Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA496956DBE411EFB9EF3982762E951A.roa
File: EA496956DBE411EFB9EF3982762E951A.roa (raw, json)
Hash identifier: 7aErLiwss6Dy8Cd4PDUEepJdRmrHsORvhhzZTA1wgpA=
Subject key identifier: BA:3A:7A:15:CA:8B:B5:4C:71:B8:70:6E:BC:06:6D:67:B0:2E:9C:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA496956DBE411EFB9EF3982762E951A.roa
Signing time: Sun 26 Jan 2025 12:56:10 +0000
ROA not before: Sun 26 Jan 2025 12:56:06 +0000
ROA not after: Tue 04 Mar 2025 12:56:06 +0000
asID: 203020
IP address blocks: 45.198.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70564 (0x113a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:56:06 2025 GMT
Not After : Mar 4 12:56:06 2025 GMT
Subject: CN=679630ea-8ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:26:dc:d3:6c:48:d5:43:f1:f6:fa:98:ed:
bd:98:dc:9a:84:ef:81:8c:e1:9d:e5:75:36:d4:5d:
b8:b4:32:70:a1:11:7a:f5:56:65:16:0f:af:56:62:
8b:e5:07:6f:b8:7c:02:8b:f6:20:66:d8:08:15:f8:
91:0e:f2:4d:63:bd:1a:d0:99:ce:1f:ea:7f:eb:e0:
eb:9f:59:c4:d5:89:38:32:a9:0c:eb:c1:bb:82:ef:
3b:6b:ea:ba:46:1b:b4:ff:a5:04:62:bd:2b:08:f2:
ed:94:ac:cd:48:1c:bc:43:7f:2c:50:56:e6:9c:8a:
9c:74:27:4b:4a:ed:65:4b:af:4c:2e:41:6d:7c:7f:
2f:ea:49:d1:4b:3a:28:eb:c3:dc:f5:29:27:04:9e:
36:ba:d5:2d:6c:cd:13:e6:3c:f5:94:fc:dc:16:d1:
94:31:62:0f:60:2b:05:4a:85:9d:76:b1:4b:52:ff:
0e:02:35:ee:3a:7c:83:ad:42:91:8d:26:d8:4f:be:
24:e3:a4:1e:b6:e4:6a:84:1a:d6:18:0a:3f:92:61:
24:88:3d:8e:28:04:a4:4e:9c:fa:df:22:11:d3:45:
36:11:a8:98:97:b7:2e:cf:80:13:ae:df:49:01:4b:
ec:fe:30:46:8a:b1:70:09:49:90:b8:66:ed:3e:f8:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3A:7A:15:CA:8B:B5:4C:71:B8:70:6E:BC:06:6D:67:B0:2E:9C:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA496956DBE411EFB9EF3982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.38.0/23
Signature Algorithm: sha256WithRSAEncryption
45:03:dd:ad:67:d9:a3:32:6b:4a:a0:70:f6:43:7b:42:34:10:
d1:75:22:f5:6d:2a:af:45:65:9b:fb:e3:ef:83:32:0e:7d:ba:
41:55:b2:6d:b3:3f:f2:33:06:f7:fe:6c:46:e5:53:1f:7a:2f:
9d:6d:61:93:d2:71:5c:b3:71:12:09:39:fa:43:d1:fe:59:39:
33:4c:c0:b8:01:6d:dd:99:59:44:a0:2a:45:dd:d6:90:5f:05:
4f:97:c7:6d:04:bb:6c:a2:a7:4d:2e:1b:11:62:ca:44:f1:86:
c8:26:ac:15:56:e2:74:c9:99:7d:7c:57:cd:65:a6:e1:da:01:
48:44:80:5c:5a:cc:c4:47:47:4a:96:4e:8b:4e:e4:13:fa:66:
de:1c:07:81:d1:7d:be:c3:7e:8b:b5:da:0b:fe:4d:ae:cc:34:
24:39:66:0a:1f:00:1f:14:fa:a4:d2:43:5f:11:26:95:f7:82:
54:08:65:28:f0:2a:d8:29:73:a4:6d:f7:be:a8:0a:68:c5:11:
6f:14:e3:18:fd:f0:b0:6c:85:f6:8c:23:d0:1e:a8:c4:34:f8:
55:46:1e:69:f9:59:48:30:d5:f3:1b:aa:5b:22:9c:f6:60:aa:
8f:61:fe:41:e1:4f:28:ce:2c:c5:4b:15:33:21:f5:a4:c3:91:
c1:10:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:12:41 2025 by rpki-client