Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E9EEE24D71B11EF9CAA5881762E951A.roa
File: 7E9EEE24D71B11EF9CAA5881762E951A.roa (raw, json)
Hash identifier: 3hE8wdjAZn40BPkJu+RfF+yOTPjLeeD2aCQPQUbM0jk=
Subject key identifier: 37:75:71:5C:B2:98:3F:EF:C7:EA:D7:76:08:E8:F7:07:06:E9:34:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E9EEE24D71B11EF9CAA5881762E951A.roa
Signing time: Mon 20 Jan 2025 10:44:16 +0000
ROA not before: Mon 20 Jan 2025 10:44:12 +0000
ROA not after: Sat 01 Feb 2025 10:44:12 +0000
asID: 202656
IP address blocks: 45.192.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68631 (0x10c17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 10:44:12 2025 GMT
Not After : Feb 1 10:44:12 2025 GMT
Subject: CN=678e2900-77a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:45:21:5c:aa:4b:b7:5d:99:18:3d:7a:e7:
bb:f7:0c:bb:9f:09:40:84:bb:96:24:2a:1c:76:15:
e0:3f:19:41:00:0f:24:4b:03:e9:69:ed:f4:c4:41:
34:37:45:dc:c8:57:49:4f:5c:bd:89:06:d7:3e:5a:
61:c7:f6:e4:06:27:58:73:80:2d:65:b0:e6:81:ba:
66:bf:d5:71:96:e9:6c:d8:2e:d0:40:56:af:82:84:
a6:1f:ff:93:d1:d6:8f:46:0f:3d:b2:0b:a1:fe:db:
2e:b9:74:ee:67:5f:56:89:c2:d9:1f:c5:9d:27:2b:
fb:79:c3:9a:37:2c:8f:7f:4e:f0:b9:a8:4a:44:2c:
d4:82:27:b2:eb:f5:83:60:f6:81:cc:1e:5a:65:a9:
6f:55:5d:fe:e0:99:4d:61:56:42:3c:56:bc:2b:3c:
04:7f:2f:5c:9d:f2:74:05:fd:89:a3:44:37:78:c6:
01:7b:4b:8c:d2:e5:ba:80:e1:c0:63:e6:49:ee:c3:
f9:43:7e:46:e2:02:71:9a:84:48:50:8a:67:5d:f5:
21:aa:e5:59:c0:dc:5f:81:60:31:13:d1:54:ae:96:
88:4f:fa:52:4b:77:6a:8c:18:e7:93:ae:d6:84:db:
3a:b1:34:35:65:e7:56:28:67:66:29:01:18:5e:4b:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:75:71:5C:B2:98:3F:EF:C7:EA:D7:76:08:E8:F7:07:06:E9:34:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E9EEE24D71B11EF9CAA5881762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.55.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1b:75:20:88:bb:d6:39:21:f7:16:d1:95:1a:14:4b:07:0a:
17:9b:d4:7a:9a:fe:71:85:3d:69:5a:2c:c3:45:5a:f8:5f:6d:
0e:00:bc:43:7a:57:ba:98:00:e1:51:82:84:df:d7:ff:c0:3c:
99:d0:36:1c:b1:29:28:b6:00:e2:40:7a:14:cb:84:76:c9:2a:
38:db:5d:5b:87:2a:9e:ac:86:07:de:5e:d4:04:01:eb:ae:ce:
06:eb:9c:eb:44:dd:3d:f1:65:bd:dd:e0:50:3d:b0:77:6e:79:
05:8b:4e:c2:98:2b:6e:1a:f6:0b:2f:b8:28:49:90:14:d4:c9:
be:bb:42:1e:d1:f1:6b:ca:b0:1d:fd:d3:53:d6:2b:ff:86:06:
ba:86:ed:c5:e9:24:93:7c:29:5e:cd:cc:20:0f:2f:49:91:e1:
6c:79:17:c9:3e:ef:ee:17:71:7c:c5:b7:51:69:15:12:6b:ff:
1d:ca:5c:59:6c:4c:94:93:c3:a7:32:15:92:c0:ea:16:bd:16:
ea:a2:6c:7d:57:48:e2:6f:01:2d:62:23:f1:24:27:f2:60:36:
f0:db:09:28:db:f9:5d:80:a2:27:1c:4e:72:47:97:ac:dc:b7:
d1:52:d7:12:49:d6:e8:a4:89:c2:30:79:eb:64:30:4e:32:ff:
57:ee:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:45 2025 by rpki-client