Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACDB3E76DB0511EFAEA158A4762E951A.roa
File: ACDB3E76DB0511EFAEA158A4762E951A.roa (raw, json)
Hash identifier: BN8ktGKLjPXjnk/nRjFPr+LW4okVDQ6A6gxrZr2Xskc=
Subject key identifier: B1:AE:C9:5E:D4:12:B2:96:D8:E4:30:7B:E4:25:76:6C:4D:99:C7:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACDB3E76DB0511EFAEA158A4762E951A.roa
Signing time: Sat 25 Jan 2025 10:18:09 +0000
ROA not before: Sat 25 Jan 2025 10:18:06 +0000
ROA not after: Sun 23 Feb 2025 10:18:06 +0000
asID: 62240
IP address blocks: 45.192.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70111 (0x111df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:18:06 2025 GMT
Not After : Feb 23 10:18:06 2025 GMT
Subject: CN=6794ba61-00de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:85:fa:7f:bf:6c:6a:06:a1:e9:2d:d1:f4:
49:6a:4a:01:03:a1:d5:d0:dd:77:fa:4b:9b:70:a5:
e6:46:09:96:42:69:c2:43:12:1d:73:fd:36:68:87:
b0:d5:91:a4:b6:11:6f:03:9a:23:9a:68:a9:22:27:
2d:72:02:ba:47:87:65:b9:d3:b1:18:55:65:13:28:
9a:c9:d0:9e:2c:30:10:b0:0d:75:76:b2:83:76:a1:
ea:53:bb:0f:8a:5c:b3:ab:0e:81:dc:fd:4b:56:6b:
e0:0a:70:fe:a5:91:ff:3e:f6:16:86:8e:28:f8:81:
79:d3:d9:06:73:4d:d4:81:2b:c4:33:80:ef:65:24:
85:a4:e2:65:2b:19:7c:06:f4:ce:da:3d:96:74:8b:
7e:5f:fa:d5:9b:9e:e3:c4:ff:aa:c1:92:01:bb:86:
c2:73:76:8b:91:93:03:7d:da:03:9a:e2:33:16:b7:
9f:56:44:4f:fc:01:64:d0:48:b5:27:0d:85:bd:fa:
f6:1f:06:18:22:a9:f1:72:93:c5:62:65:f5:6d:bf:
d3:da:3e:b2:ed:f8:74:4f:35:c2:11:40:21:77:64:
12:05:ba:49:44:e4:8d:71:48:1c:7e:52:fc:0f:ea:
3c:7f:91:14:60:ec:be:4b:bc:cb:4c:39:d2:1b:39:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AE:C9:5E:D4:12:B2:96:D8:E4:30:7B:E4:25:76:6C:4D:99:C7:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACDB3E76DB0511EFAEA158A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.36.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b1:61:67:cf:78:9d:cf:56:0c:88:9e:9d:e5:0a:1d:e8:25:
13:f4:d3:45:a7:b3:20:cd:d0:32:e8:98:d6:8d:bb:60:ef:cd:
d6:39:e9:3f:c0:8b:27:d2:33:f8:c5:47:41:83:3f:86:95:f6:
dc:04:0e:7b:c1:3e:81:7b:7f:31:ff:8d:cd:48:54:04:6f:e5:
9a:50:a7:3f:db:0c:ac:f3:c5:08:e0:76:bd:3f:de:f0:16:83:
e0:38:5c:85:af:27:77:1c:74:43:62:87:f5:2b:a1:08:47:1d:
2f:f4:33:da:11:f4:b5:27:1a:3e:bd:37:c1:79:63:df:a3:73:
74:c2:88:6f:5d:62:e5:7f:ea:11:58:e2:50:92:28:25:73:4b:
31:2d:7d:2c:e8:69:c6:8c:5b:38:6e:0c:8f:7e:a2:a0:7b:e4:
ce:71:d4:44:d6:17:a4:0a:a7:82:9b:63:e7:2a:f4:ff:30:3c:
41:ce:44:bd:93:95:9a:df:e8:e5:9c:44:66:20:bb:2c:c4:a9:
16:dc:a8:df:35:1d:37:69:8c:c9:ba:dc:40:2e:78:09:e0:67:
25:9c:71:aa:cb:f8:6d:bf:ea:2c:7f:a3:c0:1f:d9:50:5e:30:
1a:98:e8:1f:b5:40:96:cc:96:73:28:e3:8c:6a:b3:2b:63:a9:
f7:9a:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:27 2025 by rpki-client