Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAC3E6B0D72611EFBFD55348762E951A.roa
File: BAC3E6B0D72611EFBFD55348762E951A.roa (raw, json)
Hash identifier: XoZdEyNVwI7NDx18P//1ajCBE2xg+szyKAJP1NnuVoA=
Subject key identifier: CB:EF:E7:1A:64:8E:A9:9C:02:18:0F:EB:DA:F7:70:08:CB:69:FD:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAC3E6B0D72611EFBFD55348762E951A.roa
Signing time: Mon 20 Jan 2025 12:04:42 +0000
ROA not before: Mon 20 Jan 2025 12:04:38 +0000
ROA not after: Sat 01 Feb 2025 12:04:38 +0000
asID: 6079
IP address blocks: 45.198.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68707 (0x10c63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 12:04:38 2025 GMT
Not After : Feb 1 12:04:38 2025 GMT
Subject: CN=678e3bd9-076b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:80:53:5b:06:04:26:07:a3:bb:25:9f:19:
89:c1:2c:21:ef:1c:b9:f1:69:10:fa:63:60:f4:9b:
ee:f5:45:e0:20:79:d6:d7:ed:5a:50:96:8a:c5:52:
5d:b5:d8:5b:88:a4:f1:71:bd:d2:45:76:03:b3:a4:
0f:e8:d0:a3:35:3f:76:60:37:d4:7b:e1:62:96:29:
c4:79:68:5e:c3:13:ec:19:2c:15:f6:76:33:52:70:
2b:93:e8:e1:62:f8:2d:5a:99:83:5e:ef:54:e8:6c:
53:f0:10:fc:4e:d3:14:27:47:bf:79:18:e6:f7:b0:
c1:b0:de:0d:59:1f:1a:9b:b1:13:4b:2b:88:a8:5e:
a7:35:53:87:82:5a:64:96:68:3d:cb:60:7e:ca:af:
4c:d2:dd:cf:44:58:c8:3d:75:7d:57:50:0f:89:04:
2b:27:7c:93:f4:69:ba:4f:ab:8b:53:78:7c:fc:43:
3d:39:15:13:8e:48:80:1d:82:f8:4a:31:c4:2e:6b:
6b:b7:e4:55:41:cd:62:fb:7e:c5:96:c1:fb:cd:83:
5b:8c:7c:19:a0:1e:48:3c:67:2e:27:90:b1:fa:1c:
c7:15:6c:5a:dc:87:84:6b:fa:bf:72:de:74:b7:28:
24:40:60:0e:3b:89:61:05:bb:79:15:42:61:3d:af:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EF:E7:1A:64:8E:A9:9C:02:18:0F:EB:DA:F7:70:08:CB:69:FD:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAC3E6B0D72611EFBFD55348762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9f:a7:0c:7e:2a:73:48:65:ce:09:e6:ae:f2:00:92:58:c1:
62:cc:85:b1:93:c0:4f:8b:dc:ae:e0:ad:bf:3e:d6:cb:62:08:
7b:36:ca:2a:b8:cf:8f:f5:2c:5e:a9:41:15:9b:95:d7:0f:df:
36:b4:c6:a0:e3:aa:c0:b4:13:52:c9:a7:54:d9:ec:ae:86:7f:
95:26:17:49:91:bc:7a:ef:61:ee:90:83:4c:b3:17:8f:b2:8e:
0c:82:ff:dc:94:a7:09:cc:01:71:57:31:8a:0f:c8:2c:10:df:
2d:90:d0:4d:39:3b:f8:d1:18:cb:fa:b9:95:85:c9:58:ef:cc:
6a:ea:50:a7:a0:e1:65:90:85:f6:37:12:3c:8f:1a:aa:ec:3a:
73:d1:88:c5:0f:4a:59:15:75:c2:3c:be:d5:b9:5b:f8:1a:40:
3d:ca:04:bb:82:87:a9:a7:5e:aa:f4:87:c4:fb:11:cb:c8:e5:
4c:e5:5b:45:57:2d:a3:18:14:a0:0e:43:d7:1c:22:98:1d:5b:
5f:a2:5f:9a:be:3a:a7:cc:09:71:6c:bc:ce:b3:09:99:f4:e5:
b9:93:6c:05:6d:a0:a1:80:f2:e5:34:ab:8e:3e:cd:31:bf:d5:
2d:88:8b:ea:d7:e5:22:ce:48:f9:86:ae:5e:4c:bd:89:47:7c:
fb:30:67:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:35:31 2025 by rpki-client