Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A09247FED72711EFB248534D762E951A.roa
File: A09247FED72711EFB248534D762E951A.roa (raw, json)
Hash identifier: VqRo35p6Vgsf+cbIZY2TxWFxbmipCxRQBLEIynMsUak=
Subject key identifier: 48:50:A9:FF:A7:10:57:91:D1:E8:72:C4:C7:84:F2:D1:13:2E:F5:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A09247FED72711EFB248534D762E951A.roa
Signing time: Mon 20 Jan 2025 12:11:07 +0000
ROA not before: Mon 20 Jan 2025 12:11:03 +0000
ROA not after: Sat 01 Feb 2025 12:11:03 +0000
asID: 6079
IP address blocks: 45.198.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68713 (0x10c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 12:11:03 2025 GMT
Not After : Feb 1 12:11:03 2025 GMT
Subject: CN=678e3d5b-9142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:90:24:d7:ec:ac:a8:78:fd:d2:f4:4f:44:
8c:73:fd:e3:33:1c:26:ea:cc:a4:62:0a:71:a9:ec:
e8:3b:48:b6:f6:8a:62:7d:38:43:f2:5b:7f:85:b2:
6a:b4:f1:61:44:6f:d8:a2:b1:66:79:0e:0f:f6:20:
d9:16:9b:a2:21:16:d9:a2:23:59:1b:6a:c6:78:08:
d8:2d:66:b0:fc:96:a9:bf:cf:24:6b:81:7a:0a:15:
77:a3:47:02:92:2d:e9:27:0a:03:c7:42:a7:d6:c5:
47:71:30:f9:ad:20:90:70:86:69:cf:76:8f:ee:53:
03:02:f2:c8:13:7e:34:51:9e:b1:ac:78:3e:d1:59:
1d:84:22:e0:52:2e:e3:a8:6a:5b:a9:95:c2:d9:dd:
e8:db:f7:51:b4:df:10:37:ba:cf:d5:ef:1c:ed:5a:
b9:a9:7e:eb:fe:df:cb:91:fd:b1:40:cb:9c:5b:03:
61:ba:d8:a5:be:39:be:d9:49:9c:f9:65:24:c9:5b:
97:5e:ac:49:e4:85:27:50:25:1a:91:e0:65:68:9e:
2c:ef:f7:a8:e0:17:5a:2b:35:f8:54:f0:69:74:ce:
98:48:53:a2:00:fd:fb:f5:9d:4e:d3:a8:68:7e:60:
9b:7f:92:25:47:eb:09:30:34:c5:5e:72:74:17:ba:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:50:A9:FF:A7:10:57:91:D1:E8:72:C4:C7:84:F2:D1:13:2E:F5:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A09247FED72711EFB248534D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:36:5f:0b:a3:5a:7a:0f:84:b0:a1:6b:49:f7:7d:00:5e:c4:
6c:1d:73:e7:6e:5e:1b:08:bc:25:cb:54:c5:93:ea:e5:d3:2d:
72:44:2d:03:82:9f:fc:a9:a8:a5:fb:5a:98:71:9d:ca:b3:f5:
f1:35:9f:e3:81:96:02:8c:fa:0c:ce:45:52:ff:70:b1:ac:44:
8c:5a:19:f8:f6:97:64:0f:3a:82:b2:58:d6:a6:cf:ce:43:f1:
e3:73:61:9f:bb:9a:1f:71:29:9b:87:cc:29:10:12:59:29:d8:
8a:5b:8e:85:dc:b5:71:d7:5e:a3:89:cf:75:ea:70:bb:6d:00:
99:79:f6:de:ef:0d:1f:4d:17:21:aa:a8:8e:d6:24:ed:c5:1d:
fa:f7:41:a9:ab:93:ba:58:17:6a:35:66:10:e1:7f:02:b6:bc:
64:b9:5f:fa:99:f9:54:e1:ff:2c:f2:fa:4c:f2:c7:f7:fd:ff:
11:0a:c4:fa:b1:3f:22:d1:2f:62:3b:24:0a:20:61:63:33:76:
b2:3a:31:4a:5c:15:32:8c:6a:af:30:75:d2:d0:a1:ee:9b:56:
42:97:72:0f:76:63:fe:ed:81:a6:03:cd:2d:be:ee:4b:8b:ef:
cb:04:49:c6:bf:dd:f3:be:fa:b4:15:c8:e6:dd:09:cc:b9:7c:
d9:18:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:25:36 2025 by rpki-client