Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C8ABCCDBE311EF87B91878762E951A.roa
File: 63C8ABCCDBE311EF87B91878762E951A.roa (raw, json)
Hash identifier: Fo2CKa/O3JlFcWd0ul9cZ6ALF/AXpUetO13tdlqfjNU=
Subject key identifier: FB:E0:CA:17:4D:01:F7:A2:78:D0:F4:44:BA:A0:15:4E:DD:64:23:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01139A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C8ABCCDBE311EF87B91878762E951A.roa
Signing time: Sun 26 Jan 2025 12:45:15 +0000
ROA not before: Sun 26 Jan 2025 12:45:10 +0000
ROA not after: Tue 04 Mar 2025 12:45:10 +0000
asID: 203020
IP address blocks: 45.198.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70554 (0x1139a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:45:10 2025 GMT
Not After : Mar 4 12:45:10 2025 GMT
Subject: CN=67962e5b-11f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4a:be:15:d1:a5:ec:b8:1e:d3:f7:2d:2c:e3:
ee:aa:c0:9b:29:04:52:e7:0d:09:ab:13:f9:89:43:
5f:c5:6c:9c:95:70:b5:0e:06:fd:13:9f:ff:cf:e3:
2b:a5:3e:27:ea:3f:5a:9d:79:17:63:91:6f:a8:83:
99:41:70:5a:30:e9:41:47:bd:95:d2:0f:8e:19:ec:
76:51:79:67:59:e2:b6:f2:9d:f4:49:4f:c5:94:c7:
f9:6f:46:6a:af:ba:0e:c3:7f:bb:b9:fc:51:d4:47:
a7:19:25:9d:80:af:7c:f8:bb:d2:2d:b1:ca:9f:1f:
6a:c7:63:3c:28:98:78:dd:13:b7:0c:63:29:5c:37:
01:db:85:bc:c0:1e:ce:f4:7d:af:53:c0:18:fd:af:
64:49:45:d3:22:da:f1:a0:d7:c7:69:61:55:37:49:
03:fb:75:f6:b7:00:e2:cf:26:2e:bd:0a:82:2a:dd:
a2:d6:15:b2:0f:51:c5:13:d5:af:b7:7f:b7:38:6e:
5d:16:49:b0:2b:a0:63:f4:51:37:7f:77:30:e6:1d:
1f:76:0a:0d:a4:0e:ad:51:ce:1f:86:cf:b6:ca:40:
b3:7f:bc:2f:70:f3:ef:1b:d1:52:0f:79:b6:1c:20:
dc:41:36:f5:05:72:e9:af:a6:bb:c9:a0:5b:9f:6e:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E0:CA:17:4D:01:F7:A2:78:D0:F4:44:BA:A0:15:4E:DD:64:23:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C8ABCCDBE311EF87B91878762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.48.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:0e:51:02:b8:07:e4:c8:1b:29:6c:75:f9:d1:04:af:37:79:
df:2b:2e:e8:82:c4:ae:26:6c:39:c8:09:c0:02:c1:31:a2:1e:
4e:b4:16:7e:25:29:38:43:94:ea:f9:fe:32:db:fc:23:82:4c:
af:72:7a:8e:e7:33:13:cb:29:80:d4:8c:bd:9e:fb:2b:d4:79:
c5:37:5a:7d:c2:05:b5:77:a0:cf:d2:e3:82:26:fb:fe:f5:d7:
5a:8d:cb:ec:ca:0b:a5:30:43:3b:49:6c:03:b6:fb:87:91:4a:
4d:a6:f1:83:30:e5:c8:50:ff:36:97:a4:07:7d:b0:18:4b:5a:
2b:bd:78:a6:05:e6:bb:e3:d7:3b:71:ac:8d:9e:d5:5d:f1:59:
e2:f3:1e:74:6d:da:a3:7f:f6:16:65:89:94:6e:4f:c2:28:16:
5d:20:94:08:ed:d2:f0:01:b4:d0:b1:c9:b9:2f:e6:bf:0c:5b:
9a:0d:2c:ae:8e:ca:1e:04:0a:df:96:d7:72:0a:c2:bc:35:15:
e0:be:b7:3e:a9:13:96:ee:27:fa:78:6b:b8:3c:c7:1c:1c:29:
d3:66:c7:50:65:41:f0:c8:cf:d9:ae:08:c7:f9:97:a5:2b:0f:
b4:e9:3d:50:d7:31:47:b2:86:ba:c1:48:d3:0e:f9:9e:7d:dd:
61:1b:72:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:08:47 2025 by rpki-client