Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E2C0384DB2C11EF9AC383A5762E951A.roa
File: 4E2C0384DB2C11EF9AC383A5762E951A.roa (raw, json)
Hash identifier: VRgue41cx8xbh5XA09Tb0C4CQnzLjHIIpU6L/A019Mk=
Subject key identifier: E3:95:FE:4D:60:35:37:1D:21:B9:01:00:9E:57:71:5E:B1:EA:0B:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011289
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E2C0384DB2C11EF9AC383A5762E951A.roa
Signing time: Sat 25 Jan 2025 14:54:41 +0000
ROA not before: Sat 25 Jan 2025 14:54:37 +0000
ROA not after: Tue 04 Mar 2025 14:54:37 +0000
asID: 42831
IP address blocks: 45.198.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70281 (0x11289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 14:54:37 2025 GMT
Not After : Mar 4 14:54:37 2025 GMT
Subject: CN=6794fb31-8181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7d:15:d7:7f:27:6e:ec:76:a1:26:7d:25:a4:
4a:76:2e:b5:77:4a:5b:e7:3c:cd:5a:1a:27:c1:60:
53:d3:27:69:3c:15:34:89:c2:ef:e3:24:3a:a0:eb:
5d:19:94:6c:3b:31:0c:50:99:f9:56:a1:18:0b:1c:
ea:88:32:7c:15:ca:3d:cf:f7:c6:a3:9c:14:2b:e2:
f3:e1:d1:a3:b7:60:c8:3b:d2:63:f6:80:75:61:d3:
95:15:71:6b:41:eb:92:63:40:04:9e:6b:c0:c2:8a:
49:d6:e3:54:e8:6d:21:46:14:9e:d6:b6:20:01:ab:
d8:d1:89:2a:a5:db:07:52:aa:0c:0e:11:16:11:d9:
c0:3b:d9:37:91:0c:a7:04:53:84:c7:2f:ca:a7:3b:
8f:c5:d5:a8:5e:eb:b0:3a:da:e9:70:b4:f6:82:b8:
e6:a3:b4:db:25:24:49:a7:b5:85:d7:79:c3:4b:fd:
66:4c:b1:16:0b:bd:34:f3:0f:cb:bc:95:93:14:ca:
53:3f:4f:a7:83:3d:23:3b:9e:d4:70:22:cc:44:50:
8a:af:16:7a:2e:36:2c:b0:5c:2b:d7:fd:bf:28:36:
bd:b0:99:2d:92:6b:15:d7:d1:7b:c6:32:af:e6:60:
fb:2f:d6:15:ff:1f:b1:9d:c7:6f:3b:02:b7:b6:27:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:95:FE:4D:60:35:37:1D:21:B9:01:00:9E:57:71:5E:B1:EA:0B:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E2C0384DB2C11EF9AC383A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
12:84:36:1c:30:fb:b0:c5:26:6a:eb:0a:12:72:13:11:6a:13:
e3:ba:cf:8b:48:34:0b:52:68:d7:7e:e3:87:69:55:db:3d:2b:
07:a9:f4:77:a7:52:6c:35:3f:26:e2:c9:1c:aa:80:ee:ce:80:
50:84:77:d6:42:b7:68:57:80:3d:80:f9:56:94:de:31:72:63:
2e:67:ff:18:58:11:bf:f0:61:96:8b:8e:dc:b7:80:bc:91:ec:
0a:d3:92:41:55:87:5d:e4:04:71:f9:46:96:d6:13:f6:df:a0:
e2:6d:d1:41:1d:5b:10:f3:04:00:0c:0e:a9:f4:5f:6f:58:1d:
c9:64:9d:74:97:6b:8c:11:e4:3c:a2:73:df:20:33:66:f1:26:
54:5b:f3:8b:e9:bc:02:7e:0e:69:8e:b0:50:42:87:96:04:f3:
5b:6f:5f:97:11:6d:11:ab:88:a4:32:ce:62:77:15:a2:ec:a7:
72:87:57:96:92:0b:34:0c:d3:35:ad:eb:a9:2c:21:ac:21:13:
3d:f1:88:ec:ae:73:c3:16:f0:d0:56:23:4a:da:59:58:ab:16:
8b:63:0e:63:56:06:0d:b4:20:87:f3:d5:11:97:1c:f3:de:2f:
53:70:3e:13:ae:f0:ca:99:90:03:4b:55:9e:61:07:36:8b:0a:
52:3b:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:00:35 2025 by rpki-client