Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60DE309CD73511EFB2449DA6762E951A.roa
File: 60DE309CD73511EFB2449DA6762E951A.roa (raw, json)
Hash identifier: BZxYMshzYVh9upmsV8GO+L/G76Te/OeN/kYLmNwTvjY=
Subject key identifier: 65:2A:75:08:1E:AD:FF:A0:A3:0F:0E:94:89:58:40:5C:EF:DB:67:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60DE309CD73511EFB2449DA6762E951A.roa
Signing time: Mon 20 Jan 2025 13:49:33 +0000
ROA not before: Mon 20 Jan 2025 13:49:29 +0000
ROA not after: Wed 05 Feb 2025 13:49:29 +0000
asID: 135097
IP address blocks: 45.195.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68761 (0x10c99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 13:49:29 2025 GMT
Not After : Feb 5 13:49:29 2025 GMT
Subject: CN=678e546d-5478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:5a:c9:64:26:bc:92:10:c3:c7:41:ad:c7:
b7:53:d2:78:e0:23:81:0f:ff:6b:87:8c:17:d1:ea:
82:3d:4f:ea:88:49:91:d8:29:7c:8d:8d:2a:90:9b:
9d:db:6b:b9:4d:66:47:89:2f:a9:1a:f5:a8:86:7d:
f8:47:60:6d:11:d0:e6:be:a5:7e:84:62:52:ab:52:
70:3b:4b:17:f7:7a:90:b3:74:03:1a:05:da:b0:aa:
b1:a0:48:47:49:b1:a9:db:b0:ca:b1:c7:ee:3d:92:
db:a2:f2:85:b2:86:c3:0c:63:74:4b:84:93:29:27:
f3:b9:13:d6:f1:00:d8:cf:b6:3f:d4:cf:e0:3a:61:
59:1b:89:60:11:c2:b8:d2:cb:07:a6:7d:c0:7a:22:
78:79:7d:9e:06:4c:59:3d:5b:2e:e8:a1:c1:6e:77:
fc:28:e9:df:eb:99:2f:dd:a8:1e:37:ea:d7:a9:a8:
01:42:31:49:66:be:a9:b9:b5:92:e3:bf:6b:80:74:
1e:28:18:bd:29:50:23:14:bf:ad:ce:cb:22:fc:fe:
94:be:c4:cb:1c:c6:db:dc:bd:31:1a:8a:12:be:79:
66:31:ae:fb:7a:12:61:05:a9:a5:ef:5e:1f:76:5f:
03:84:3c:b4:a5:dc:fd:2f:6c:bd:d5:64:7a:7f:53:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2A:75:08:1E:AD:FF:A0:A3:0F:0E:94:89:58:40:5C:EF:DB:67:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60DE309CD73511EFB2449DA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.140.0/22
Signature Algorithm: sha256WithRSAEncryption
31:be:01:43:12:07:82:91:88:63:95:99:a4:5a:b4:cf:5a:d3:
af:96:58:07:8a:ba:68:f5:0b:ef:cf:1f:a8:53:ca:96:1f:65:
31:7a:0a:41:37:77:8e:d0:45:5a:3d:2f:81:c1:f0:2c:44:3c:
9c:c1:9b:6d:40:ed:b5:94:cb:0c:1d:93:04:5b:5a:fd:81:eb:
e2:2f:59:89:21:fb:75:73:1a:03:1e:56:1a:29:17:71:0c:13:
05:ad:f7:64:dd:f5:c9:fd:56:34:b3:d6:fc:ef:3a:ea:2f:f5:
f2:41:8e:0d:2f:2c:a6:c4:c2:28:f4:0c:e1:fc:ee:2a:36:c0:
98:40:c4:fc:55:31:f3:13:9f:95:c6:31:03:f9:08:5c:c4:ba:
66:bb:c8:40:55:1e:39:a5:13:6f:df:3f:32:4f:1b:24:bf:c6:
17:63:29:ae:14:26:1d:65:a9:64:73:11:f3:99:80:f3:c0:3e:
c1:85:47:33:a5:c2:f6:54:0a:29:44:1e:13:83:be:f0:e9:8d:
a8:26:72:df:84:95:9a:2b:9c:03:4f:6b:53:e8:c3:6e:d8:f8:
e3:70:cb:c3:a2:46:e3:e1:39:96:d8:0e:5a:43:3c:5c:ed:e2:
54:e8:1a:4d:33:e4:28:e5:f7:d5:92:eb:81:f6:b1:fb:09:62:
f8:a9:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:45 2025 by rpki-client