Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B4F9524D71D11EF84FDC78C762E951A.roa
File: 6B4F9524D71D11EF84FDC78C762E951A.roa (raw, json)
Hash identifier: G9RQSXlVpGgpTB4ghOJwHWswPTdjuL5gWguW9BTgXsw=
Subject key identifier: 14:16:7B:9F:BE:F0:AE:A5:61:C8:65:53:B9:48:58:67:79:E4:A7:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B4F9524D71D11EF84FDC78C762E951A.roa
Signing time: Mon 20 Jan 2025 10:58:03 +0000
ROA not before: Mon 20 Jan 2025 10:57:59 +0000
ROA not after: Sat 01 Feb 2025 10:57:59 +0000
asID: 62240
IP address blocks: 45.192.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68643 (0x10c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 10:57:59 2025 GMT
Not After : Feb 1 10:57:59 2025 GMT
Subject: CN=678e2c3a-7a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:a9:18:79:ec:56:a8:44:86:c8:ac:16:ca:
27:cd:31:7f:f5:27:40:bf:1f:0c:e5:07:7f:d1:a8:
04:50:2d:12:ac:d1:e1:ae:ec:aa:81:43:6b:d3:f2:
75:1b:9b:1f:2b:22:1f:64:77:a2:d8:2e:11:03:29:
03:6d:e1:bf:e4:ae:7b:c8:1d:2e:11:b8:37:76:7e:
b9:7d:37:8c:ca:9d:4e:a0:66:1f:c8:a7:9b:14:84:
38:48:9c:9f:6e:e3:4f:ac:c9:22:fa:ce:b6:40:f2:
87:97:4e:95:49:3d:24:79:d4:e9:2c:e1:ad:9f:65:
65:84:7f:29:13:a0:da:8e:5b:6a:d4:e0:10:1c:60:
61:1f:f7:d2:26:81:7c:d5:70:26:00:ca:d5:b2:b9:
a2:a9:b1:eb:48:7d:c3:6e:1d:3a:b3:2d:a8:f3:4a:
3f:1e:2f:4d:d7:33:1f:82:93:b3:bb:57:3d:9d:cc:
3c:eb:0c:f4:28:5e:31:2a:ec:8e:fa:03:be:ae:c2:
4c:27:9d:2d:cf:a5:da:8c:15:7d:32:b5:d5:7a:3f:
1f:03:b7:1d:54:7c:cb:d3:fb:16:3c:3c:59:e8:c9:
f8:97:5c:aa:af:47:b5:f3:60:68:a9:06:89:b2:79:
00:5a:5c:ca:cf:b0:f6:1e:7d:d8:9c:47:c2:fe:ed:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:7B:9F:BE:F0:AE:A5:61:C8:65:53:B9:48:58:67:79:E4:A7:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B4F9524D71D11EF84FDC78C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:79:85:86:34:b3:22:27:a0:1d:e9:17:d4:91:e5:28:e0:90:
37:f9:33:d7:0a:f1:ca:a2:3e:02:4b:9b:27:a7:1b:21:32:76:
58:d4:64:61:ce:46:7e:e9:63:33:41:88:44:dd:23:0d:06:9b:
bd:ce:87:be:88:91:5c:72:93:86:0a:43:56:c1:ee:18:36:db:
da:b8:4f:20:6a:48:d9:b5:be:48:8a:0a:94:1d:8e:c4:66:95:
f0:6e:10:de:39:7f:ce:a8:bc:e5:da:f8:65:16:6b:dd:66:5f:
ac:8c:69:52:50:d8:39:05:3b:f5:63:19:11:a3:fa:6b:dc:76:
9f:28:8c:00:d5:15:df:75:ef:b4:7c:f9:fd:40:93:cc:54:06:
a7:f9:f7:a2:6c:6f:76:e4:c7:fa:b7:26:65:c5:be:99:0b:15:
51:c8:50:e9:aa:1b:15:62:f0:b4:90:23:d9:e4:1e:72:0c:55:
94:06:fa:4b:95:83:a8:28:5c:e0:30:89:42:22:64:cd:5b:78:
ea:fc:1e:d3:56:0c:63:44:e8:47:e3:e0:4e:12:50:61:2f:02:
29:35:77:70:5c:e5:3c:e8:25:2a:2a:93:11:ab:4a:21:69:d6:
03:58:32:37:31:1a:ea:76:cf:98:a6:3b:47:a9:3c:16:48:06:
bc:2e:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:29:32 2025 by rpki-client