Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E755D070C3E011EFB57FDDA6762E951A.roa
File: E755D070C3E011EFB57FDDA6762E951A.roa (raw, json)
Hash identifier: UkzJ6i/FBA3k6mL5CeO8oFzDx2wQJMz1PN47xzQA3Uk=
Subject key identifier: 7F:F7:8C:F4:39:19:7E:D7:AC:46:A1:6D:88:01:26:78:8D:0E:34:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E755D070C3E011EFB57FDDA6762E951A.roa
Signing time: Thu 26 Dec 2024 23:26:59 +0000
ROA not before: Thu 26 Dec 2024 23:26:55 +0000
ROA not after: Fri 12 Dec 2025 23:26:55 +0000
asID: 984
IP address blocks: 45.192.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61173 (0xeef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 23:26:55 2024 GMT
Not After : Dec 12 23:26:55 2025 GMT
Subject: CN=676de643-6d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:b0:8e:dd:df:51:72:8e:fa:90:0a:ee:8f:
ac:e6:23:a3:fc:69:32:e7:84:1c:92:84:db:63:de:
9b:cd:47:0a:ee:47:74:60:c3:bb:77:27:d7:12:74:
b3:f9:b9:f3:43:e0:f2:a2:0a:eb:52:0e:8c:1c:43:
ab:07:80:11:e0:aa:ce:72:4d:81:39:5c:65:d6:e1:
f0:1b:f2:0a:35:c4:59:6f:c7:d7:1e:38:fb:4c:28:
77:8d:56:1f:de:b9:70:40:07:d3:06:4f:c5:99:12:
99:bb:0f:8c:6a:b8:f6:ef:df:1a:9a:07:f8:ec:ae:
db:ef:92:cb:1f:02:e9:e9:ae:7a:db:0d:57:37:53:
f4:72:81:92:a7:4d:a0:2c:cf:5d:e5:b4:7c:97:88:
ad:64:03:31:98:53:62:75:0f:c6:d1:9c:5a:10:39:
5f:5d:cf:c5:1b:8e:5b:eb:9f:63:0e:e6:37:9f:a9:
62:cc:cf:2d:f4:ad:98:80:9a:6a:f3:ec:2f:1a:a8:
ef:94:7b:0c:d6:7c:b1:8e:a2:f2:4b:0b:b8:5d:bb:
80:78:a7:a8:06:82:1d:c1:c8:d3:33:e2:46:c8:f6:
7e:2e:eb:06:0e:16:9d:6e:0b:58:05:ef:b4:e4:16:
5f:ae:2e:46:08:69:36:64:5d:8f:c5:86:b7:de:86:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F7:8C:F4:39:19:7E:D7:AC:46:A1:6D:88:01:26:78:8D:0E:34:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E755D070C3E011EFB57FDDA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.167.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c1:ba:33:a3:72:4a:c1:62:60:ef:04:4f:f7:bc:9b:93:73:
ab:70:14:63:1b:4c:dc:a6:a6:ad:78:5f:48:29:8d:59:5b:18:
f2:1d:b2:89:ad:f2:b4:b1:fe:7a:a4:d4:9f:b2:7a:db:25:64:
46:4e:67:96:cc:d1:96:36:61:c8:a2:c7:95:76:db:45:a3:b9:
87:31:2e:8e:ad:b2:b1:13:f5:86:04:61:2d:25:2f:db:a1:e9:
b6:8b:d7:b4:4a:4f:f6:b3:78:79:1e:b8:ef:ea:16:2a:0e:c7:
75:e6:39:c6:3f:7d:7a:08:fb:48:05:50:0f:67:59:ce:32:8e:
e7:fb:26:f5:f9:98:df:31:4e:2b:28:be:f6:ee:c6:8e:a7:a2:
17:3d:4c:fb:cd:da:16:a6:0f:2e:9e:29:51:24:2d:40:c4:e2:
e4:32:96:6d:42:80:05:f2:f8:5b:7b:6c:d2:cb:21:8e:2e:49:
00:9e:83:6d:86:a0:77:d2:3b:a1:0b:94:1e:0a:0e:01:b1:cf:
27:8d:d6:53:c0:c2:76:2a:80:50:e8:63:22:3b:b4:49:39:43:
85:c5:ea:83:4c:02:73:ed:9d:67:ab:72:5a:af:f4:12:9e:02:
18:1a:fc:b9:7c:18:2c:73:64:d4:06:1e:5c:ec:ae:aa:19:e1:
97:94:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:54:25 2025 by rpki-client