Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D68D484DB0111EFB61A6389762E951A.roa
File: 9D68D484DB0111EFB61A6389762E951A.roa (raw, json)
Hash identifier: ZQmCH8JgvVUGaDmK0+ADegmxK/o5+jwaHh5La5dSqZ0=
Subject key identifier: 31:19:EE:5E:6D:F2:C2:C1:1A:C4:5A:40:D1:51:5F:E0:57:EE:28:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D68D484DB0111EFB61A6389762E951A.roa
Signing time: Sat 25 Jan 2025 09:49:05 +0000
ROA not before: Sat 25 Jan 2025 09:49:02 +0000
ROA not after: Sun 23 Feb 2025 09:49:02 +0000
asID: 202656
IP address blocks: 45.192.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70089 (0x111c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:49:02 2025 GMT
Not After : Feb 23 09:49:02 2025 GMT
Subject: CN=6794b391-a64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:14:b4:c9:13:0c:a0:d7:3c:32:9a:05:a3:
3f:60:7d:a6:fe:62:f0:81:23:35:5c:5b:69:4d:aa:
51:fb:7a:a1:cd:26:63:d4:2b:68:68:89:fd:57:29:
b1:1b:7e:42:58:1a:dd:b7:0a:a6:a8:89:39:61:29:
57:3c:cc:f0:69:10:ae:da:a9:a2:50:2b:cf:89:3f:
3b:69:a7:2c:cf:fd:55:c5:5b:29:dd:39:a9:1d:2e:
ce:7e:ca:14:bb:65:11:68:a7:a6:e1:79:6a:b0:e2:
e3:b4:94:9c:55:82:30:be:be:a3:db:c6:fe:a7:45:
89:19:09:ec:8d:7f:a3:e9:d0:94:62:d9:9c:4c:7b:
b3:21:9e:85:5a:85:63:6a:84:1a:8e:d6:36:b9:24:
a8:18:e7:3b:c7:f2:33:d3:a5:df:af:f1:30:a1:5b:
b3:73:bc:ed:ad:79:40:bb:2b:a4:ae:d5:76:d4:f1:
30:73:b6:df:18:65:1a:58:eb:5c:9d:96:95:cf:18:
84:5c:62:5f:f8:0a:69:2e:91:d0:87:b0:f1:3a:6e:
20:59:28:f2:c0:e6:61:e0:e5:58:e0:a9:10:44:29:
c3:25:bc:b5:9f:bb:6a:ee:7e:17:1a:c1:7e:14:1f:
b8:4a:4d:59:3f:dd:5b:77:25:c1:1b:c0:f6:60:cb:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:19:EE:5E:6D:F2:C2:C1:1A:C4:5A:40:D1:51:5F:E0:57:EE:28:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D68D484DB0111EFB61A6389762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.63.0/24
Signature Algorithm: sha256WithRSAEncryption
77:03:19:a5:57:f1:38:37:4c:99:c2:b7:ba:b1:b2:4e:db:7d:
83:8f:80:c3:a9:64:a4:f4:83:22:1d:37:d3:09:7e:77:32:a3:
aa:6a:55:4b:5c:a8:35:d8:27:06:8d:58:f2:d7:28:ab:18:7b:
97:65:76:2b:ec:12:3f:08:5b:b4:b4:0a:5f:0d:f6:f8:93:6a:
52:b9:06:a2:0e:d0:c9:e5:9a:aa:cc:98:05:22:36:7f:02:9b:
bb:1b:f2:63:47:c6:c3:79:89:8f:97:97:2b:63:8a:f7:8e:af:
7b:2a:b6:01:5a:bd:b6:db:eb:a1:f8:6a:9a:5d:ba:da:8e:0c:
cc:fd:c6:29:eb:c6:ea:50:33:34:66:c3:71:a9:7e:15:89:ba:
49:3f:64:4e:b4:00:bc:76:e7:9d:64:a1:35:d4:0e:43:6f:46:
d0:03:99:0b:18:77:27:7a:47:f4:38:e6:72:d1:45:c7:b3:dd:
68:75:0a:d0:ca:f9:cf:60:49:17:59:40:9a:b2:14:9a:5c:40:
e3:76:99:e2:b7:5f:9b:59:df:09:9c:62:5f:ab:62:54:76:89:
7b:42:dd:9b:ea:67:b1:35:70:33:d3:ff:e5:b1:76:a7:e2:b2:
1e:7c:b7:4e:be:f7:38:7b:6b:35:b8:0e:92:fd:58:09:b1:e3:
a6:6f:ea:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:50 2025 by rpki-client