Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC1B0374DB1511EFBA3FE98F762E951A.roa
File: CC1B0374DB1511EFBA3FE98F762E951A.roa (raw, json)
Hash identifier: q9nimRPohHam9jFVa6KAVjTBQVLww4bw7eY8FhSTwnk=
Subject key identifier: BA:B4:E4:F0:82:0D:63:89:BA:BA:9E:0B:EB:2C:9B:05:0B:C2:9A:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011237
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC1B0374DB1511EFBA3FE98F762E951A.roa
Signing time: Sat 25 Jan 2025 12:13:34 +0000
ROA not before: Sat 25 Jan 2025 12:13:30 +0000
ROA not after: Thu 06 Feb 2025 12:13:30 +0000
asID: 274149
IP address blocks: 45.192.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70199 (0x11237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:13:30 2025 GMT
Not After : Feb 6 12:13:30 2025 GMT
Subject: CN=6794d56e-01fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:01:78:1a:50:01:2b:dc:5e:a4:88:bb:cb:
c3:8b:6f:e7:4a:b2:ab:45:a7:96:c3:70:3e:85:69:
b4:6d:79:22:e0:6c:5b:4c:c2:94:08:9c:d6:27:0b:
79:b6:98:f4:31:60:34:1e:b6:6a:52:68:ec:ad:a1:
34:06:b3:ad:89:9b:04:04:53:01:2f:b4:c0:11:d6:
ad:96:c4:79:d0:a3:27:4a:c0:8f:f9:4a:32:fc:1d:
8a:aa:1d:e4:79:56:bd:3f:a7:7d:da:21:26:bd:01:
b5:00:06:8e:42:ec:46:99:2d:9c:ff:73:4f:e8:d7:
ac:25:84:23:f6:29:c1:1a:51:8e:fd:5f:f6:ce:20:
b9:a5:05:3d:a7:76:02:53:9f:38:d1:8b:ff:1e:cf:
49:d9:42:c3:90:fb:90:6d:1b:28:0a:5f:fe:67:53:
e8:1e:56:ac:67:b4:c3:91:2a:0c:c4:ac:76:87:bd:
95:20:76:49:a3:bf:41:ef:4a:c5:b1:66:7a:43:9a:
53:88:38:f3:4c:96:a1:b8:a0:a9:78:f9:1b:f7:b4:
6d:57:94:01:15:4d:9a:55:0b:bb:70:54:7f:c1:30:
d3:e1:f4:b7:d9:84:d3:7d:95:0d:f6:bb:a8:f4:3b:
90:31:8b:38:99:bf:bc:68:c6:fa:e9:83:26:19:fd:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B4:E4:F0:82:0D:63:89:BA:BA:9E:0B:EB:2C:9B:05:0B:C2:9A:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC1B0374DB1511EFBA3FE98F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:20:24:9b:f2:51:2c:0f:e8:b4:ed:66:d3:dd:ec:eb:ff:c8:
9a:00:a2:9e:de:88:19:78:d3:f1:87:7b:b7:93:cc:95:52:20:
e2:db:93:85:60:b8:bd:8a:dd:3e:cb:c6:9e:d8:03:c1:4b:bb:
f0:c4:8a:71:1e:f7:a0:09:cc:41:37:2c:1c:03:49:25:01:d9:
7e:95:7d:ad:0f:58:9f:fb:a9:b1:5e:31:34:92:42:a5:4f:d9:
54:7c:2f:c5:e2:35:2c:da:17:a0:0b:14:da:2f:3d:f4:e2:17:
ab:15:be:91:43:96:4f:c0:cb:db:f3:69:34:86:f6:e4:a6:e1:
f9:c2:5b:4f:01:12:dd:f2:13:a7:b8:7b:82:a5:89:13:ea:32:
c7:bc:d9:e9:7c:73:46:f5:c4:c6:36:65:4b:1c:51:e8:36:0a:
24:78:f3:48:4a:ec:03:68:ea:85:18:fe:84:19:ba:d8:ac:72:
7f:3a:85:39:f9:f5:12:6e:11:51:c5:22:ec:28:f2:2b:3a:44:
61:9d:5e:c8:67:73:ea:2f:44:14:22:5d:8b:21:b7:52:8e:81:
77:2e:e4:ea:99:e2:b3:bb:3e:07:b6:8d:41:01:7e:25:43:fd:
49:8f:65:fa:b0:6b:50:17:53:8b:bd:62:93:c1:50:3b:03:77:
ec:34:50:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:04:19 2025 by rpki-client