Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92119D26D50411EF83F9E749762E951A.roa
File: 92119D26D50411EF83F9E749762E951A.roa (raw, json)
Hash identifier: Z50tAZSGh+TcnTOb/PRRmRBJ4cGsBqC0697fpFQ216Y=
Subject key identifier: BE:5E:B9:3D:A1:23:0F:F5:E1:4B:3D:BA:A9:0B:D4:8E:50:1B:D0:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92119D26D50411EF83F9E749762E951A.roa
Signing time: Fri 17 Jan 2025 18:55:08 +0000
ROA not before: Fri 17 Jan 2025 18:55:04 +0000
ROA not after: Fri 31 Jan 2025 18:55:04 +0000
asID: 39600
IP address blocks: 45.196.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68192 (0x10a60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 18:55:04 2025 GMT
Not After : Jan 31 18:55:04 2025 GMT
Subject: CN=678aa78c-56c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:4a:5b:c7:df:40:c2:b7:e3:52:55:48:6b:
9c:20:ae:5e:03:71:ef:52:1c:a9:b4:bc:0c:27:4e:
43:e4:34:fc:66:bd:d0:22:1f:89:81:bb:65:7c:49:
1f:5f:ba:b0:0d:94:df:61:69:0d:1b:c0:7e:4e:46:
78:46:a4:6c:51:e3:1a:cd:fa:ff:a8:9d:93:0c:00:
d2:40:7f:f5:f4:89:b9:d7:be:af:f1:eb:9f:6f:fd:
8d:18:d9:32:40:81:67:e9:56:0a:01:7c:43:6c:f5:
6b:0d:79:06:b0:06:ad:0b:70:fa:5c:d2:35:0e:5c:
7a:c9:17:93:49:38:50:94:6a:a6:52:de:1c:f7:48:
57:31:a3:c3:cf:b0:5a:4f:a7:c9:8d:70:68:dd:7e:
75:20:bf:29:63:54:e8:19:49:76:f3:48:be:a5:98:
0e:8c:f2:59:3f:75:53:b7:9a:ba:f7:4a:67:35:e8:
02:74:5b:1d:35:54:78:c8:60:71:62:27:8b:07:f2:
b5:29:3d:a1:42:cd:e7:0f:b5:a1:c2:5f:4c:2d:30:
d4:a7:fd:bd:52:ed:ad:fa:42:a8:99:55:17:e7:7e:
b7:66:e0:c6:5e:de:24:74:e0:77:ea:c2:59:a2:44:
39:26:91:2e:e7:65:c7:aa:ff:ec:ad:7b:e3:16:d4:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5E:B9:3D:A1:23:0F:F5:E1:4B:3D:BA:A9:0B:D4:8E:50:1B:D0:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92119D26D50411EF83F9E749762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.140.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b0:56:e2:43:29:5d:59:a6:5f:36:db:6a:17:56:65:2b:be:
de:2d:2a:a7:3f:4d:b7:c5:a3:63:aa:00:d9:fd:73:00:7c:0d:
0e:4f:37:e8:46:93:39:8f:67:5f:bd:24:71:12:ce:aa:98:80:
e0:49:a1:1c:58:4e:53:77:ba:46:ab:35:32:65:ec:c1:a9:3a:
79:f6:89:a5:ec:15:3e:3e:08:6d:5f:67:24:c5:61:28:d8:65:
49:fe:fd:81:c0:b7:18:c2:2b:da:71:75:83:8a:b9:2f:e8:cb:
32:66:8d:68:77:af:1a:37:f7:ed:b1:c4:f6:cd:a7:a1:10:ee:
9d:c1:71:b1:94:71:d7:1d:f1:e6:a0:c6:e2:03:10:5d:f6:0e:
20:9c:61:66:79:d7:36:fe:46:7e:31:a2:78:7b:e0:70:69:13:
88:03:b7:d2:8c:a1:71:89:aa:b0:d8:f1:0e:ac:da:71:1b:4d:
fc:4d:c4:97:e8:0a:d0:bf:a0:22:4d:bd:bf:d8:93:75:b1:3b:
05:7e:5c:4e:24:33:bb:14:f3:cc:e7:92:e7:93:ff:48:9c:77:
59:51:b6:82:63:70:46:15:14:59:9f:8f:f3:81:1b:f8:d7:9d:
c9:65:48:eb:da:a9:2f:ea:39:eb:05:6c:c5:56:84:4a:06:46:
b1:c0:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:55:09 2025 by rpki-client