Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD3CD586DB2711EF9BE3DE89762E951A.roa
File: CD3CD586DB2711EF9BE3DE89762E951A.roa (raw, json)
Hash identifier: K/VUsUgE+Qw2UWKjf/An4W61dk5+Q2SV46oxYO5abd8=
Subject key identifier: 9F:72:04:6B:DC:EF:29:2A:17:0D:20:34:21:5F:D6:3B:07:08:E5:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01127F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD3CD586DB2711EF9BE3DE89762E951A.roa
Signing time: Sat 25 Jan 2025 14:22:27 +0000
ROA not before: Sat 25 Jan 2025 14:22:23 +0000
ROA not after: Wed 05 Feb 2025 14:22:23 +0000
asID: 395793
IP address blocks: 45.192.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70271 (0x1127f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 14:22:23 2025 GMT
Not After : Feb 5 14:22:23 2025 GMT
Subject: CN=6794f3a2-635b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:a7:d6:df:b8:80:5f:b0:b6:0d:80:28:9f:
8c:14:59:e3:84:ee:dc:ae:26:67:de:8c:e9:74:c2:
53:73:2c:41:9b:af:98:5b:63:b7:57:45:18:ec:01:
68:95:83:ab:35:48:60:ce:be:72:ff:83:c9:9c:90:
cb:b3:c2:50:b4:bc:2b:ee:c2:bc:a3:ad:74:8e:62:
91:1e:fd:82:e9:54:ef:46:b9:0b:e7:11:c3:dd:db:
94:09:1f:1d:43:9c:50:14:0f:d8:09:34:db:82:2d:
ef:45:e2:cf:cb:1a:e2:45:ad:4a:44:55:a8:db:96:
38:76:4d:bd:2f:f7:1f:c2:86:f8:ef:dc:09:7b:9f:
54:72:37:e0:6d:77:3e:43:94:67:9f:42:0b:06:c4:
35:3c:a7:46:d7:4c:c4:a5:75:0e:88:78:26:ca:e5:
66:56:1e:91:eb:49:26:cb:8f:2b:59:d9:10:75:ef:
4b:4e:79:15:9f:c7:c5:d9:45:83:6d:74:c5:01:c5:
b4:8c:49:0f:2f:1c:e9:18:a3:c0:5e:b2:05:f9:96:
71:99:49:d1:a9:9e:6d:37:19:fe:87:81:c4:0c:97:
8a:d7:33:ce:14:81:58:0a:0a:13:e5:ce:36:6d:d8:
2c:dc:3c:0c:31:2a:8b:70:7c:2c:2b:11:6a:25:fc:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:72:04:6B:DC:EF:29:2A:17:0D:20:34:21:5F:D6:3B:07:08:E5:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD3CD586DB2711EF9BE3DE89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.166.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ec:cd:e9:b5:d5:4c:60:6e:2a:63:c8:2d:d0:56:2f:92:cd:
06:99:f6:c8:a5:d8:20:df:d3:ab:3b:72:62:83:f8:cf:97:c9:
bb:6e:4f:8b:07:51:39:59:60:42:a8:d7:53:66:9c:aa:0e:48:
9a:22:59:e9:99:e0:b8:9c:4a:0c:1b:da:b9:ac:03:ff:c0:d1:
61:c5:cd:8c:08:d5:60:57:3e:0e:fa:47:80:be:d4:3d:27:e9:
2b:3c:da:d4:e5:b0:10:bb:2c:ce:b5:35:ee:32:84:18:21:c6:
13:ab:e6:b9:20:36:46:fa:09:bc:9e:ed:bb:10:ce:9e:8a:b2:
cb:72:d3:8c:d1:c9:58:af:39:50:ea:b4:6d:78:0b:fc:9f:d0:
8e:eb:be:80:9d:27:a7:d9:77:d4:a6:dc:4f:ee:81:6c:38:63:
e4:ae:8b:78:b6:25:20:79:f2:38:2a:2f:a7:8f:2f:59:9d:70:
76:f4:7a:ce:17:e0:4a:a6:8c:35:07:62:4e:8e:a5:75:95:5e:
8a:0e:a1:9b:1c:39:44:95:5f:bc:09:bb:cf:ab:c9:c8:e2:18:
02:90:3c:34:85:e1:f9:1f:7d:a5:c8:12:f1:43:16:0b:21:a7:
76:aa:5b:3b:5e:37:84:da:36:09:be:51:71:be:68:ec:ca:32:
59:52:ce:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:35 2025 by rpki-client