Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A121BF8EDC8511EFAE1F2F42762E951A.roa
File: A121BF8EDC8511EFAE1F2F42762E951A.roa (raw, json)
Hash identifier: /2IYAKmSMjkIEMTXpNBU+ibJuFujC4nq2DJTmR5kBfc=
Subject key identifier: 03:47:F6:BE:80:AD:11:F4:4F:60:02:D0:ED:39:A0:AB:73:14:89:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011497
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A121BF8EDC8511EFAE1F2F42762E951A.roa
Signing time: Mon 27 Jan 2025 08:06:36 +0000
ROA not before: Mon 27 Jan 2025 08:06:33 +0000
ROA not after: Tue 04 Mar 2025 08:06:33 +0000
asID: 138995
IP address blocks: 45.192.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70807 (0x11497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:06:33 2025 GMT
Not After : Mar 4 08:06:33 2025 GMT
Subject: CN=67973e8c-19ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:d2:2d:32:b6:7d:2d:7e:ec:b7:7b:0f:06:
8c:67:c5:24:4f:87:d6:fd:d4:82:04:18:70:7b:00:
c9:3d:b0:ea:61:30:42:3b:04:a4:e8:57:a4:05:e6:
4a:09:41:8d:3c:2a:2e:9d:99:3a:98:e4:69:f8:e8:
91:c8:0c:a7:47:be:77:10:48:32:4c:88:4d:e1:f6:
e3:07:e0:27:7f:98:f7:6e:01:de:a3:34:ae:03:58:
91:d2:fc:5e:09:7d:ad:47:fa:0d:5b:9c:40:d3:c0:
cf:35:08:79:ae:c0:cf:60:91:ec:97:13:76:df:59:
da:e0:d5:8d:54:fc:30:b7:01:81:b4:b1:2e:d9:bb:
d9:e1:8d:1c:f2:87:5a:b6:fd:0a:e5:12:77:37:16:
fe:fc:2a:03:66:97:22:94:3c:1c:16:bb:6f:9a:9b:
da:2e:3e:be:98:f9:90:14:a3:f8:43:63:34:87:a7:
77:c0:ca:1f:d4:33:c0:f1:6b:90:3d:d7:53:8c:64:
7f:1f:ef:fe:89:b8:1a:6c:39:b5:5f:67:79:da:cc:
27:60:ec:b8:76:e1:2a:a0:60:04:4a:27:62:a2:90:
f7:f4:7a:0b:bb:0f:2c:84:21:01:4e:b3:b4:99:58:
32:a5:9e:e0:bf:49:aa:88:83:7c:ab:b7:e8:36:0a:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:47:F6:BE:80:AD:11:F4:4F:60:02:D0:ED:39:A0:AB:73:14:89:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A121BF8EDC8511EFAE1F2F42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.219.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7f:75:08:39:11:f1:1d:cb:63:fc:83:41:e4:89:47:0b:a4:
59:d5:fe:d6:94:8f:0b:5e:53:05:c3:ad:f9:1e:6c:dc:39:81:
f8:1e:3a:7b:97:af:dd:c2:8a:2e:91:4b:15:4b:81:a5:c4:a7:
c9:bc:2b:84:02:e3:4c:ae:cf:ec:13:72:7b:2f:0d:a7:82:f7:
23:9a:07:da:e0:cc:81:55:53:01:4e:12:f3:85:5d:89:cf:08:
dc:7b:5c:21:25:2a:0d:c2:58:f7:03:0c:51:d2:79:26:50:30:
9f:c2:4f:24:7c:7c:e2:ce:9e:99:e8:4e:dc:ed:4d:6d:31:ad:
9b:d1:10:0c:cf:2f:e9:56:d7:99:3c:8f:f7:cd:df:ff:e9:42:
b3:ec:93:c8:e3:4f:74:88:a1:38:4a:9c:20:99:ba:1a:59:74:
de:5c:f3:bc:e5:f4:f4:19:a3:73:48:6f:77:5c:d8:a6:f8:52:
0c:f6:32:84:25:d0:ee:c6:47:09:4b:50:37:92:aa:d3:67:a1:
f5:d6:3a:34:50:72:ef:31:75:a9:e5:3f:22:d8:5d:31:e2:76:
2d:40:3f:65:27:e0:97:c8:a6:b0:a7:67:45:63:b6:87:ff:5e:
1e:be:f0:66:07:33:22:00:d5:0b:09:43:0d:00:bf:67:b3:a7:
1d:3d:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:18:30 2025 by rpki-client