Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6965F8B8D80111EFBD743961762E951A.roa
File: 6965F8B8D80111EFBD743961762E951A.roa (raw, json)
Hash identifier: QRTuUOzdxKRUjiXzx2oWoW4WVNz6ZvYnkVkB7WUeGWQ=
Subject key identifier: 45:F9:86:46:56:0B:F6:16:73:50:9D:13:90:AB:C1:9B:C3:6E:9B:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DFC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6965F8B8D80111EFBD743961762E951A.roa
Signing time: Tue 21 Jan 2025 14:10:05 +0000
ROA not before: Tue 21 Jan 2025 14:10:01 +0000
ROA not after: Sat 01 Feb 2025 14:10:01 +0000
asID: 62240
IP address blocks: 45.192.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69116 (0x10dfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:10:01 2025 GMT
Not After : Feb 1 14:10:01 2025 GMT
Subject: CN=678faabd-5758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:ed:2f:f0:bc:84:fc:5e:13:8e:b6:d2:a0:
7d:02:4d:ec:c8:d4:43:e4:d3:e4:72:11:6e:f1:53:
4f:41:97:a3:51:8c:34:8e:02:4e:da:26:f3:d4:7c:
2d:de:19:01:8c:58:3b:8f:23:6c:ed:29:86:51:89:
e6:d7:40:df:14:58:07:f8:15:2c:5b:c6:a1:e0:55:
f7:2b:1c:e6:4e:a9:e7:4f:ed:13:53:09:72:4d:67:
ee:8a:54:31:22:da:8e:4d:06:2c:a2:65:1d:2c:ee:
fb:8f:6c:6b:24:79:78:77:02:ad:42:ad:d5:72:dc:
40:40:bb:0d:59:a9:af:f7:0f:de:bb:3b:bf:62:fe:
9b:3a:10:de:63:78:08:14:93:82:c6:c7:d8:a7:0b:
b8:e1:34:a2:f2:bf:39:ef:ac:74:f4:d0:10:e2:fc:
db:d7:5c:13:30:0a:4e:f0:2a:52:f2:99:20:cd:65:
d5:e2:27:bf:4a:67:74:46:5f:24:5b:d1:60:65:6e:
12:74:16:cf:f6:bf:68:ee:cd:e3:f3:ae:65:84:35:
f9:dd:d6:f3:8c:bd:d4:39:23:49:9b:f2:63:95:df:
fc:8c:14:23:9d:15:4d:33:db:97:5e:a4:ca:e5:db:
42:ed:3e:d3:46:8e:af:6d:81:d3:c5:04:65:83:5f:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F9:86:46:56:0B:F6:16:73:50:9D:13:90:AB:C1:9B:C3:6E:9B:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6965F8B8D80111EFBD743961762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:11:98:94:f6:4c:ac:b2:7f:0d:a2:fa:e5:63:0e:9e:f2:cc:
49:18:e8:e6:f9:ff:cb:aa:79:2c:1b:84:4f:88:22:b9:5d:de:
01:bc:0c:7d:02:62:04:e1:df:60:0c:26:ff:8c:2f:4d:f2:ed:
9f:0e:f4:f5:76:16:e8:18:a4:14:b8:ce:74:8a:10:3b:53:55:
2c:0f:8b:12:b8:d0:df:f7:4f:35:8a:5e:83:10:9c:dd:a4:07:
6c:60:5e:f2:2f:4f:00:88:c1:05:40:41:65:55:1a:3e:54:11:
9c:63:d4:24:00:8d:ec:b8:82:d3:bd:d1:5f:d5:33:54:f5:36:
6a:c1:ce:fe:f4:03:7b:fa:f0:37:37:09:ad:24:62:9f:a5:81:
94:c8:ce:5d:f5:dc:4f:0b:4a:0e:f5:c6:9f:58:09:da:9b:3d:
51:02:51:8f:16:c1:40:00:28:52:72:19:3c:33:6b:8a:79:8a:
89:80:92:16:18:62:32:49:cd:7e:53:09:58:27:33:ae:2c:84:
8d:b0:84:a9:5b:52:cc:8c:a1:4f:e7:3c:31:f9:d6:66:25:05:
62:db:e7:13:b1:b7:45:17:d5:93:72:01:0a:9d:02:86:72:6f:
75:59:4c:92:d1:1f:d5:3e:7a:8c:1e:58:c6:0d:bf:34:d6:97:
8f:90:0a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:34:57 2025 by rpki-client