Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B99C98DAEE11EF91B8268B762E951A.roa
File: E7B99C98DAEE11EF91B8268B762E951A.roa (raw, json)
Hash identifier: rht652QQoFMkV4A9yacCSOpr642fDzrS4hJw9dExb48=
Subject key identifier: 3D:49:2B:26:58:52:82:B7:B8:A3:EB:35:B1:69:AC:B3:23:8A:E8:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011133
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B99C98DAEE11EF91B8268B762E951A.roa
Signing time: Sat 25 Jan 2025 07:35:10 +0000
ROA not before: Sat 25 Jan 2025 07:35:06 +0000
ROA not after: Thu 06 Feb 2025 07:35:06 +0000
asID: 395793
IP address blocks: 45.192.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69939 (0x11133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:35:06 2025 GMT
Not After : Feb 6 07:35:06 2025 GMT
Subject: CN=6794942e-ebc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:d7:67:cc:46:96:f6:94:09:f2:73:8e:2c:
7e:77:09:a7:ac:28:ab:32:fa:fb:ae:f0:3b:27:e5:
8e:3e:50:b5:e5:88:a2:30:f4:c5:d8:51:83:67:b4:
09:43:f6:dd:b0:e8:13:45:4e:92:25:1e:48:c2:eb:
9d:54:1d:0c:08:0e:61:2c:1a:b5:49:49:db:fe:d1:
48:7b:9a:76:dc:75:1b:5c:52:77:b0:c4:29:c9:23:
e6:f8:50:ce:53:f6:20:67:bc:92:01:f0:38:d0:af:
8b:94:33:af:39:95:48:38:ab:31:1c:e8:90:d2:53:
6b:e4:13:cc:ea:a3:06:2e:64:88:c0:76:81:95:fb:
c6:36:42:5b:e4:4f:b7:f3:81:f6:1d:19:7f:c4:88:
5a:54:7d:29:58:99:69:ef:70:f4:78:46:14:03:56:
d0:da:ad:f4:20:1b:7e:20:16:b6:9e:6a:cd:0f:04:
54:a7:d1:8e:f1:67:ba:18:da:6a:f0:1e:f6:18:23:
e0:5a:03:af:2d:ca:8f:eb:af:ab:6a:f8:96:14:27:
d2:c5:8d:5f:2f:7a:f5:0e:99:04:6f:32:68:e5:3e:
09:79:0c:dc:87:f7:3e:ca:16:8b:0d:c0:2b:93:dd:
93:94:9a:2d:4c:c4:c5:c8:9d:8c:d4:f8:4e:8b:ca:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:49:2B:26:58:52:82:B7:B8:A3:EB:35:B1:69:AC:B3:23:8A:E8:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B99C98DAEE11EF91B8268B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.227.0/24
Signature Algorithm: sha256WithRSAEncryption
85:77:00:4f:c8:78:df:e1:4b:55:97:1b:07:f6:15:e7:8c:2e:
d6:89:59:81:f1:9b:e0:b7:20:64:4d:61:6a:76:63:94:15:25:
60:98:b3:53:80:89:27:34:e3:c3:91:e4:64:e3:8d:67:69:50:
2b:37:37:a7:a8:08:b1:4f:72:d1:b0:14:fb:42:ae:9e:29:23:
3a:3a:a2:36:ee:81:6f:ac:27:ed:f6:62:51:b0:21:54:98:2d:
52:93:e7:7b:ea:1b:45:b3:33:9b:b7:d7:b1:57:ba:a6:49:f8:
8b:b9:01:00:e4:c2:38:d8:3b:c4:ce:47:45:0d:05:d5:3a:43:
b2:5c:45:6c:48:ea:c8:6f:24:60:35:a5:83:06:78:83:fb:bf:
da:e4:be:07:f0:f5:b0:39:83:36:55:02:ba:93:83:fd:9e:ec:
d7:33:84:13:68:97:15:f3:c8:59:df:37:f0:f7:3c:42:f3:0c:
49:61:36:73:ec:d5:5c:f7:d3:09:f6:cf:4b:e6:e0:24:9c:c9:
15:d7:8d:32:07:40:94:0a:31:85:4d:3e:ab:54:f1:41:88:9f:
aa:a3:6c:99:4d:b5:b9:f4:04:3f:51:56:85:df:e2:54:75:ec:
d6:14:ea:a8:d7:e0:0a:70:e5:02:e2:2e:b9:e5:76:37:a2:47:
84:dd:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:46 2025 by rpki-client