Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DA443FCDB0111EF91072587762E951A.roa
File: 4DA443FCDB0111EF91072587762E951A.roa (raw, json)
Hash identifier: dhgJA+Sqi4DT5oZkbWIDpiiTvddXyBhfmQ3phsF8/g0=
Subject key identifier: D9:D3:15:03:50:82:08:C0:81:B6:5A:9D:B0:6B:36:B9:C5:06:4F:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DA443FCDB0111EF91072587762E951A.roa
Signing time: Sat 25 Jan 2025 09:46:52 +0000
ROA not before: Sat 25 Jan 2025 09:46:48 +0000
ROA not after: Sun 23 Feb 2025 09:46:48 +0000
asID: 202656
IP address blocks: 45.192.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70087 (0x111c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:46:48 2025 GMT
Not After : Feb 23 09:46:48 2025 GMT
Subject: CN=6794b30b-6809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:83:14:43:45:c5:a5:9b:35:0b:00:0e:04:
c2:55:12:ff:47:46:6f:73:1f:e3:42:d6:b1:b8:98:
0a:8a:fe:78:9b:c4:af:87:5e:5a:c9:6e:6b:ab:bc:
24:13:c9:d8:93:3b:aa:db:d9:96:0c:3c:8e:4c:ef:
42:c5:fd:cd:c5:c5:4f:22:81:2e:ef:77:0b:f8:a4:
d5:e6:b1:0b:4a:9b:58:f1:15:00:b7:2c:18:ea:5b:
9f:75:40:5d:c1:e4:83:0a:96:57:1a:92:f2:b9:da:
15:a1:d0:b9:bc:c2:41:6e:db:50:d7:9c:73:f7:66:
ae:d9:30:cd:b1:c7:09:43:9b:94:bf:85:c7:60:d5:
05:66:37:42:c7:35:28:7c:0b:9a:c8:0d:cf:b7:e5:
73:1d:26:93:31:2a:c4:c5:8a:0d:bd:d5:67:6b:2b:
6e:ec:2b:65:66:85:65:8b:d3:3f:cd:d8:14:39:42:
c5:14:68:26:c0:0b:56:cf:81:ea:96:4b:0b:2e:8a:
5d:9b:a7:5f:76:e0:4b:2b:22:07:df:69:cd:84:83:
81:db:83:1e:f1:40:52:85:ff:de:01:3a:9c:e0:79:
e7:66:0b:11:ab:05:95:dd:12:a6:cd:60:75:25:95:
58:e8:18:e5:bf:e7:5f:ee:1f:9f:02:83:92:71:83:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D3:15:03:50:82:08:C0:81:B6:5A:9D:B0:6B:36:B9:C5:06:4F:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DA443FCDB0111EF91072587762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b5:8b:43:22:d4:d6:d5:54:4c:e6:12:68:c3:af:a9:be:49:
5f:44:6d:48:35:3d:fc:ab:d5:6e:08:c1:cd:ca:00:f3:8b:5d:
71:ca:9d:a7:58:09:56:19:91:d1:ad:d9:72:9e:1b:10:af:ab:
d4:e5:52:f8:6b:b2:c5:a6:35:fa:c4:d8:cd:17:28:b5:87:93:
75:44:1a:3f:2e:62:b0:e3:1f:36:08:d6:5c:0e:5f:a2:6d:70:
79:5c:63:a6:21:81:b4:02:93:91:31:b9:44:5c:62:a3:b1:bf:
5f:f0:5c:45:04:fa:1a:2a:7f:3f:e5:b1:f2:21:3a:86:d8:91:
c3:d6:94:35:a1:52:3b:28:37:25:cf:1b:d7:b3:64:e7:58:87:
01:0d:77:e8:74:f1:de:11:0f:96:d5:24:7c:9d:ff:8d:1d:9d:
53:11:cf:1d:de:4e:ca:ff:e9:05:68:7d:b2:9b:21:04:4c:e1:
6e:ef:16:35:96:a9:b0:b4:54:bc:f1:17:c8:fd:cb:84:e4:88:
ac:5d:9f:91:c3:9d:75:81:b9:ae:c3:ea:83:51:bc:70:d2:5a:
a1:61:d8:b6:ed:e2:08:5c:a6:47:5a:5e:72:6e:ef:02:e2:66:
ab:96:dd:75:fe:e3:7d:ce:60:df:bb:f7:13:c6:82:31:26:ef:
b1:b5:de:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:37:46 2025 by rpki-client