Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6A45458DC8311EF8A155BB5762E951A.roa
File: C6A45458DC8311EF8A155BB5762E951A.roa (raw, json)
Hash identifier: CAWFBQqY1uwBAOnwATZ9AO/RAPx6UKaUfMgICBgN7K8=
Subject key identifier: 74:81:1B:23:24:A0:10:53:79:BE:BC:94:74:67:32:01:39:9C:E1:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01148B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6A45458DC8311EF8A155BB5762E951A.roa
Signing time: Mon 27 Jan 2025 07:53:20 +0000
ROA not before: Mon 27 Jan 2025 07:53:17 +0000
ROA not after: Tue 04 Mar 2025 07:53:17 +0000
asID: 138995
IP address blocks: 45.192.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70795 (0x1148b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 07:53:17 2025 GMT
Not After : Mar 4 07:53:17 2025 GMT
Subject: CN=67973b70-d612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:9c:73:62:34:e5:ef:b6:be:7b:88:a7:e1:
b9:78:f4:8f:b9:e1:8f:f1:4a:96:c6:d5:b7:52:95:
4d:16:39:78:2f:57:24:4a:1c:95:f9:21:72:18:51:
6c:5d:ee:ac:90:56:37:43:1d:98:ea:42:1c:14:8f:
23:d3:7e:30:0f:b0:24:d9:f6:f4:7f:be:bc:fc:b5:
62:fa:4b:aa:65:48:d5:45:79:e4:f7:1e:23:6d:cd:
57:53:93:7d:af:b5:77:b8:4c:85:94:49:83:1e:24:
36:a7:54:34:2d:8c:cc:02:f7:af:0f:b1:21:18:f9:
5d:db:c5:02:bf:ce:16:2c:30:1d:54:d1:ae:57:a0:
ee:52:d0:39:88:cf:f8:fc:63:dd:4c:a6:16:bc:73:
4d:79:ca:2c:8c:94:35:43:92:ed:a8:dc:4c:69:37:
b9:10:a4:88:d5:22:42:3d:39:c0:da:bd:2c:bf:33:
2d:6a:c2:c3:bd:49:f7:d1:37:18:ae:42:61:4b:50:
73:0c:47:0d:02:31:ca:76:5f:aa:3e:7c:5b:49:1a:
e0:1f:7f:af:9e:61:bf:1b:23:0c:b2:08:ec:d8:77:
af:23:bf:9d:e2:2e:57:16:96:b6:8f:56:ff:f7:c9:
45:3d:31:1b:d8:05:9e:6d:de:76:a2:58:d2:62:87:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:81:1B:23:24:A0:10:53:79:BE:BC:94:74:67:32:01:39:9C:E1:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6A45458DC8311EF8A155BB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:11:30:4a:67:4c:59:7d:04:cd:51:a4:ab:82:de:71:8d:be:
7b:8e:6b:63:e5:4d:2e:a6:75:87:72:95:36:02:97:ac:af:6b:
fe:46:27:ed:7c:36:15:df:74:b0:3a:98:87:32:ae:1f:25:0d:
99:10:8c:50:fe:f1:a1:ab:db:46:c1:34:76:dc:76:72:75:b5:
c6:71:34:5a:ca:9e:f5:e6:cc:a6:dd:cb:34:5b:b3:69:c4:5f:
b6:74:9d:b3:7c:ba:8c:46:e5:a8:82:90:c4:95:7f:f9:77:08:
40:e2:4b:a4:f0:93:2f:b8:e6:9b:07:8f:9f:c3:45:66:3d:9b:
c7:1d:58:d4:de:e4:f5:b7:79:23:7a:da:a2:ad:30:f5:0f:ed:
3e:aa:9e:0c:ed:29:2e:0b:d5:83:58:b2:11:8e:76:ca:e5:9c:
31:58:86:9c:5b:3a:ee:88:51:c6:d5:f5:df:3b:dd:65:14:0b:
ca:47:2c:ef:b9:21:d5:70:9b:00:4d:0d:56:f6:a5:ee:7a:a2:
aa:04:21:9d:55:3b:10:07:33:ab:36:01:35:35:0e:ec:af:10:
de:89:ec:9f:2a:02:25:1d:bb:20:16:90:84:f5:de:f3:fa:49:
6e:8c:c7:60:b3:84:96:68:c3:45:38:46:76:d8:b4:4b:ec:1b:
69:60:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:18:13 2025 by rpki-client