Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E76BEC08DC1711EFB1138A55762E951A.roa
File: E76BEC08DC1711EFB1138A55762E951A.roa (raw, json)
Hash identifier: 4fFOq3GPEWtmn6dkUczD4Wg9fdAsXOtVaydJWxk50a8=
Subject key identifier: 43:91:C5:61:5F:B9:60:E8:4E:1A:0D:5F:02:8C:80:CD:E5:B8:F6:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011444
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E76BEC08DC1711EFB1138A55762E951A.roa
Signing time: Sun 26 Jan 2025 19:01:10 +0000
ROA not before: Sun 26 Jan 2025 19:01:06 +0000
ROA not after: Fri 07 Feb 2025 19:01:06 +0000
asID: 11331
IP address blocks: 45.204.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70724 (0x11444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 19:01:06 2025 GMT
Not After : Feb 7 19:01:06 2025 GMT
Subject: CN=67968676-03a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:fb:4a:b1:c2:e2:41:73:65:d5:fe:f5:5f:
d0:2f:eb:12:60:1d:2e:47:bb:5e:49:92:84:f7:d5:
15:55:ac:dc:26:94:f4:62:04:6d:5c:33:dc:81:a3:
e4:79:16:ef:9d:55:82:de:1e:21:7d:ec:16:3d:ea:
a5:c3:31:9c:ff:cd:99:1c:20:63:c5:f3:09:02:1d:
cf:98:b0:82:32:76:1f:4b:88:21:83:53:1f:99:dc:
89:8c:a7:b3:f3:30:3c:d4:10:19:30:39:8d:7b:b4:
42:6a:b1:d7:78:8d:b7:b3:61:0c:84:4f:c5:cf:66:
1f:90:af:2e:77:e1:f6:dc:4d:af:b3:18:a4:c4:bf:
17:14:7c:f2:a5:59:e1:56:fe:96:71:1b:11:7c:04:
cb:cc:65:0b:4f:bf:85:d2:4c:89:1f:36:26:fd:df:
aa:19:95:55:5c:fd:59:3e:d1:9f:3c:c1:22:2b:c9:
e4:01:3b:a8:51:fe:7e:44:9b:07:25:f8:81:61:0d:
1b:23:ca:1e:b7:2a:28:ca:43:a1:2d:e1:ba:38:54:
16:60:7e:a6:b4:61:6b:4b:ba:21:37:56:dc:fc:f2:
7f:a9:45:a0:09:09:ed:92:e3:1d:28:d8:08:12:4e:
f4:61:6c:56:6a:d8:e5:e8:2f:6c:df:54:19:71:bb:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:91:C5:61:5F:B9:60:E8:4E:1A:0D:5F:02:8C:80:CD:E5:B8:F6:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E76BEC08DC1711EFB1138A55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.112.0/20
Signature Algorithm: sha256WithRSAEncryption
34:fc:a9:1d:36:bb:95:eb:65:82:86:58:61:17:5d:a4:4a:ff:
c6:a8:bc:e4:98:c3:ca:01:ce:43:20:f7:c1:57:00:a7:27:ec:
b0:cc:d1:4e:e9:55:e4:05:51:99:9a:89:07:a2:ed:d1:c2:0b:
7d:21:89:3a:3c:cb:6a:89:c4:6a:bf:6b:ec:94:c2:bc:41:bb:
74:95:26:ec:3e:6b:67:59:e4:df:45:1b:c9:7d:9c:42:af:ba:
1a:52:11:7a:45:b4:75:ce:ab:2a:22:1c:41:9c:60:d4:31:bf:
c9:8f:72:ce:8c:7a:21:34:e5:d7:13:f7:61:35:0c:7a:45:06:
66:db:f6:36:ef:8c:94:6c:db:2f:56:3c:af:08:d4:18:d0:9d:
96:8f:12:b2:f7:07:e9:7e:92:cc:9a:34:c2:59:de:0a:8c:a9:
c2:39:28:a8:e6:c8:5f:11:a0:30:34:a1:e6:84:3a:52:cf:bf:
75:09:b8:9f:22:d1:71:ed:01:75:10:fe:09:85:59:5d:35:7a:
03:bc:3f:44:6a:4c:67:d4:0a:1c:f8:be:33:57:a8:5b:56:48:
29:4d:55:9f:04:51:b9:6f:71:e9:91:c2:9f:b2:50:08:4c:f5:
8f:89:15:b7:18:74:06:37:c9:81:e6:f7:99:26:61:e2:d6:a4:
5a:eb:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:04:22 2025 by rpki-client