Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0D23890DAFF11EF9E84457C762E951A.roa
File: C0D23890DAFF11EF9E84457C762E951A.roa (raw, json)
Hash identifier: nk9AEiVkJjG1t2SCtfCuEZiYahQ8V1TQ746IypSvjlE=
Subject key identifier: A5:1A:CA:54:CB:9C:2D:D0:4B:C8:81:CC:60:5E:66:8F:0C:76:33:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0D23890DAFF11EF9E84457C762E951A.roa
Signing time: Sat 25 Jan 2025 09:35:46 +0000
ROA not before: Sat 25 Jan 2025 09:35:42 +0000
ROA not after: Sun 23 Feb 2025 09:35:42 +0000
asID: 202656
IP address blocks: 45.192.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70077 (0x111bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:35:42 2025 GMT
Not After : Feb 23 09:35:42 2025 GMT
Subject: CN=6794b072-a046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:e5:de:a1:be:b3:25:5a:ad:bb:db:a8:10:
eb:b6:27:50:e3:56:16:53:f9:1f:11:d3:49:fc:c2:
4b:44:2e:4a:b4:20:59:e9:b0:56:ed:1f:3a:d6:15:
b1:b2:20:c0:3b:06:ff:d8:b1:92:2a:26:45:83:b7:
4e:87:d3:1e:55:24:d5:ca:2a:8a:ba:0d:9d:ff:ed:
55:b5:45:03:c4:6e:8e:c2:56:5d:3d:1d:bf:fe:97:
6a:b5:d8:74:cf:31:31:de:69:3a:45:80:56:20:09:
2d:d6:2b:95:ec:84:1a:ed:04:96:ed:4a:82:6f:12:
fd:c0:d3:5e:f2:4f:55:4c:eb:39:ff:a9:3f:85:99:
57:f4:dc:71:d4:54:14:dd:b1:a7:c7:9c:8f:98:b2:
36:5e:6f:db:47:65:1c:36:d3:e5:a0:ae:d0:6b:32:
df:c8:69:31:4a:c5:50:2b:00:39:10:76:60:14:8c:
f4:a2:42:e5:aa:78:76:09:0d:00:b7:7c:73:3e:56:
03:43:f4:b9:da:4f:c5:2f:83:ca:bd:9d:58:b6:16:
df:5b:0d:82:69:9a:df:75:9e:3e:05:2d:08:0f:ec:
78:aa:cf:de:af:b9:c5:50:de:94:00:3f:a7:de:70:
fb:01:e0:6c:5b:b7:09:29:40:95:03:90:2f:1a:c6:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1A:CA:54:CB:9C:2D:D0:4B:C8:81:CC:60:5E:66:8F:0C:76:33:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0D23890DAFF11EF9E84457C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.57.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2c:ac:95:c9:1f:08:73:e4:ff:22:d1:97:2b:03:30:98:58:
56:db:d2:d1:ee:7f:7a:41:24:5e:a6:3f:97:83:9a:03:d2:0b:
69:36:00:96:3e:8e:59:04:1d:d7:a8:d9:cf:b3:b1:1e:52:d3:
f2:3a:6d:56:25:92:0c:fa:b3:09:8d:7d:33:64:72:ab:66:79:
59:fd:f7:79:d2:c1:b9:a5:2b:cf:76:5e:9c:3d:d7:c5:7f:d6:
37:b7:2d:e8:6c:16:c1:49:9c:78:83:63:56:d1:f2:12:53:87:
be:12:8d:62:9b:93:59:2a:d6:f5:dc:a4:d4:b1:02:b9:49:a8:
0f:20:18:7f:05:ee:84:c7:3a:7e:f6:7e:61:ae:6a:f0:7d:9a:
c4:3c:20:f0:e7:83:79:1e:9b:f7:37:aa:08:07:f2:8c:f0:ee:
ec:3c:d9:10:09:d6:d6:a0:df:cc:5f:32:92:ae:ee:eb:f8:5e:
12:31:6f:5b:3e:ea:25:bc:a5:88:cf:d9:54:28:76:1b:6b:b4:
2d:97:ee:a0:c8:bd:04:8c:a7:f6:02:93:a6:b5:be:c1:0b:65:
91:70:fb:14:1a:9f:ff:7c:bd:4a:8c:3c:72:f7:4a:13:bf:20:
2e:56:b3:9d:e6:72:7c:e5:39:78:14:fa:69:1e:4c:4e:52:d7:
6c:c0:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:55:15 2025 by rpki-client