Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9820340DBD811EF8331A9B1762E951A.roa
File: E9820340DBD811EF8331A9B1762E951A.roa (raw, json)
Hash identifier: HxptIK+nZQ2Toor1p+Yj90vYx1ddyArCr8KaEIUE6/U=
Subject key identifier: C2:0C:E6:CF:88:61:E3:A4:C8:BD:21:CA:E9:18:42:8B:2C:5F:98:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01134E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9820340DBD811EF8331A9B1762E951A.roa
Signing time: Sun 26 Jan 2025 11:30:15 +0000
ROA not before: Sun 26 Jan 2025 11:30:04 +0000
ROA not after: Tue 25 Mar 2025 11:30:04 +0000
asID: 6079
IP address blocks: 45.203.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70478 (0x1134e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 11:30:04 2025 GMT
Not After : Mar 25 11:30:04 2025 GMT
Subject: CN=67961cc7-d735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:0e:f6:19:fe:55:a9:78:9e:3a:0b:26:45:
4f:fa:a8:4a:2f:f1:63:a4:a8:9b:da:0a:4b:bb:57:
5e:83:54:2f:58:bf:c1:08:90:ed:44:cf:ec:97:fd:
4e:d9:71:7e:0a:af:21:bd:0b:d4:fe:a2:15:da:06:
cc:36:6d:8f:38:cf:12:66:ea:ed:35:4b:cb:fb:b1:
ab:4c:d5:9a:02:b3:ae:b2:25:e6:d7:69:97:e2:91:
93:95:b9:2f:4c:b7:4b:59:30:a7:77:0e:5d:0a:01:
09:70:0e:4b:75:fb:f0:d3:3f:97:9c:db:fe:71:31:
bd:64:db:ff:16:c5:2d:43:43:f2:33:0e:17:fb:29:
ad:c4:15:10:69:d6:cc:64:81:e7:60:70:22:b6:58:
de:db:6c:36:18:3e:4d:1c:a4:29:4b:df:d4:c1:fd:
7a:38:25:1e:21:a3:31:8e:ca:cc:13:92:b4:c0:c4:
fe:74:26:21:b4:7d:6a:2f:33:29:c8:35:e4:93:d4:
ca:8f:71:03:2b:d6:5b:e4:73:9e:e8:eb:f5:05:f4:
51:a2:5b:45:a4:89:09:eb:9c:8d:a8:9a:8f:68:89:
87:a2:ae:1d:c1:56:62:fe:f5:df:75:af:e4:dd:43:
98:05:31:29:58:24:48:13:c0:68:e7:9c:4e:28:f1:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0C:E6:CF:88:61:E3:A4:C8:BD:21:CA:E9:18:42:8B:2C:5F:98:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9820340DBD811EF8331A9B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.252.0/22
Signature Algorithm: sha256WithRSAEncryption
62:8b:36:2c:3b:84:7c:a2:25:41:52:ff:fc:e2:79:31:e1:33:
30:11:24:56:e2:29:7a:2d:ec:01:c8:0d:bc:22:9e:95:fd:e6:
24:55:ba:0d:0f:43:33:25:a3:cb:6e:e7:ab:f0:07:11:1d:41:
77:8d:e0:7b:c2:1a:c7:12:2c:df:14:90:b9:4a:40:40:31:27:
5e:34:51:86:23:ac:c6:8c:a2:87:c3:25:48:43:66:67:d2:b6:
d2:da:0e:5b:1a:2c:6d:e5:7c:ff:87:de:eb:07:2c:1c:f2:88:
6d:90:ca:61:4a:33:ab:40:14:6a:50:d6:2a:15:a9:78:70:2d:
30:2b:2f:51:a6:23:ce:ab:6a:9c:09:9f:52:44:61:e0:2d:d1:
c4:1d:66:96:13:f2:63:c2:8f:d7:f7:25:24:f7:63:e4:33:f2:
94:c6:9a:18:16:73:b9:97:38:85:80:f9:7f:66:8f:05:49:03:
d9:c9:cf:64:59:26:27:60:84:67:8b:f7:4e:df:fc:97:05:b8:
1e:f5:d4:4a:37:9a:da:46:6c:7b:78:d8:ff:25:e2:65:07:f5:
dc:07:70:96:1e:09:bf:02:c1:98:70:28:f9:7a:ad:a5:de:c7:
fb:ce:e1:01:df:ba:19:df:80:3a:10:59:6f:0a:1f:4a:b6:27:
db:1e:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:40:42 2025 by rpki-client