Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7A09860DBD611EFAF1CA3A3762E951A.roa
File: C7A09860DBD611EFAF1CA3A3762E951A.roa (raw, json)
Hash identifier: 9DHEIbpKXi7uBhYtL3DLLyr/LIajOytHaGjwCuIu9+Q=
Subject key identifier: C0:7E:09:AD:B6:95:5C:B5:E5:59:32:FF:6F:BC:BB:D6:C9:ED:83:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011342
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7A09860DBD611EFAF1CA3A3762E951A.roa
Signing time: Sun 26 Jan 2025 11:14:59 +0000
ROA not before: Sun 26 Jan 2025 11:14:41 +0000
ROA not after: Tue 25 Mar 2025 11:14:41 +0000
asID: 6079
IP address blocks: 45.203.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70466 (0x11342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 11:14:41 2025 GMT
Not After : Mar 25 11:14:41 2025 GMT
Subject: CN=67961933-f5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:02:ef:ab:29:2e:cc:ef:27:ab:73:3a:71:
01:ea:05:e4:12:f2:14:85:31:4b:b5:ac:6c:f4:82:
f9:6c:8b:d0:76:c2:ad:53:f4:bf:b3:3a:5d:d7:c3:
73:26:5b:68:e6:fd:bf:89:6c:60:1e:d8:49:c1:d5:
b7:96:c7:79:d7:a7:e7:dc:b7:de:b9:d4:26:cb:7c:
e1:74:42:b2:52:9c:00:e8:80:d2:25:bf:1d:75:8d:
ee:d4:99:ee:02:3e:75:6b:61:59:5a:14:b3:41:a7:
23:76:54:1d:07:bc:0d:7c:24:6a:a5:2c:ac:29:ce:
23:e2:ea:b7:96:0b:91:43:8b:b5:5a:86:6b:bd:0c:
61:03:13:e4:b6:bb:b8:f6:7d:50:75:aa:e3:bf:03:
d5:c4:cc:5c:89:99:e8:f5:67:07:f5:cd:46:01:c2:
83:e6:2c:c7:81:6b:9a:f5:8e:0d:4c:43:fe:70:6f:
dd:10:10:d9:b6:63:03:36:f3:23:1f:cc:fc:96:29:
04:21:10:65:8a:bc:0e:3f:7a:52:e8:8b:bb:44:0c:
e7:8b:b7:6a:c8:16:9a:b2:cb:6a:26:c1:db:57:ac:
cc:c3:bc:bc:04:80:e6:79:33:ea:db:37:d5:1b:22:
39:63:30:80:22:e0:2f:8b:44:a2:ca:e7:1e:da:bd:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7E:09:AD:B6:95:5C:B5:E5:59:32:FF:6F:BC:BB:D6:C9:ED:83:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7A09860DBD611EFAF1CA3A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ec:b0:3d:00:02:72:51:a7:5e:cf:b8:81:5b:14:aa:85:6b:
9a:88:89:12:86:f0:68:94:27:1f:87:95:4e:f5:f7:c5:bd:62:
ea:c8:f9:c8:55:b6:4f:1c:bc:c1:ab:ce:69:bf:53:29:b4:5e:
01:4e:28:a0:ab:6b:dc:2f:3f:00:9b:e4:27:64:08:83:7d:93:
d2:10:e0:7a:ab:7d:ad:f5:50:9c:83:bc:38:d9:5c:26:58:97:
18:3e:1a:1d:8e:37:f4:94:b2:fe:ea:2e:f1:45:77:6a:07:2b:
b5:af:ae:68:6d:18:b8:c4:b2:12:ff:24:5c:c7:ed:05:46:76:
9a:64:15:28:7d:85:05:1e:62:3b:34:4e:fc:20:ff:73:43:03:
33:2a:3e:3f:0c:64:8c:b1:c1:24:ec:c2:0c:b4:12:a4:8c:71:
20:d1:f6:d6:60:47:01:7a:da:28:87:34:73:16:4f:76:63:c6:
5d:7f:c4:72:77:13:b0:38:21:44:cc:4f:00:a0:bf:b2:df:66:
9e:ef:4d:ce:ee:49:32:e3:b2:f2:ab:60:8d:2e:4e:1d:b7:13:
31:f8:47:ad:3e:fc:4a:f5:10:03:29:0d:22:8b:e7:04:7f:b9:
f6:99:91:58:5f:a8:25:c0:bc:88:f5:e6:7e:32:7f:8e:95:58:
0c:9d:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:36:03 2025 by rpki-client