Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB49A5B0DB1911EFA70846A9762E951A.roa
File: BB49A5B0DB1911EFA70846A9762E951A.roa (raw, json)
Hash identifier: cb7QLhwHPXU7wnqHtDd0Pw5gHJjd29lzns+PG7prnkg=
Subject key identifier: 41:6F:FA:BA:65:E2:3E:A8:6C:47:4B:A3:B9:39:3A:46:C4:39:6E:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01124F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB49A5B0DB1911EFA70846A9762E951A.roa
Signing time: Sat 25 Jan 2025 12:41:43 +0000
ROA not before: Sat 25 Jan 2025 12:41:40 +0000
ROA not after: Sat 01 Feb 2025 12:41:40 +0000
asID: 137547
IP address blocks: 45.204.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70223 (0x1124f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:41:40 2025 GMT
Not After : Feb 1 12:41:40 2025 GMT
Subject: CN=6794dc07-5b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:c6:b4:59:9b:65:8e:b0:fe:d6:e8:38:c5:
3a:b7:cf:13:1d:ef:b1:6d:8e:db:0a:18:5c:48:53:
34:69:af:ad:d2:3e:56:3d:ce:25:11:9d:3c:63:82:
9d:28:ec:50:5e:53:12:2c:20:2a:fd:fa:13:ff:c7:
60:b2:4e:8e:73:90:84:53:a4:80:07:4b:a2:62:25:
78:c7:87:33:b2:0a:3d:80:71:e3:0a:33:d9:ca:65:
4a:e4:4b:1b:e3:11:d5:6e:1f:9a:51:64:c8:28:10:
77:fe:98:66:19:88:96:7c:92:0c:47:b2:5a:3f:13:
c2:84:a1:2c:61:cc:1d:1b:4e:20:e9:dd:96:6d:e8:
b7:97:7f:6f:20:a4:27:fb:fa:d4:51:10:7f:3f:1f:
16:1a:36:c9:d5:e3:5a:08:73:4b:92:db:15:ba:fe:
c5:89:5d:4b:2d:71:a5:11:77:9b:03:d8:a8:84:e6:
d1:2c:3b:d8:e1:21:8d:cc:4e:13:cf:42:90:13:99:
59:b2:85:0f:53:ad:84:b5:f1:49:dd:ce:d5:9b:a7:
4a:e5:2e:68:42:dc:d3:b1:2c:e7:b5:1a:4e:3e:65:
89:27:d2:80:ec:9a:bc:9b:e2:b3:e1:68:8b:af:d3:
4b:3c:d0:e2:1a:10:43:e4:b5:d3:7c:b8:6b:fa:9a:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:FA:BA:65:E2:3E:A8:6C:47:4B:A3:B9:39:3A:46:C4:39:6E:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB49A5B0DB1911EFA70846A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:dc:d1:40:dd:bf:e1:e9:1f:11:46:05:6a:6e:4f:58:96:e3:
c4:25:14:c9:81:d6:bb:f1:68:54:50:a7:a8:61:a6:17:4f:6f:
c9:fa:b4:db:fa:eb:0f:97:97:08:51:23:61:21:84:23:63:05:
7d:62:d9:99:52:bc:17:00:cd:5b:2e:fd:19:55:17:aa:4f:aa:
b9:06:c2:7d:38:2e:f0:95:b4:ba:b3:ec:45:e4:5a:d3:9f:3d:
3d:8f:d3:d2:1d:4f:bd:83:3f:d6:ff:72:c7:7a:2c:56:b1:14:
d0:72:b0:9b:c4:d0:72:94:fa:a1:e8:e5:a8:f4:6a:4e:2c:2d:
4c:3e:eb:a6:ea:2c:9b:82:32:4e:6a:b3:5d:8f:73:61:59:d1:
d8:5b:2a:6c:3f:24:3a:66:8b:6e:ad:49:35:04:c4:dc:60:df:
a0:6d:1e:5c:96:df:ff:63:70:15:d7:b3:07:ef:05:0f:89:bb:
c7:7d:45:81:42:28:2f:8b:23:80:f2:7b:2d:51:e2:a0:6a:f1:
4e:2b:19:66:73:79:85:6c:30:8e:57:b8:35:aa:e9:cc:0a:b3:
a5:74:a0:a3:1e:df:14:b1:9c:e1:d8:c2:d4:21:9d:48:71:00:
77:b6:9b:61:ff:d4:b4:bd:99:94:f7:c1:2a:0b:f3:db:83:71:
d6:d0:01:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:21:05 2025 by rpki-client