Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59ACC28ADC8911EFBA204F5B762E951A.roa
File: 59ACC28ADC8911EFBA204F5B762E951A.roa (raw, json)
Hash identifier: fiOYWJ8Tik2aRm2vQUvJgT9NCnZRPXPht6epQGXIHE4=
Subject key identifier: 5E:E4:F0:2C:16:24:86:B4:A5:5B:87:C4:AF:6F:1E:AB:A3:AD:1D:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59ACC28ADC8911EFBA204F5B762E951A.roa
Signing time: Mon 27 Jan 2025 08:33:15 +0000
ROA not before: Mon 27 Jan 2025 08:33:11 +0000
ROA not after: Thu 06 Mar 2025 08:33:11 +0000
asID: 7018
IP address blocks: 45.202.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70831 (0x114af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:33:11 2025 GMT
Not After : Mar 6 08:33:11 2025 GMT
Subject: CN=679744cb-d060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:45:43:f5:16:da:6e:ee:ef:1f:99:e5:ec:
2b:88:73:d0:09:26:8a:1c:ff:01:a1:e9:26:f8:84:
67:d3:84:d7:c3:62:7a:b8:8e:93:67:27:36:89:58:
6c:89:6a:48:a9:5d:a3:56:bd:fd:86:ee:44:b9:2f:
a3:ce:c8:f3:d5:10:79:53:27:b2:a8:c7:3a:59:be:
73:22:8b:2a:db:5c:ac:4a:61:2d:70:b3:7c:70:b4:
f0:6e:fa:19:a2:de:c4:09:8d:e4:47:a7:9d:c8:7b:
3c:fa:e5:90:c8:21:29:44:2a:d4:68:f2:84:43:9b:
cc:72:5e:2c:2b:b7:32:0c:01:c4:fb:d7:73:67:98:
54:9f:c4:70:25:ce:1c:db:70:11:d4:17:a4:ec:e4:
f5:de:20:b3:80:ca:25:ad:fd:16:f7:47:54:2b:98:
80:f2:04:39:8a:80:09:02:f4:18:13:98:95:8f:64:
bb:df:57:cd:58:78:ab:36:c7:38:9f:cd:bb:a7:f7:
6c:0a:95:62:bf:18:40:24:12:29:93:0e:b7:29:63:
5c:27:21:51:79:3b:7d:1f:d0:df:1c:a4:15:48:95:
b7:63:8c:a1:3b:31:4e:db:01:3e:89:70:92:90:4f:
ef:27:72:33:b7:fc:95:55:82:75:a2:a1:11:6d:d4:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:F0:2C:16:24:86:B4:A5:5B:87:C4:AF:6F:1E:AB:A3:AD:1D:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59ACC28ADC8911EFBA204F5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.16.0/20
Signature Algorithm: sha256WithRSAEncryption
18:95:73:2d:ff:f4:7d:74:f0:cc:49:4f:d6:0c:c5:a3:db:e6:
af:66:62:a1:f2:d7:a2:02:66:ab:af:86:5c:05:35:a4:19:54:
3d:99:78:ae:8b:6c:c9:8f:8b:1a:a0:f9:4e:f7:dc:51:8a:f2:
c3:07:06:32:f4:a4:18:1f:d8:63:5b:ae:0c:de:bb:9f:99:b0:
e3:9d:1c:e1:d8:2f:cd:60:a3:85:1e:93:a7:b2:b8:9b:d0:2d:
2a:dc:29:40:13:42:6c:66:d3:62:e9:99:41:4c:79:48:f5:21:
2d:b7:34:37:2e:81:bb:1f:71:da:3b:68:05:60:92:00:92:ad:
b7:d6:c7:3f:1d:70:0e:61:13:97:c8:43:ce:96:66:c0:07:c7:
61:be:de:8a:8c:0d:fc:fd:f1:c3:01:49:4d:75:f3:c0:b9:19:
8d:bb:b6:23:ef:7d:9a:37:54:dc:3c:bd:83:95:12:57:58:3e:
f6:d7:2f:ce:a8:81:f7:b4:29:a1:10:f6:e5:20:40:2e:a8:34:
61:9e:c5:d6:f7:6f:bd:40:2f:df:8a:22:d9:e6:2f:2f:22:78:
ab:74:0e:ad:a6:3c:d2:40:8d:88:f3:fd:5e:af:5b:91:5b:31:
7d:f2:3e:92:1a:22:60:4a:b0:28:f2:7f:0e:33:f2:a5:a5:14:
15:bc:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:01 2025 by rpki-client