Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C05ADF36D7C911EF994E3579762E951A.roa
File: C05ADF36D7C911EF994E3579762E951A.roa (raw, json)
Hash identifier: uy63XwOiic2dykhT4RYz22AES2PZupE17+cSB9XwG4g=
Subject key identifier: 1B:3C:CF:35:33:B1:A7:16:63:E5:A5:58:56:3E:AF:65:35:D0:83:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C05ADF36D7C911EF994E3579762E951A.roa
Signing time: Tue 21 Jan 2025 07:31:39 +0000
ROA not before: Tue 21 Jan 2025 07:31:35 +0000
ROA not after: Tue 25 Feb 2025 07:31:35 +0000
asID: 203020
IP address blocks: 45.198.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68808 (0x10cc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:31:35 2025 GMT
Not After : Feb 25 07:31:35 2025 GMT
Subject: CN=678f4d5b-1ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:59:51:59:d4:d5:31:33:f3:7a:a7:8f:b7:
00:f8:e4:f0:70:e9:ed:29:56:4b:3c:e6:72:87:1c:
ab:26:9b:08:59:27:81:09:bb:06:85:9a:32:a2:f3:
c9:af:f4:b5:34:3a:fc:bb:33:f1:a6:2e:02:33:a5:
e4:7e:f0:5e:a9:1d:0c:72:95:fe:c5:06:0a:ca:c3:
f6:a0:93:ed:2e:19:72:42:44:4d:87:e9:20:71:b0:
f7:02:94:fa:4c:a1:a9:31:e0:48:f8:e2:93:42:89:
3e:29:b9:af:c5:5a:0d:fa:4f:dc:b9:e9:26:b4:ad:
2b:ea:b0:8a:e4:90:7d:0c:55:2d:5b:3f:36:92:08:
22:cf:52:6c:d6:7c:4f:2e:53:60:55:10:f1:d9:6c:
77:10:2a:39:c3:76:d4:dc:a1:47:51:6b:db:97:29:
94:db:14:93:3a:f9:c2:89:9c:5b:99:b4:2c:2a:a0:
84:6b:5d:8d:4c:ba:a8:7a:78:37:bf:dc:4f:5e:94:
0d:d0:42:34:77:27:84:93:42:b4:57:8b:c3:4f:72:
de:c4:a2:52:67:9c:b9:a5:54:40:a2:62:23:6a:5b:
0c:c3:f9:69:ef:83:62:52:32:e9:16:e3:a9:9d:e7:
2e:bd:fa:22:03:c3:16:d0:64:06:3d:a5:1f:58:bd:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:CF:35:33:B1:A7:16:63:E5:A5:58:56:3E:AF:65:35:D0:83:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C05ADF36D7C911EF994E3579762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.196.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:90:6a:b1:7f:72:8d:aa:75:44:5f:e8:c4:7b:1e:d2:dc:61:
47:df:58:3e:6a:18:ec:34:95:ac:88:e4:28:a5:59:ad:07:47:
e7:74:75:6b:e2:ac:18:7a:59:99:f4:01:bc:f9:7b:28:66:14:
f6:3d:5a:13:d7:a3:62:a9:a2:cd:32:de:88:f7:25:b0:31:1d:
3c:66:59:e3:37:7c:d4:3a:fc:7c:46:8c:48:bb:61:d3:1e:3e:
00:fd:04:0e:f0:3a:40:4a:e7:85:ca:ca:69:74:02:bf:63:9b:
0c:a5:e3:64:18:aa:11:a7:60:bf:c0:66:6a:6f:8a:bc:7c:d1:
3b:fe:c5:27:8c:39:27:3d:30:1f:81:b7:a2:79:be:9f:07:2c:
ba:32:aa:aa:dc:9a:6a:21:6f:e9:a5:05:a4:7e:4c:31:63:5e:
d2:43:ac:30:28:b1:8b:20:af:db:ad:af:2c:55:2b:5e:67:40:
3c:af:67:a8:cc:10:a3:81:a8:0c:3c:0c:f0:26:73:d2:62:eb:
99:18:47:0f:bd:a6:15:96:9c:91:05:16:c5:a3:f7:f3:2c:11:
75:50:de:11:9f:1c:3e:c3:01:4c:16:71:af:04:7b:ed:89:8e:
67:3a:9d:21:82:f5:4f:de:7e:b1:a0:65:c9:39:91:69:e4:0f:
3e:ff:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:55:22 2025 by rpki-client