Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBEA02AEDD5F11EFBFB8A981762E951A.roa
File: DBEA02AEDD5F11EFBFB8A981762E951A.roa (raw, json)
Hash identifier: VGCH7lAWpfsmy9ZG6G3q94Ql1Ga6MM//iPTN4HP9wVM=
Subject key identifier: 11:C4:E7:96:A0:21:8B:96:04:5E:C7:EC:E7:93:23:1A:3D:B3:0D:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011578
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBEA02AEDD5F11EFBFB8A981762E951A.roa
Signing time: Tue 28 Jan 2025 10:08:45 +0000
ROA not before: Tue 28 Jan 2025 10:08:42 +0000
ROA not after: Sun 09 Feb 2025 10:08:42 +0000
asID: 39600
IP address blocks: 45.196.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71032 (0x11578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 10:08:42 2025 GMT
Not After : Feb 9 10:08:42 2025 GMT
Subject: CN=6798acad-2557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:29:30:55:39:29:57:19:e5:5b:3a:a6:2f:
fb:d3:e0:4b:45:47:80:a6:21:0c:7d:3c:aa:41:5b:
f6:ad:66:c6:ac:e9:a4:38:2b:36:8e:46:ce:88:90:
13:4f:79:44:94:27:0a:95:23:c0:93:96:11:dc:f7:
1a:8a:08:92:73:e4:62:bc:fc:07:c3:9d:13:4d:d4:
01:23:80:b3:1d:9f:cd:32:cb:bb:d6:9c:f9:cf:b4:
df:63:81:45:25:c3:a3:4a:4f:d5:28:7c:09:82:67:
d5:25:fb:e3:9d:cb:c8:a9:17:5b:49:a5:93:a2:ab:
fa:67:99:17:e4:5e:3d:26:d5:92:b0:7c:ed:ee:c5:
91:78:fb:3e:25:e3:0e:41:b1:02:c8:c0:39:50:2f:
01:85:c8:79:8f:21:46:bb:f4:14:9a:72:45:55:67:
60:72:7d:90:be:0f:53:06:3e:1b:b3:5a:8a:2d:ff:
33:1d:e4:36:b0:08:28:53:95:fd:47:94:6d:7d:d4:
7b:30:a7:d4:09:be:82:b7:23:f0:b2:a0:f9:11:51:
38:a3:fa:80:20:c5:2f:e9:af:5b:a3:37:a5:5e:10:
0b:02:37:eb:26:a0:0a:4b:21:b3:06:f9:b7:83:49:
a9:73:44:df:ce:1d:f1:0e:23:16:f2:3e:de:66:40:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C4:E7:96:A0:21:8B:96:04:5E:C7:EC:E7:93:23:1A:3D:B3:0D:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBEA02AEDD5F11EFBFB8A981762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.128.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:82:28:a9:14:e8:b7:7a:ff:b1:7d:44:76:17:ee:a6:56:37:
93:09:d9:d0:6e:3f:d3:38:bc:12:ff:0a:cc:05:a6:b0:fa:13:
ec:b7:75:80:c8:36:cf:10:1f:0c:ff:e0:33:28:a1:74:27:1b:
8e:c9:54:be:22:39:ba:a7:ae:94:4c:69:7a:2e:4a:54:73:2b:
ba:9c:fd:de:ac:a4:36:0b:c6:a3:24:b0:46:bd:4e:26:17:d9:
0c:27:1d:6e:aa:66:33:fc:d0:d7:32:55:5a:60:94:24:76:8d:
8c:50:d8:ee:17:cc:d6:1a:64:38:12:9c:6f:d1:b6:aa:38:8e:
91:f1:7c:49:d7:72:73:c8:fc:fd:db:2a:a6:b5:7e:81:7f:e8:
c4:6d:2e:39:b1:d3:1c:db:82:9b:59:7b:69:65:c3:8e:67:31:
22:4c:db:0f:d6:7e:86:ad:9d:78:0c:a1:c3:1a:de:02:50:52:
ef:f9:74:ea:31:31:7a:b7:5f:2b:4a:17:a4:1f:e2:65:bb:75:
73:c7:63:4c:b8:e8:f0:f7:a7:57:4f:fa:e7:c9:48:5e:4a:23:
4d:db:15:e4:67:f5:9a:dd:8f:f0:b9:57:5e:71:be:1d:98:21:
af:b1:cc:43:06:02:25:4f:74:83:56:38:c8:3a:4a:a7:a1:b9:
a3:25:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:43:23 2025 by rpki-client