Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D9019ADBD711EF91463CAC762E951A.roa
File: D6D9019ADBD711EF91463CAC762E951A.roa (raw, json)
Hash identifier: lbiGbjRM3IkR+lDVG4GKLCNW045gWE6x6Hs5RQbENBA=
Subject key identifier: E8:E5:5A:60:12:A2:43:07:56:81:AD:C6:A3:19:10:93:F2:17:20:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011348
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D9019ADBD711EF91463CAC762E951A.roa
Signing time: Sun 26 Jan 2025 11:22:35 +0000
ROA not before: Sun 26 Jan 2025 11:22:26 +0000
ROA not after: Tue 25 Mar 2025 11:22:26 +0000
asID: 6079
IP address blocks: 45.203.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70472 (0x11348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 11:22:26 2025 GMT
Not After : Mar 25 11:22:26 2025 GMT
Subject: CN=67961afb-0fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:03:f9:c2:27:66:ce:2b:43:9d:eb:51:4d:c5:
79:03:d1:1c:21:ba:64:18:ae:6b:11:5e:28:ef:c8:
c4:41:9f:ee:66:71:63:13:fb:3e:73:24:f3:55:32:
66:d9:ff:b6:e6:4b:38:00:b1:9c:0b:27:61:68:94:
6c:f8:a1:e2:92:b5:cc:d6:07:a1:15:8b:1a:0d:59:
2f:c7:82:e0:c3:09:e2:30:9b:11:2d:7c:a6:d7:b3:
b9:6f:33:7c:1c:1a:be:92:b6:c6:a7:1f:c5:a8:70:
9a:6b:35:af:c7:be:24:22:ed:3a:f0:ff:d5:f6:f1:
ba:c1:e2:70:32:06:09:b6:64:09:0f:b1:52:8f:ec:
e3:ae:19:e7:db:f2:ec:d3:7e:56:a1:38:5b:c4:01:
fd:81:ca:0f:46:e4:1c:9e:c1:00:79:14:e7:0c:8e:
de:69:f6:62:9a:f0:bf:b9:c1:ed:b9:ef:09:c2:75:
0b:71:b7:51:4b:76:bc:3b:7f:f4:c2:4f:ab:e9:84:
cc:30:c0:fc:ed:8d:cf:f3:07:f2:c6:cf:d0:a5:32:
d3:3d:5b:28:9b:68:c9:c6:4f:76:dd:c2:8e:c8:a5:
f3:93:01:1c:ba:ca:7f:bd:0d:a0:9e:2e:d4:ee:29:
68:8f:7d:76:c1:fa:ba:4e:ff:a9:cb:53:d9:aa:0e:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E5:5A:60:12:A2:43:07:56:81:AD:C6:A3:19:10:93:F2:17:20:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D9019ADBD711EF91463CAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.222.0/23
Signature Algorithm: sha256WithRSAEncryption
62:e0:4c:85:99:59:e2:18:b7:8c:30:6b:d2:63:df:e5:4b:7a:
a4:b2:66:f5:b6:04:81:03:93:a3:5f:b6:3f:7b:2c:1b:98:e0:
35:08:43:2f:98:5a:26:ce:81:80:1e:b7:78:b0:c6:22:ee:c3:
98:62:65:43:9c:46:3d:80:ab:39:8d:f0:95:27:ed:d1:df:a4:
96:df:6d:ce:3b:4e:76:7a:30:da:e0:5c:e7:c2:23:20:d1:7b:
4b:9e:1b:66:95:09:5c:03:4d:33:b9:91:26:97:64:04:84:10:
50:b8:2b:bb:0c:31:ae:b7:2e:66:3b:19:12:c3:ff:5d:0a:7b:
11:b9:52:1c:41:25:c4:e4:29:46:50:67:1a:4c:b2:e1:a4:35:
b2:eb:01:96:00:b7:12:7d:80:3b:ca:5e:62:c4:b3:92:00:55:
b2:70:c8:f3:19:47:77:c7:87:7e:47:18:09:69:b2:bd:ce:11:
80:d5:00:71:0a:9d:e0:0b:ad:7f:e2:96:b3:92:bb:57:66:76:
5a:b6:b2:1f:32:f3:eb:fe:20:7c:9f:31:30:51:4a:00:2c:a9:
bb:12:be:0f:7d:ce:c4:f1:04:c1:9e:7a:e0:e0:40:64:97:a9:
9e:56:32:f2:41:42:0a:5f:cf:08:d9:ef:b9:1b:ad:9a:31:17:
af:57:10:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:02:13 2025 by rpki-client