Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB36EDF4D72A11EFA4C4F762762E951A.roa
File: CB36EDF4D72A11EFA4C4F762762E951A.roa (raw, json)
Hash identifier: 3S2lEONULjQ7haL7QZP2X2cLSf94mHibLIDWaIjfFrk=
Subject key identifier: 01:5E:85:FC:83:59:14:3C:89:65:7B:A8:0B:A9:EB:78:1A:A6:1F:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB36EDF4D72A11EFA4C4F762762E951A.roa
Signing time: Mon 20 Jan 2025 12:33:47 +0000
ROA not before: Mon 20 Jan 2025 12:33:43 +0000
ROA not after: Sat 01 Feb 2025 12:33:43 +0000
asID: 6079
IP address blocks: 45.205.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68735 (0x10c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 12:33:43 2025 GMT
Not After : Feb 1 12:33:43 2025 GMT
Subject: CN=678e42ab-4e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:35:17:e3:ab:05:4b:a2:f3:34:65:b6:00:
98:d5:39:4d:91:80:38:96:db:db:46:67:95:1e:b3:
ee:f5:fc:39:64:b0:41:1d:93:9b:14:82:a7:37:6b:
89:93:c1:e1:a1:ce:4a:2b:d6:a2:ab:42:af:ac:d5:
d2:ea:1b:55:a4:04:4c:b2:5e:9a:6e:15:f8:2d:b3:
2e:92:e5:4a:8a:72:6b:e8:d0:8c:70:2b:6a:56:e1:
1c:71:19:5e:f6:79:6d:0b:17:da:42:b9:bc:78:d8:
c9:db:69:b6:9d:6c:a9:a0:f8:52:20:d1:9c:9f:56:
68:3f:71:36:86:57:dc:76:28:73:f2:68:ac:67:c2:
22:de:2f:94:d1:97:e1:e2:3d:4f:d6:db:9d:ba:ed:
8d:39:38:3d:3c:58:07:c7:95:3e:5d:4f:3a:8c:85:
7e:cb:3c:31:ae:c6:15:9c:b6:c0:6d:bf:af:c2:39:
67:a5:1c:b2:1f:9e:77:6b:ef:14:d2:ef:34:b4:dc:
0c:94:07:5b:ce:86:38:50:9b:24:2a:a6:b6:cd:ee:
95:35:9f:07:26:d6:29:5a:04:86:cc:38:cf:68:87:
5f:56:37:c8:79:12:97:b5:b6:65:c3:35:bb:fc:df:
70:92:1c:1c:d6:40:b3:df:dd:d1:c3:fd:51:8f:0c:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:85:FC:83:59:14:3C:89:65:7B:A8:0B:A9:EB:78:1A:A6:1F:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB36EDF4D72A11EFA4C4F762762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.110.0/23
Signature Algorithm: sha256WithRSAEncryption
11:93:41:d0:e2:14:c5:d7:97:e3:a3:f0:dd:6d:5d:03:42:f4:
e6:2f:2d:1b:08:ff:1f:b1:ce:3a:10:73:fc:29:55:13:f2:48:
d4:53:89:f4:ca:37:ac:32:86:dc:05:84:7a:3d:6c:5f:22:88:
42:43:a5:b7:a4:a3:bf:1b:ba:3c:0e:a4:35:2e:15:30:57:94:
ca:1b:08:8d:63:9a:bc:c1:cd:b8:aa:f0:f8:7f:ef:1e:7a:30:
3d:88:65:19:7d:4c:ec:fb:19:30:64:32:33:b8:b9:88:f3:c7:
9e:a0:06:0a:35:e1:32:0f:b3:95:3e:f0:68:08:e2:e6:de:f6:
54:7c:a8:6e:32:22:41:28:4c:9f:d5:dc:74:8e:2f:64:c6:04:
3b:ac:dd:16:9c:67:0a:14:72:4d:cd:f8:28:18:19:ff:0d:85:
f5:08:c7:c0:fe:35:b5:fa:e1:b3:99:6a:74:b8:e8:db:44:77:
b0:c7:9c:a1:8c:6f:fd:c2:86:00:08:d1:2e:4e:cd:b9:af:85:
6a:90:49:cc:fe:e3:26:2f:a5:43:63:a1:ab:c1:9d:8b:56:94:
8d:e4:fd:75:86:dd:79:a9:34:8a:93:b5:42:ef:50:1f:06:ba:
ce:ff:e2:8d:fc:ca:2d:b1:58:1b:70:22:98:f5:5f:c5:cc:90:
93:0a:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:22 2025 by rpki-client