Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD140BEDB2C11EFB3E1C2A7762E951A.roa
File: 9AD140BEDB2C11EFB3E1C2A7762E951A.roa (raw, json)
Hash identifier: WzX/qZJyTmUPPlvcQi3TCIPYXQvYY0A4Rp9+iyYlR5I=
Subject key identifier: 60:E7:C0:07:4F:91:4E:38:A8:35:57:B0:29:DB:FE:E3:4A:BF:F9:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01128B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD140BEDB2C11EFB3E1C2A7762E951A.roa
Signing time: Sat 25 Jan 2025 14:56:49 +0000
ROA not before: Sat 25 Jan 2025 14:56:46 +0000
ROA not after: Tue 04 Mar 2025 14:56:46 +0000
asID: 42831
IP address blocks: 45.198.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70283 (0x1128b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 14:56:46 2025 GMT
Not After : Mar 4 14:56:46 2025 GMT
Subject: CN=6794fbb1-f561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:37:b3:fb:65:ea:65:02:5d:25:3a:10:e4:
79:27:fc:7b:a2:78:bd:aa:eb:08:a9:85:e1:60:14:
27:cd:ed:ac:c9:ce:52:2b:30:c6:bb:bf:78:e8:e0:
d9:f2:1a:12:b8:56:40:82:02:4b:b0:80:a6:39:b3:
23:0a:77:be:ba:a7:26:42:d2:7c:63:1e:53:fe:9e:
94:d7:3e:da:1c:f8:cb:1a:bc:97:5b:54:c7:87:84:
bd:ac:e4:cb:1b:e8:61:a6:ba:4f:55:7a:8b:10:06:
b0:b8:4e:4b:3a:a4:dc:1b:d5:eb:e8:d5:ff:c6:cf:
79:ac:8d:63:59:b2:9f:56:ea:45:8c:07:84:7d:86:
3d:11:49:e0:62:65:b5:36:ab:6f:40:e7:04:39:10:
dc:f5:70:37:5e:98:bd:5c:6d:db:f3:4f:fa:31:33:
4e:fd:88:d5:16:11:fb:7a:fa:f7:29:b2:50:06:30:
39:af:45:f8:a2:ce:87:17:ec:78:29:5f:1d:80:0c:
bf:85:3e:76:47:f7:95:39:17:f4:de:05:45:9c:86:
06:97:d1:33:1c:0a:09:a3:1f:1a:bb:67:88:9e:a7:
0c:75:88:61:93:50:45:22:01:d1:6d:f8:fb:cd:eb:
aa:ce:29:a2:4f:f6:fe:4d:c5:89:f1:83:b1:ef:cc:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:C0:07:4F:91:4E:38:A8:35:57:B0:29:DB:FE:E3:4A:BF:F9:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD140BEDB2C11EFB3E1C2A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:e4:99:a6:6d:51:55:8f:0a:45:64:a9:57:ee:82:48:ea:7d:
3e:12:4a:24:a9:44:f0:8b:56:24:e3:98:37:33:ce:42:dd:b6:
59:27:82:31:1d:bd:bf:ab:99:1b:85:96:bf:75:2e:61:70:bb:
1c:3b:56:fe:d2:f8:91:52:1f:94:95:33:f5:fa:c9:10:9a:ad:
ae:ea:c9:ab:b8:04:90:eb:a1:a8:bc:37:fb:87:6c:74:43:bf:
7d:8c:25:c2:89:07:89:fb:98:47:40:b9:bc:f1:57:5b:56:b4:
50:1c:1f:4b:5a:d0:2b:4d:45:9e:fb:b8:ab:3a:ed:e4:7d:55:
23:ee:5f:31:a6:99:b8:ab:c9:f0:05:a1:f9:9f:a1:29:91:c7:
59:0e:7c:6b:cb:3f:fe:b9:55:40:79:65:4b:fe:77:3e:29:b5:
2a:9c:d9:91:e9:24:ef:1c:88:9c:74:76:51:20:da:48:ee:b8:
02:58:8d:9f:e8:c3:29:10:07:f6:05:5f:e4:a7:2b:50:ac:cf:
5d:8a:b9:00:64:79:0c:ed:97:44:11:1c:c5:71:b8:d7:bb:fe:
aa:69:fc:e4:b7:b6:6f:fe:72:ff:60:28:28:6e:fe:1f:0c:be:
ea:fb:02:e7:32:74:84:6a:21:52:28:bc:76:63:34:f2:55:e7:
35:20:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:00:22 2025 by rpki-client