Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F3EB2D0DB2411EFB01B3F73762E951A.roa
File: 7F3EB2D0DB2411EFB01B3F73762E951A.roa (raw, json)
Hash identifier: 919QYPujxBeUmy2ntd+TMX1Jb90Wo2R9dFzvw8/ZRik=
Subject key identifier: C4:23:FF:B4:33:68:59:17:4B:4B:4B:F3:C2:E6:F9:C3:5D:C2:8E:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01127B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F3EB2D0DB2411EFB01B3F73762E951A.roa
Signing time: Sat 25 Jan 2025 13:58:47 +0000
ROA not before: Sat 25 Jan 2025 13:58:44 +0000
ROA not after: Wed 05 Mar 2025 13:58:44 +0000
asID: 42831
IP address blocks: 45.195.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70267 (0x1127b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 13:58:44 2025 GMT
Not After : Mar 5 13:58:44 2025 GMT
Subject: CN=6794ee17-1602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:a8:3b:c8:89:ee:c3:a1:c5:40:5f:f1:69:
f9:fa:45:c5:be:c8:73:94:ab:4e:fe:5e:49:06:e6:
bf:66:01:4e:9a:2b:84:29:b1:6a:24:45:c1:ba:99:
c8:9d:50:13:9a:e7:77:38:6f:03:d7:39:1c:a5:d4:
f7:4c:fc:82:94:d0:4b:c4:c9:7f:79:bc:fb:f9:5f:
de:b9:f6:dc:a4:76:0b:a6:62:91:30:2f:17:88:f4:
eb:32:ce:8b:f4:0d:1a:ce:5a:e7:f2:10:c8:c8:d6:
3f:3b:f9:4c:47:60:ec:29:ca:8d:4a:5a:0e:36:0c:
cc:2a:68:2e:c9:b2:16:0c:6a:3a:41:5a:56:a5:34:
20:ec:08:b9:6c:09:34:b0:a0:4e:64:aa:2e:7c:a2:
71:26:7c:7f:1c:a7:10:c9:79:21:63:01:9b:1c:ff:
a9:5a:74:52:76:7b:fb:7c:e6:4d:40:63:e4:6e:3f:
b1:9b:2d:a2:87:8a:ed:22:14:9d:f6:9b:47:bf:c4:
cb:b8:51:aa:95:b3:4e:51:50:8d:19:07:4b:6d:6f:
ee:4f:5b:d2:e9:a0:ae:3b:98:11:b1:39:1e:32:73:
9c:66:3b:34:ac:62:2a:f6:67:ad:35:25:23:da:0b:
ec:21:e5:31:7b:2e:30:07:0b:f9:a9:97:bc:7b:a3:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:23:FF:B4:33:68:59:17:4B:4B:4B:F3:C2:E6:F9:C3:5D:C2:8E:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F3EB2D0DB2411EFB01B3F73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.88.0/21
Signature Algorithm: sha256WithRSAEncryption
52:f6:70:ff:9c:04:ed:29:11:43:c9:12:fc:06:73:f7:70:e5:
11:8a:cc:cc:b6:ae:04:2b:c3:5d:a7:28:67:b5:4c:4a:09:7c:
c2:0c:ff:ca:95:c7:7f:cf:3f:0d:ce:31:c8:50:f3:f6:ea:57:
0d:03:7f:e1:9e:81:c2:ff:54:7c:a5:e0:0f:2b:63:b5:77:08:
9a:88:64:e6:94:6d:c3:fb:71:16:88:10:1d:5b:7f:0d:dd:bc:
98:17:1b:48:66:44:1a:bc:bf:4f:7b:64:d0:8e:1f:1b:52:75:
d7:9a:90:58:1b:a0:4d:f1:ef:fe:9c:5c:a6:74:7d:b3:a0:be:
ae:e1:0f:0e:e3:75:45:7d:de:9a:ae:06:2b:94:83:ce:d7:08:
3f:46:61:92:3e:3e:dd:84:38:c0:fc:f9:5d:da:b7:5d:f6:1b:
60:cb:35:74:62:0a:74:ba:d1:1c:5e:c7:ad:1c:67:ee:e9:d0:
d7:15:cd:d5:59:8b:99:8f:35:27:14:50:0c:2e:57:c4:90:13:
ce:b8:b6:0f:25:b4:4b:61:f8:6d:9d:31:e3:75:6c:ef:76:64:
3d:d3:62:78:19:4b:62:d5:0f:21:f0:88:8d:73:58:6a:cd:2d:
32:16:54:03:55:3c:85:8d:56:26:21:a2:76:aa:44:b5:ba:04:
37:2a:83:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:15:40 2025 by rpki-client