Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A816724ED7FD11EFB22EB44A762E951A.roa
File: A816724ED7FD11EFB22EB44A762E951A.roa (raw, json)
Hash identifier: z5oFAo3VlPoMFwqJwDQuizmu0bFWUvfPWH1PV3UNl88=
Subject key identifier: 11:D7:E4:ED:72:8A:8D:9D:1F:8F:E3:CB:5D:7A:AB:46:C9:DB:06:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DE6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A816724ED7FD11EFB22EB44A762E951A.roa
Signing time: Tue 21 Jan 2025 13:43:12 +0000
ROA not before: Tue 21 Jan 2025 13:43:08 +0000
ROA not after: Sat 01 Feb 2025 13:43:08 +0000
asID: 202656
IP address blocks: 45.192.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69094 (0x10de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:43:08 2025 GMT
Not After : Feb 1 13:43:08 2025 GMT
Subject: CN=678fa470-6468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e8:80:2e:a2:d0:4c:af:00:4e:3d:75:bb:63:
b2:55:0d:8a:bc:77:c1:1a:8c:1b:ca:e7:ad:f9:8e:
1c:fc:cd:af:67:67:60:4c:23:b0:31:82:a3:3c:e8:
0b:69:10:97:91:fd:b9:c6:79:3a:18:01:24:42:e3:
c5:71:f9:31:25:f6:4a:95:a1:ec:6b:30:1d:33:08:
b0:f7:3a:fa:4e:bc:4c:13:7e:fe:3d:d8:3a:35:16:
b8:ca:33:6a:b7:f1:68:3a:ff:ec:31:9f:42:99:5d:
e8:d1:95:b9:6f:cb:1a:4f:ac:0c:f0:12:f9:b4:0b:
88:7a:c1:bb:88:61:c1:92:a4:45:0b:67:d2:e8:2b:
19:d7:da:b3:7f:fa:41:f4:3f:e2:5d:0e:f8:3a:65:
1a:7c:b0:f4:35:9e:39:6e:52:92:5c:4d:17:32:c0:
97:9f:70:f6:c5:13:9e:8f:ff:be:a6:13:d3:64:80:
2a:f3:ee:9e:c2:d2:16:62:79:d0:53:45:be:f7:00:
98:0d:f4:cd:a5:a4:ea:6f:cb:fd:b4:d4:88:84:70:
82:b4:c6:22:37:6b:f7:ff:9b:2a:05:24:83:a2:6a:
b5:89:ae:12:7e:91:c3:b6:72:b7:a7:30:ec:6b:0c:
c4:0f:77:6c:fa:1a:62:84:36:8c:47:df:18:df:1f:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D7:E4:ED:72:8A:8D:9D:1F:8F:E3:CB:5D:7A:AB:46:C9:DB:06:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A816724ED7FD11EFB22EB44A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.60.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:31:90:83:90:90:9a:45:41:80:61:0a:47:2c:41:49:ea:12:
1c:f8:03:07:6c:1f:3a:a6:19:31:fb:44:67:0e:f5:25:4d:bf:
aa:b7:a7:b6:b7:7c:6e:9c:d4:40:fb:1a:d1:f9:7a:52:11:e0:
9f:27:cb:9b:52:78:a5:2c:9f:31:d3:bf:7f:ed:df:17:c7:e3:
37:fd:b5:6e:d0:df:4a:85:5a:c3:3c:46:ff:25:e5:8d:10:ad:
69:81:83:6b:d7:24:7e:84:ff:8c:54:27:60:5b:ac:c6:da:19:
b9:94:78:d9:2b:04:16:19:2d:21:15:a5:87:cd:72:19:d5:70:
71:f2:47:6b:8f:d9:e0:12:d1:87:01:17:26:b1:e7:79:0e:ce:
1b:7e:f8:8f:1e:5e:da:7c:12:c7:b5:9b:9e:df:1c:7f:cc:08:
e9:18:cf:19:73:a5:aa:ab:6b:a2:51:17:52:fb:51:ce:4f:06:
06:1f:75:2b:f5:9d:ad:ce:4c:69:cf:8f:9e:06:aa:04:d6:1c:
40:83:8e:72:a3:d9:a1:0d:43:08:75:05:45:3a:a3:7d:14:16:
55:13:ba:da:71:59:de:b4:c4:d9:4b:7f:99:c5:5f:3d:01:cf:
7d:8a:82:af:cb:c5:ee:dc:5e:c8:3a:80:4c:36:b3:60:c8:8b:
a9:24:e2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:26:51 2025 by rpki-client