:54:
ff:dc:66:ad:a7:63:e1:a2:d3:b8:17:87:38:ec:5b:b6:96:b0:
d5:cd:b1:b3:33:16:69:5d:99:01:d6:91:6f:08:c9:ce:0e:a7:
4e:ac:a8:c3:58:da:ff:88:f5:e1:8d:86:41:2c:f3:36:b7:e9:
16:db:f2:9c:c5:07:d8:cf:c3:08:b6:06:c2:a5:5c:3b:64:e9:
16:ce:05:f3:51:f6:9d:a7:63:51:80:00:47:18:74:c2:40:18:
e0:d6:ae:ee:e6:4e:d7:9f:ca:38:0c:33:95:54:cd:b5:ff:82:
21:67:7a:b5:21:4d:04:00:2d:bd:e2:43:53:bf:ef:8e:2d:a9:
b5:d1:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:18 2025 by rpki-client