Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF18DFEDC8711EF9B62FE4D762E951A.roa
File: 7CF18DFEDC8711EF9B62FE4D762E951A.roa (raw, json)
Hash identifier: WPqY3dWRAPE2vdfzaiYiiuKHR66pT/OcHHBHY25MSkE=
Subject key identifier: 72:69:BA:F3:58:07:F5:1F:91:8C:7E:1D:DA:40:1E:E4:D0:F1:61:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF18DFEDC8711EF9B62FE4D762E951A.roa
Signing time: Mon 27 Jan 2025 08:19:55 +0000
ROA not before: Mon 27 Jan 2025 08:19:51 +0000
ROA not after: Tue 04 Mar 2025 08:19:51 +0000
asID: 138995
IP address blocks: 45.192.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70819 (0x114a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:19:51 2025 GMT
Not After : Mar 4 08:19:51 2025 GMT
Subject: CN=679741ab-ab5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:dc:a9:02:4c:04:b4:5c:8f:fc:76:ad:40:
dc:69:2b:e9:d1:da:75:7f:15:ab:76:cf:11:73:c3:
b8:78:4e:2b:1f:64:2c:58:06:cf:cd:6a:05:38:fc:
66:1a:9d:64:85:09:dd:79:f0:03:ef:d3:aa:c4:03:
6f:1b:09:9d:2f:f9:56:ff:6c:5e:04:f0:6c:79:dc:
c2:c1:35:fd:a0:be:f4:da:b0:d0:4b:ca:fb:a7:9d:
03:84:58:08:34:b3:00:33:7f:1a:e3:8d:b3:b8:1d:
46:80:73:43:7a:01:09:ec:40:80:38:7f:26:ad:d1:
28:9c:75:9f:ec:6b:39:ca:bd:db:b2:a5:e8:2e:81:
1f:00:73:6f:0c:33:94:69:e7:b0:4f:e7:7d:6a:43:
84:96:09:42:3b:02:e4:27:cd:54:c9:36:94:6e:8f:
36:e3:80:08:c3:e0:0a:2a:29:04:4a:62:5a:bc:15:
24:95:42:48:04:e9:ce:84:e2:68:a3:0d:c6:27:7b:
23:27:6f:d2:79:a6:5c:58:bb:be:47:e9:b8:14:ac:
73:f4:83:2a:90:1a:2d:6b:69:3a:5a:71:24:f7:a5:
ef:b6:c3:49:38:96:98:31:f7:ba:97:b0:3f:a0:65:
ae:cf:94:dc:98:88:3c:d6:93:ac:ab:c0:03:94:ce:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:BA:F3:58:07:F5:1F:91:8C:7E:1D:DA:40:1E:E4:D0:F1:61:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF18DFEDC8711EF9B62FE4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.169.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ce:35:41:4c:8e:0f:5d:07:f0:c7:49:7f:3b:aa:ea:4a:85:
fe:25:24:2c:d8:2c:eb:68:19:3d:9c:7c:a0:37:da:b6:47:7f:
77:dc:a0:59:72:c1:75:2b:6b:24:59:49:1d:41:b0:d1:7b:da:
95:98:7e:e2:dd:e4:d4:a2:5e:5e:b1:a9:f9:e7:a6:07:14:bd:
8b:2e:32:13:35:9a:5e:07:3e:0a:ae:84:a8:44:67:f1:0e:79:
a2:d5:a4:4c:a3:88:8c:32:82:09:19:d7:db:81:ec:92:3f:f5:
10:ee:16:f5:22:d5:07:e7:8b:d8:8d:bc:73:f6:13:ef:31:4d:
a8:42:9f:91:58:3c:14:d9:ac:c3:db:24:c5:73:0d:c9:8e:5b:
ec:17:28:6e:6d:01:46:e0:f6:61:e0:3c:69:42:9c:34:33:19:
76:df:f7:dd:62:5f:65:6e:64:44:89:c0:15:5c:78:6c:aa:3f:
98:b1:ae:dd:13:fb:ae:32:67:31:86:4d:71:26:f0:60:d7:cb:
1a:4f:09:92:9f:b1:fc:6b:06:7b:4c:a0:49:32:26:6a:f6:73:
1e:bf:5d:f6:c8:42:21:b0:bc:88:53:d2:49:5b:31:7e:7c:ce:
53:31:c8:91:cc:ca:0b:7f:cd:95:f3:03:2b:ed:23:e1:b8:be:
53:4d:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:04:16 2025 by rpki-client