Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3A46F2D7FC11EFA9CD7141762E951A.roa
File: 7B3A46F2D7FC11EFA9CD7141762E951A.roa (raw, json)
Hash identifier: x19kAPSrzyaH1DNY5OA9GGQafFXKA4aSHAyRtl8skcI=
Subject key identifier: D8:43:E4:45:16:58:21:80:C1:F7:ED:90:68:B7:DB:6E:6F:A5:92:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3A46F2D7FC11EFA9CD7141762E951A.roa
Signing time: Tue 21 Jan 2025 13:34:47 +0000
ROA not before: Tue 21 Jan 2025 13:34:44 +0000
ROA not after: Sat 01 Feb 2025 13:34:44 +0000
asID: 202656
IP address blocks: 45.192.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69086 (0x10dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:34:44 2025 GMT
Not After : Feb 1 13:34:44 2025 GMT
Subject: CN=678fa277-fcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:fd:68:30:4d:d3:ad:53:b3:aa:28:ab:47:
6b:bc:e9:29:54:0f:c6:bd:e8:b7:3c:13:14:5e:02:
bc:9b:6f:a9:61:d7:1f:14:39:fd:7a:2e:8b:5f:f8:
48:0e:a9:8b:5b:f0:f7:1f:41:12:8e:3d:8e:74:ac:
9e:1a:3e:40:c7:e8:82:8e:0d:1c:b4:10:34:f8:7d:
fa:49:83:68:8b:77:5f:13:cc:3e:d0:cd:63:a6:77:
30:32:2a:f6:f9:20:5d:73:1d:e8:5a:c1:37:d0:f1:
1a:4a:86:d8:8c:94:50:87:a8:ce:f9:5e:29:91:4b:
c7:5d:57:e7:f1:41:f2:e3:d9:db:30:9d:db:be:93:
1d:03:dd:8e:7c:d8:e6:de:97:6d:39:d4:5d:0f:6c:
a1:20:70:99:71:6a:7e:72:59:3b:5f:fa:b0:f6:1a:
82:63:18:8f:79:35:5a:f6:4c:f4:f0:a0:e6:cd:96:
1b:67:67:13:b0:b0:95:0b:72:c9:31:1d:35:89:42:
76:fd:e6:92:ea:a5:e0:99:56:74:a0:3a:8c:0e:0e:
e0:2e:b6:77:4b:99:b7:f2:76:d8:9d:df:bd:48:c8:
61:07:a7:d5:0b:c0:e3:3a:12:02:ad:61:f7:f7:d4:
8b:52:64:42:13:46:88:c2:12:a6:d0:37:93:e8:2c:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:43:E4:45:16:58:21:80:C1:F7:ED:90:68:B7:DB:6E:6F:A5:92:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3A46F2D7FC11EFA9CD7141762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b6:e0:c2:4b:78:0a:b7:14:62:3a:34:22:a4:9a:dd:ce:3a:
aa:0a:da:31:8e:54:32:0c:7e:81:22:31:91:70:1d:08:25:98:
4a:1c:ba:00:19:96:ea:b0:0e:c9:7b:cc:82:d8:d0:53:55:ad:
19:40:88:f1:42:3c:63:3f:04:e6:20:71:26:cb:ce:b4:fc:76:
a7:e4:15:fa:18:65:e8:a7:64:56:29:3e:d5:3a:4c:52:9c:49:
c3:c2:7c:24:6b:a5:c1:4e:73:4b:d0:16:83:67:25:51:b0:86:
c3:79:e2:45:f6:a1:d6:dc:87:a0:9a:cd:de:33:0b:f0:9b:64:
2f:5b:13:f9:20:3b:d8:47:f5:88:d5:59:3d:53:50:25:c3:e3:
8e:64:da:4f:2d:bb:28:6f:7d:ad:a2:90:75:b1:43:8b:67:b9:
82:0d:e7:0c:9f:14:4d:f4:61:48:96:55:22:60:16:a8:e4:f6:
ae:1d:86:8f:b5:f6:00:c3:38:11:cb:52:71:01:77:34:79:76:
9a:c6:7f:96:61:8d:39:61:0a:f2:96:4b:93:51:af:75:83:b4:
f7:ba:44:ed:28:52:ee:65:c6:0f:6e:42:ff:ed:63:62:cc:b0:
1b:70:c8:59:7b:20:97:3d:52:d1:be:69:7b:55:26:70:62:06:
15:7c:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:55:05 2025 by rpki-client