Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96B11A7CD50F11EF90D5B28F762E951A.roa
File: 96B11A7CD50F11EF90D5B28F762E951A.roa (raw, json)
Hash identifier: /I2ZWCijPFez3SYloY+jfSqr+uDORC74uaA3CyQ6ZKg=
Subject key identifier: 43:3A:31:99:8C:2D:24:A7:EE:3E:AB:51:46:33:E2:D3:F5:EB:F1:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96B11A7CD50F11EF90D5B28F762E951A.roa
Signing time: Fri 17 Jan 2025 20:14:00 +0000
ROA not before: Fri 17 Jan 2025 20:13:56 +0000
ROA not after: Sat 22 Feb 2025 20:13:56 +0000
asID: 54801
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68246 (0x10a96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 20:13:56 2025 GMT
Not After : Feb 22 20:13:56 2025 GMT
Subject: CN=678aba08-8c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:f6:91:ce:52:21:67:87:ad:c3:cd:6b:6b:
d6:24:62:af:c9:14:ab:c6:d1:8e:61:8e:c4:4a:53:
8b:4a:48:c9:08:71:c4:ee:15:26:06:91:7f:6c:c6:
7e:2e:23:e4:34:e6:e6:c6:1c:08:92:fe:76:f0:88:
1e:ff:b0:62:c9:52:b3:d9:47:2e:5d:02:21:0b:fb:
ce:d5:1b:7c:ae:2b:99:53:96:40:75:9f:96:e6:cb:
e9:f2:10:9d:c3:e9:d5:3e:11:77:f2:98:46:78:c4:
57:79:4a:69:15:ee:fc:48:35:17:52:33:f1:65:58:
8a:14:50:06:e8:f9:79:0a:41:92:65:22:61:05:dc:
19:26:88:b4:70:95:7d:c5:d5:38:93:b3:09:6b:7a:
ea:54:e0:30:85:c3:42:45:6e:82:7b:8c:63:3c:7b:
18:9d:60:e3:20:1a:d2:74:38:50:32:33:49:c0:cd:
2b:ed:78:c7:ed:08:05:3f:1a:1f:76:7f:f5:7f:69:
68:ff:b8:a6:b9:18:98:54:f7:e0:53:e0:ec:c2:54:
4a:90:fa:3d:87:af:79:95:1c:47:5a:61:2e:da:8a:
28:a3:f9:4e:fa:a3:0c:3d:08:ec:af:a5:57:63:41:
e4:f7:3c:9f:d4:54:e1:1e:d5:3d:c5:92:d9:bc:c9:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3A:31:99:8C:2D:24:A7:EE:3E:AB:51:46:33:E2:D3:F5:EB:F1:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96B11A7CD50F11EF90D5B28F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:74:a0:c6:19:aa:d8:66:fb:a6:a5:c5:a4:95:fa:45:12:db:
25:84:28:71:23:8d:7c:29:34:44:20:31:9a:a3:3d:22:83:93:
96:9c:64:15:33:25:6c:42:62:d1:f5:84:d4:03:a2:1c:8a:97:
7e:28:cb:40:1a:f4:9c:69:78:e8:c5:4b:bc:29:92:6e:26:84:
f6:9f:e9:fc:5d:46:51:d4:de:53:66:cb:16:b8:4a:49:0b:b6:
b1:4f:34:8f:d3:77:5b:ff:72:c7:41:c3:70:ec:97:7a:86:56:
3b:da:25:90:9c:7a:b0:c9:65:62:b6:ad:fc:77:09:aa:a1:49:
d4:48:fb:20:b2:fd:ba:88:dd:50:9e:d1:bf:cd:52:d7:dc:cb:
49:38:2b:0c:63:9e:c5:ad:3e:54:ae:f5:fc:35:86:cf:eb:8b:
78:74:aa:42:3e:41:02:39:a0:f2:c5:74:01:cc:da:75:bc:fc:
6f:96:80:80:8e:a9:e8:0e:85:9a:28:44:4a:d0:e4:ea:17:9d:
12:ae:2e:c2:7c:38:0f:8e:8c:4e:1f:85:a8:74:c8:e5:8b:fc:
77:62:2a:c3:38:a1:6c:f7:d4:dd:bb:a8:c8:ce:2a:3d:2e:50:
e1:8f:29:38:ee:7d:43:75:bd:a2:6c:5f:9f:d8:b5:b9:f7:35:
b0:cd:cb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:43 2025 by rpki-client