Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B01B5C0DE1311EFACB99142762E951A.roa
File: 9B01B5C0DE1311EFACB99142762E951A.roa (raw, json)
Hash identifier: llK+P8DYzTNYTkqy7P4Ug3mEpxLjT3hP8xaoUyRD6oE=
Subject key identifier: 68:55:DA:7D:0E:79:72:11:0A:CB:3B:8C:25:F9:45:86:F9:3C:89:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01159D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B01B5C0DE1311EFACB99142762E951A.roa
Signing time: Wed 29 Jan 2025 07:35:26 +0000
ROA not before: Wed 29 Jan 2025 07:35:22 +0000
ROA not after: Mon 03 Mar 2025 07:35:22 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71069 (0x1159d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 29 07:35:22 2025 GMT
Not After : Mar 3 07:35:22 2025 GMT
Subject: CN=6799da3e-8bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:9e:18:47:aa:fb:25:33:b0:25:47:ca:0f:
85:3b:99:cd:9a:e1:6f:c7:ce:e9:4e:76:ec:90:4e:
6a:27:9c:2a:6a:f3:3a:a3:1b:a9:6b:4a:36:fa:69:
a0:cb:5c:be:d2:82:26:4f:ad:11:08:58:1a:ce:39:
83:06:cd:1f:2f:2c:a7:e4:f3:86:4c:7a:f7:53:22:
1e:7c:34:d4:e9:c2:6d:8a:24:c4:ee:e8:e3:a0:08:
dd:f6:23:7e:62:01:21:14:a9:fa:e8:0f:af:18:63:
f8:e3:05:40:00:a4:9b:78:43:87:b1:84:30:2e:97:
42:9d:37:a8:d8:05:c4:85:f8:ab:92:50:1c:01:5e:
0a:6c:8c:cc:93:c0:be:e1:1c:50:18:35:79:24:41:
aa:87:ff:32:40:23:dd:f8:ee:ff:35:cb:92:13:35:
01:e9:34:0b:c0:bc:40:36:12:8f:ed:39:db:d0:07:
5c:58:47:68:cd:1f:05:31:87:1d:cd:92:cc:83:9f:
fb:a2:11:97:62:a9:aa:92:12:41:59:91:96:b7:38:
31:b3:38:c0:5e:c8:cc:ba:c2:75:d5:9d:db:1e:34:
69:b1:db:e6:86:9c:52:fc:9b:c2:d9:d6:86:f9:05:
a7:a4:89:ec:6a:62:b3:1c:8f:23:5a:fe:6e:39:9f:
51:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:DA:7D:0E:79:72:11:0A:CB:3B:8C:25:F9:45:86:F9:3C:89:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B01B5C0DE1311EFACB99142762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
40:4e:f9:f2:db:fa:39:7c:b9:ee:05:f8:10:4e:1f:0d:b1:61:
4d:92:b9:4e:ca:3c:cb:e3:6d:2c:d4:a8:21:5d:22:fa:a2:cc:
00:75:e8:90:cd:7f:fb:00:3c:4d:4b:e6:99:1b:e0:a8:f6:a2:
fb:7c:41:ee:b2:77:b1:2b:ef:a3:ce:45:ab:ed:6b:f9:70:a0:
5e:37:d1:19:30:3e:d1:c9:82:ff:ea:7b:3e:43:b0:af:a0:40:
a3:8a:51:2c:79:07:85:6f:e9:70:78:8b:1a:9b:5a:43:5c:d0:
4b:c4:ab:2e:17:d4:0e:9f:75:8c:c2:79:f6:91:a7:af:dd:b0:
75:2f:7f:9a:c5:57:e3:3d:85:76:a4:4d:a6:6f:e0:39:93:2b:
30:e9:1c:a8:26:01:f3:a1:c7:56:ec:80:47:3c:5b:2f:01:9d:
50:8e:b7:c7:97:8d:85:57:5a:d3:99:47:d1:13:ea:08:bb:e9:
8c:09:5c:47:64:f8:df:fa:b0:bd:18:15:62:e6:0e:0c:c8:a8:
83:fa:9b:d8:4c:90:e6:86:26:01:8a:b1:bc:78:6f:2e:b4:a8:
c5:bf:57:d4:4f:1a:11:81:ca:25:d5:e7:d4:a4:37:41:da:4f:
cc:91:23:8b:68:a0:c0:bc:fc:2b:27:ac:b2:64:63:2a:13:da:
52:3d:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:42:42 2025 by rpki-client