Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86383FAAD4A511EF9E85A361762E951A.roa
File: 86383FAAD4A511EF9E85A361762E951A.roa (raw, json)
Hash identifier: Cr+aGpftt1e2ZrIU2RorhxK9ydPSKlXcWOQMbIvEUIA=
Subject key identifier: A4:00:BC:9E:73:5A:1A:14:0B:97:77:FB:34:89:A5:CD:CA:4F:C1:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010919
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86383FAAD4A511EF9E85A361762E951A.roa
Signing time: Fri 17 Jan 2025 07:34:46 +0000
ROA not before: Fri 17 Jan 2025 07:34:42 +0000
ROA not after: Sat 15 Feb 2025 07:34:42 +0000
asID: 9304
IP address blocks: 45.196.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67865 (0x10919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 07:34:42 2025 GMT
Not After : Feb 15 07:34:42 2025 GMT
Subject: CN=678a0816-7f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:6b:0b:9a:37:0d:89:c0:ea:27:f9:bc:85:
37:04:0f:22:08:f2:ef:ac:85:ba:09:13:7e:b7:a5:
78:87:5f:49:48:fa:45:7f:11:54:3d:dc:b1:bf:9b:
d4:c7:07:f7:39:55:51:2a:f7:51:27:9f:cb:34:29:
7f:11:ca:1e:19:55:fb:87:aa:e6:7f:c0:a1:48:86:
01:27:7c:0a:2f:d8:86:cb:ec:13:49:2a:18:2e:04:
a7:c7:50:66:2a:21:ac:20:fa:cd:69:9c:4f:cf:a0:
5f:0f:29:a6:31:39:13:d9:16:29:5c:78:09:aa:7a:
85:ce:1c:b0:8a:e0:44:15:b2:78:96:17:07:4d:3d:
99:01:81:c6:69:9c:70:89:3e:0b:48:0e:36:32:e7:
ec:4c:e4:05:c7:81:c6:62:b4:48:f1:17:44:24:d5:
c7:ed:8b:26:a4:71:c0:af:b9:8c:cb:da:17:42:56:
7f:1f:30:f6:61:9d:6e:a1:77:f3:a8:e3:ee:b8:c4:
9f:ac:3f:70:e0:8a:bd:c4:89:f2:b7:08:f2:35:e3:
d1:99:55:aa:06:92:88:5d:fb:de:f9:09:c9:74:4d:
03:13:47:bb:6f:07:bf:23:85:c4:72:6b:50:52:76:
f4:25:d0:0e:b5:f5:43:f0:c8:da:92:14:d8:1e:5d:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:BC:9E:73:5A:1A:14:0B:97:77:FB:34:89:A5:CD:CA:4F:C1:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86383FAAD4A511EF9E85A361762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.228.0/24
Signature Algorithm: sha256WithRSAEncryption
09:24:78:9e:03:1f:11:71:17:d7:37:18:ca:1d:9b:eb:0e:29:
58:a1:ec:49:46:5e:cb:ba:f9:b8:04:6a:1b:e2:21:b5:6b:92:
93:62:d5:2f:56:40:f9:b7:27:94:fa:ea:ab:35:de:3c:0c:3f:
4b:5e:87:20:60:57:96:d9:a7:5f:6f:83:ac:5d:7c:9e:1c:85:
0e:7e:be:59:07:de:57:27:55:40:73:5f:83:38:62:08:89:12:
7e:a9:de:e3:1f:1c:d7:22:94:53:00:7c:88:61:39:01:ea:a6:
47:ab:5c:68:22:54:92:89:ab:74:6d:4f:a9:b4:f0:da:7f:36:
b0:80:de:69:5a:53:39:8c:6c:19:8a:74:42:03:7f:46:19:a0:
03:c6:2e:04:b0:61:c9:4d:4e:28:c2:0f:d1:85:6b:16:ef:9d:
84:e5:a3:26:b3:f3:48:08:88:2f:d4:1f:5e:9e:fa:88:dd:90:
d1:9a:ae:13:a5:c7:f7:61:fc:6e:8a:69:3c:32:1d:0a:60:02:
fe:7a:8d:b0:b6:ea:bf:bf:50:1a:1d:dd:8f:30:5b:c9:86:95:
0b:4a:4a:26:2f:27:17:4b:59:fb:a6:43:24:f6:7e:3e:58:0a:
46:3f:07:76:78:4c:6d:62:5d:64:97:a8:ba:fe:20:ee:a5:35:
7a:39:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:43:59 2025 by rpki-client