Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A8A1090CE8311EFBE8C0E5B762E951A.roa
File: 5A8A1090CE8311EFBE8C0E5B762E951A.roa (raw, json)
Hash identifier: m3izH+wlvjol3RhsUl8dSR4NTNYuaBlAHEP8h+x0Fzw=
Subject key identifier: F7:51:99:9B:CE:8C:28:A3:92:AF:0E:EA:4D:1D:BF:57:D1:D4:57:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A8A1090CE8311EFBE8C0E5B762E951A.roa
Signing time: Thu 09 Jan 2025 12:15:03 +0000
ROA not before: Thu 09 Jan 2025 12:14:59 +0000
ROA not after: Sat 01 Feb 2025 12:14:59 +0000
asID: 17561
IP address blocks: 45.203.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66488 (0x103b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 9 12:14:59 2025 GMT
Not After : Feb 1 12:14:59 2025 GMT
Subject: CN=677fbdc7-2019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:dc:e2:33:67:c3:0d:6f:a4:66:c8:79:15:
0c:f9:79:d2:5e:6f:af:1f:4e:86:d2:35:55:d5:4d:
4f:44:1f:db:8e:c3:22:17:e9:61:57:3e:76:de:55:
9d:52:94:71:da:8b:18:fe:0c:da:a1:7c:28:33:56:
9c:65:2b:95:26:bf:41:c5:7b:b1:d4:35:a7:ef:c1:
41:ee:ed:63:04:e7:ca:c9:fc:be:51:2a:fd:e0:86:
24:fe:f7:7f:c2:c3:56:9f:01:14:df:c8:6f:a1:02:
f7:78:76:5a:fa:a2:15:0e:47:86:44:e0:f7:c9:44:
f4:69:f1:77:b2:67:d7:6a:a3:68:51:eb:3d:33:77:
53:79:35:68:87:02:5e:c9:57:a5:0c:92:94:32:0c:
02:69:2d:4f:1f:36:45:b5:58:00:79:61:e8:44:bf:
4b:97:65:bf:e0:79:2a:11:d9:51:e2:cc:1e:d2:61:
de:a7:3c:5e:80:f1:18:23:07:37:48:9b:4b:a2:a1:
5f:b2:de:48:58:ff:9a:7d:2f:91:cb:40:e5:1f:99:
21:ce:19:5d:6e:e9:43:3a:c2:f5:cd:25:9d:d5:b4:
ce:51:86:58:70:70:54:0d:94:45:90:ec:d0:54:8e:
55:52:ba:af:58:ea:61:2c:b9:43:e8:53:ad:58:f1:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:51:99:9B:CE:8C:28:A3:92:AF:0E:EA:4D:1D:BF:57:D1:D4:57:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A8A1090CE8311EFBE8C0E5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f1:e9:9b:68:80:ff:04:50:b4:63:50:de:8b:d7:9e:1d:0b:
90:d9:af:19:43:f0:f9:78:e3:f5:77:e5:89:72:21:33:c9:af:
51:8a:a2:71:3c:93:78:e2:98:33:37:30:e1:4e:e6:22:91:5c:
07:33:e6:c2:73:d9:8a:e4:3e:95:da:45:40:2e:7e:c4:82:ae:
cf:6c:46:13:9b:57:c8:2d:73:bf:67:9e:4c:d0:54:08:f4:72:
ef:01:06:64:bb:79:ec:f5:f4:db:41:ae:21:14:ec:b8:1f:30:
3c:4d:0b:5f:37:b1:85:3f:be:b1:63:53:ca:42:70:cf:1f:a4:
dd:27:20:e4:27:98:32:44:42:f4:61:35:ea:c8:7f:6c:6b:26:
10:f8:3b:f3:b1:9e:8c:08:d3:4a:46:a9:61:44:4b:da:9c:55:
fe:35:26:7d:4c:7f:8d:14:00:1c:1a:b1:2d:a8:d7:a1:54:44:
12:09:4e:9f:5b:2a:8a:b1:e4:59:e3:11:e4:76:7a:3a:44:54:
ce:90:c4:38:7c:59:33:a9:ca:9c:bc:54:b0:45:81:ef:86:f4:
00:1a:32:f8:a8:27:79:b7:54:ee:c8:4f:b2:d3:2c:c2:f3:6e:
e3:69:e6:39:99:75:63:0e:5f:c6:ed:7f:ae:4f:ed:68:1a:7c:
cc:98:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:03:44 2025 by rpki-client