Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A9A8432D52111EF822DFD83762E951A.roa
File: 8A9A8432D52111EF822DFD83762E951A.roa (raw, json)
Hash identifier: Lhi0tnYUCm+qkWLGZV9VX5PSNN/Pn0+mGXk5IBGsmms=
Subject key identifier: DA:E4:B0:FB:47:61:58:D7:D4:B2:62:FF:B6:43:CD:24:40:6A:02:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A9A8432D52111EF822DFD83762E951A.roa
Signing time: Fri 17 Jan 2025 22:22:31 +0000
ROA not before: Fri 17 Jan 2025 22:22:27 +0000
ROA not after: Sat 01 Feb 2025 22:22:27 +0000
asID: 138456
IP address blocks: 45.202.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68330 (0x10aea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 22:22:27 2025 GMT
Not After : Feb 1 22:22:27 2025 GMT
Subject: CN=678ad827-efbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:a5:a0:5c:a2:4f:46:7a:4e:c7:5a:43:80:
dd:27:8b:d0:0f:dd:c7:46:17:a3:2c:54:fc:73:03:
d3:25:25:18:7b:9b:a0:d9:5a:0b:b9:45:a5:a5:b4:
9e:7d:5e:f4:f5:03:86:c9:95:57:f9:50:24:b0:ff:
5b:bf:f1:cc:e6:84:dc:98:40:4d:73:1d:84:62:85:
5b:67:0b:28:10:51:92:d2:21:61:6c:23:ad:81:99:
13:12:7a:95:9b:4a:89:a5:93:35:b5:86:c8:3c:68:
1d:00:20:a5:0c:53:5f:91:19:be:41:65:45:95:e6:
24:bf:20:21:7f:be:f7:d6:8d:b0:6e:20:f4:40:c1:
35:5c:0d:39:1b:f0:50:5f:ef:4f:5f:dd:be:dd:49:
1d:cb:b5:76:b3:45:bc:93:6f:d7:a7:58:04:53:10:
f4:b6:b6:e2:14:6f:ca:34:73:73:e6:86:81:a1:15:
97:26:6e:9d:b5:37:8b:2e:d8:96:b7:ce:1b:7c:20:
29:1d:c0:74:a3:6f:4f:60:da:a3:97:8d:26:2b:49:
c3:68:f5:b0:75:7c:ee:e6:c9:67:5f:dd:c1:8d:58:
7c:2b:66:c2:bd:5f:4c:16:fe:eb:c2:ca:b3:38:78:
dc:6b:e8:97:39:5e:a7:f1:34:1f:71:e0:e1:2d:33:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E4:B0:FB:47:61:58:D7:D4:B2:62:FF:B6:43:CD:24:40:6A:02:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A9A8432D52111EF822DFD83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.196.0/24
Signature Algorithm: sha256WithRSAEncryption
13:08:2b:ba:da:6e:bc:cd:06:9b:3b:93:bf:d0:d9:73:b0:78:
4b:3c:9e:43:e6:11:f9:ca:7d:d1:75:72:c0:c6:f3:ac:c4:d8:
10:07:3f:e2:7d:60:54:00:18:44:6a:8e:db:0e:f1:a5:ec:9f:
27:88:76:d1:cc:aa:c3:aa:2c:aa:9e:1e:66:14:57:ce:46:c3:
c8:10:b4:f5:da:e2:7e:d5:6a:9c:7e:61:d7:98:9f:6b:7a:9d:
b3:0e:41:ff:3d:44:60:28:8e:8b:12:4f:07:17:88:c0:00:5c:
74:25:be:7b:8c:13:ad:3b:f5:34:88:4a:64:ce:46:33:11:dd:
f0:47:c9:fd:d1:5e:7d:dc:c1:95:e5:66:34:59:be:7f:8b:ce:
d6:e1:f7:c4:23:dd:d8:27:f2:fb:a1:17:ff:1f:19:2b:9d:f0:
40:70:93:b7:03:60:cf:26:6e:5e:51:13:de:0d:c2:06:b7:48:
0b:a1:2b:dd:4c:a5:f1:ed:cd:3e:b3:44:86:87:8b:18:c2:69:
d7:db:0a:8b:fc:73:56:cd:d2:e4:76:13:cb:8d:e2:2c:07:ef:
68:96:1c:74:03:ec:c0:61:22:fe:a8:c8:7b:2d:66:61:b7:63:
f7:a5:e6:28:56:18:fb:a1:5b:54:ff:a2:a6:be:7e:60:7c:5c:
74:74:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:58 2025 by rpki-client