Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AE6D162DC8111EF97326EA7762E951A.roa
File: 9AE6D162DC8111EF97326EA7762E951A.roa (raw, json)
Hash identifier: EZTNosGHWsvewpFni7ByrAfx+qk/5CIvUFdnnn3lWWI=
Subject key identifier: 1D:80:AB:85:CB:0F:69:32:79:33:BD:F3:E2:3C:CD:57:44:7F:4D:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01147D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AE6D162DC8111EF97326EA7762E951A.roa
Signing time: Mon 27 Jan 2025 07:37:48 +0000
ROA not before: Mon 27 Jan 2025 07:37:43 +0000
ROA not after: Tue 04 Mar 2025 07:37:43 +0000
asID: 138995
IP address blocks: 45.192.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70781 (0x1147d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 07:37:43 2025 GMT
Not After : Mar 4 07:37:43 2025 GMT
Subject: CN=679737cc-8c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:8f:9b:62:05:8f:cb:40:91:52:4d:fe:41:
d1:20:55:69:21:ec:26:d3:00:3e:67:d6:f7:f7:56:
6e:10:8b:19:45:89:66:3f:d9:af:52:0e:c8:c7:59:
88:e6:1f:e9:d5:2d:a0:04:05:a0:b5:5f:91:4f:bb:
61:f6:4b:b5:fd:9a:77:5a:d1:c7:53:31:82:10:e4:
cd:2b:e9:3c:d7:69:da:54:d4:97:a1:2a:68:45:07:
70:cc:64:8c:22:4c:3b:82:58:b6:dc:b5:8b:ad:32:
cf:a9:a1:e6:5e:44:33:a9:6e:6b:d8:de:29:09:da:
a0:de:bf:44:d7:b3:44:be:ff:28:8f:b2:2f:0d:c9:
4c:1c:96:9a:db:74:a4:a7:d2:a0:e2:04:ad:e0:81:
ee:1f:cf:34:a5:dc:c3:3e:61:f6:53:06:d3:a8:80:
8b:7a:df:d5:27:22:3a:8a:f5:24:d0:72:cf:0d:fc:
39:68:94:a1:7f:39:11:76:f5:56:ea:a5:02:dd:ca:
d1:51:22:59:d3:62:18:68:44:c0:ba:8a:47:8e:40:
51:e8:2a:62:b4:38:7a:09:17:ce:94:ee:a1:13:54:
b0:e7:11:66:44:30:01:8f:b5:8a:d6:8d:90:f1:7d:
e0:07:c6:11:f8:14:1d:ea:61:7a:79:cb:8c:2f:0d:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:AB:85:CB:0F:69:32:79:33:BD:F3:E2:3C:CD:57:44:7F:4D:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AE6D162DC8111EF97326EA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:66:15:21:11:9f:b9:d6:b9:e9:ee:a5:40:7f:f4:b8:61:cb:
f3:0a:44:a8:03:7f:02:22:6e:93:37:3e:d2:f9:31:82:20:c9:
b3:19:54:1e:f1:a8:bf:0c:32:66:05:a0:02:86:7b:bf:25:b5:
f8:fb:c8:a2:5f:c4:7b:a0:74:05:4d:c9:73:2c:d4:75:ff:03:
da:fe:ac:58:f7:fa:99:74:bf:5c:56:08:b4:ae:c2:f7:bc:3a:
d5:76:ce:fd:85:44:64:15:a9:14:ef:66:1d:22:47:40:46:ec:
97:f7:ad:99:01:7f:bd:c6:57:a5:33:1f:2b:8d:b4:f0:c9:03:
14:2b:db:b9:c9:aa:eb:58:e8:20:d8:6b:11:fb:5a:3f:c4:b6:
30:e2:24:31:ee:e0:e1:cd:ec:42:dc:17:f4:1c:4c:18:d5:0e:
f6:6f:89:d2:f1:d8:ea:71:b1:db:e0:65:09:d6:34:68:93:0e:
1b:b0:ff:23:4e:ac:2a:ec:58:5f:00:cc:d9:c2:db:2c:f5:37:
e2:f5:09:13:58:39:1a:56:23:01:36:00:d1:93:aa:36:22:c9:
f2:13:32:11:5a:0c:bd:54:58:65:54:04:6a:84:7e:fb:12:bc:
9e:74:da:16:c2:20:86:6b:39:d4:75:b3:1a:39:ba:2c:56:d1:
fc:19:a1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:18:31 2025 by rpki-client